iOS 14 Apple Pay: going the distance with Ultra Wide Band Touchless and QR

It’s that time of year again to look into the WWDC crystal ball and see what changes might be in store for iOS 14 Apple Pay. 2019 was an exciting year with the important Core NFC Read-Write additions for ISO 7816, ISO 15693, FeliCa, and MIFARE tags. Since then we’ve seen iOS apps add support for contactless passports, drivers licenses, retail and manufacturer vicinity NFC tags, transit ticketing, badging, and more. Some expectations ended up on the cutting room floor. The NFC tag Apple Pay feature that Jennifer Bailey showed back in May 2019 has yet to appear. Apple Pay Ventra and Octopus transit services slated for 2019 and iOS 13 failed to launch, as of this writing, still delayed.

Predicting anything in 2020 is risky business because of the COVID-19 crisis. iPhone 12 might be delayed, iOS 14 might be delayed, features brought forward, pushed back…all plans are up in the air, even WWDC. Some developments are clear, but timing is opaque. What follows is based on: (1) NTT Docomo announcement of Ultra Wideband (UWB) ‘Touchless’ Mobile FeliCa additions and JR East developing UWB Touchless transit gates, (2) CarKey and the Car Connectivity Consortium Digital Key 3.0 spec and (3) Mac 9to5 reports of AliPay coming to iOS 14 Apple Pay.

Going the distance
The NFC standard has been around a long time, long before smartphones, conceived when everything was built around close proximity read write physical IC cards. The standards have served us very well. So why are NTT Docomo and Sony (Mobile FeliCa) and NXP (MIFARE) adding Ultra Wide Band + Bluetooth into the mix?

Ultra Wide Band + Bluetooth delivers Touchless: a hands free keep smartphone in pocket experience for unlocking a car door, walking through a transit gate or paying for takeout while sitting in the drive thru. It’s the same combo that powers Apple AirTags. UWB Touchless delivers distance with accuracy doing away with “you’re holding it wrong” close proximity hit areas necessary when using NFC. With Touchless your iPhone is essentially a big AirTag to the reader,

For Apple Pay Wallet cards it means hands free Express Card door access, Suica Express transit gate access and payments that ‘just work’ by walking up to a scan area or car. As Junya Suzuki pointed out recently, UWB Touchless is passive compared to the active NFC ‘touch to the reader’ gesture and will live on smartphones, not on plastic cards. Those will remain limited to NFC which does not require a battery.

Secure Element evolution and digital key sharing
The addition of UWB Touchless however means that the secure element, where transaction keys are kept and applets perform their magic, has to change. Up until now the secure element worked hand in glove with the NFC controller to make sure communications between the reader are secure and encrypted. For this reason embedded secure elements (eSE) usually reside on the NFC controller chip.

Apple chose to put a Global Platform certified Apple Pay eSE in their own A/S series chips. The arrangement gives Apple more control and flexibility, such as the ability to update secure element applets and implement features like global NFC. The addition of UWB Touchless in FeliCa and MIFARE means both smartphone and readers need new hardware and software. Apple already has UWB in the U1 chip on iPhone 11. Mobile FeliCa software support could be coming with the next generation ‘Super Suica’ release in the spring of 2021 that requires updated FeliCa.

Recent screen images of a CarKey card in Wallet…with Express Mode can we call it Suicar?

The arrival of UWB Touchless signals another change in the Secure Element as shown in middle CarKey screen image: digital key sharing via the cloud where the master key on the smartphone devices ‘blesses’ and revokes shared keys. Mobile FeliCa Digital key sharing with FeliCa cards and devices was demonstrated at the Docomo Open House in January, also outlined in the Car Connectivity Consortium (CCR) Digital Key White Paper. An interesting aspect of the CCR Digital Key architecture is the platform neutrality, any Secure Element provider (FeliCa, MIFARE, etc.) can plug into it. Calypso could join the party but I don’t see EMV moving to add UWB Touchless because it requires a battery. EMV will probably stick with battery free NFC and plastic cards.

Diagram from Car Connectivity Consortium (CCR) Digital Key White Paper

The QR Code Equation
There is another possible eSE change for Apple Pay. A few weeks ago a reader asked for some thoughts regarding the AliPay on iOS 14 Apple Pay rumor with a link to some screen/mockup images on the LIHKG site. Before getting to that it’s helpful to review some key Apple Pay Wallet features for payment cards: (1) Direct Face/Touch ID authentication and payment at the reader, (2) Device contained transactions without a network connection, (3) Ability to set a main card for Apple Pay use.

The images suggest a possible scenario implementing AliPay in iOS 14 Apple Pay:

  • AliPay has a PassKit API method to add a ‘QR Card’ to Wallet.
  • Wallet QR Card set as the main card is directly activated with a button double-click for Face/Touch ID authentication and dynamic QR Code payment generation in Apple Pay.
  • Direct static QR Code reads activate AliPay Apple Pay payment.

If Apple is adding AliPay to the ranks of top tier Wallet payment cards, they have to provide a way in. The new “PKSecureElementPass” PassKit framework addition in iOS 13.4 could be just that. Instead of PassKit NFC Certificates, the additions suggest a Secure Element Pass/certificate. Secure Element Certificates instead of NFC Certificates. The burning question here is does AliPay have a Secure Element Java Card applet performing transactions with keys and without a network connection? If so we have QR Wallet payment cards. Direct Apple Pay Wallet QR integration would open up things for 3rd party (non bank) payment players. QR integration might also help Apple skirt NFC monopoly allegations that got Apple Pay in trouble the Swiss government.

Dual Mode and flexible front ends
The addition of QR and UWB with NFC for payments opens up a long term possibility suggested by Toyota Wallet. The current app lets the user attach a QR code app payment method and/or a NFC Wallet payment method to an account. It’s intriguing but clunky. Wallet QR Payment support would allow Toyota Wallet to move the entire payment front end to Wallet and let the user choose to add one or both.

It’s the latter that interests me most. Instead of having separate NFC and QR payment cards from the same issuer for the same account, I’d much rather have one adaptive Wallet card that smartly uses the appropriate protocol, QR, NFC, UWB for the payment at hand. Capable, flexible, smart. This is what digital wallets should do, things that plastic can never achieve. Let’s hope Apple Pay Wallet makes it there someday.

Advertisements

Transit Cards on Mobile

Recent Hong Kong rumors say the long delayed Apple Pay Octopus will finally launch in March April 2020 along with the recently announced Apple Pay support for Guangzhou, Shenzhen and Foshan China T-Union transit cards. The rumors also suggest that putting China T-Union cards on Apple Pay is easier than Octopus. Is this true? Let’s take a look.

The chart below lists native transit cards on mobile digital wallets by service launch year, limited to reloadable virtual transit cards already in service or formally announced by wallet platform vendors (Apple/Google/Samsung/etc.) and/or transit operators. Best viewed in landscape mode.

YearCardAreaOperatorOS/Digital WalletNFCProtocol
2006Mobile SuicaJapanJR EastOsaifu Keitai/SymbianFMobile FeliCa
2011Mobile SuicaJapanJR EastOsaifu Keitai/AndroidFMobile FeliCa
2015TmoneyKoreaTmoney Co. LtdSamsung PayAMIFARE
cashbeeKoreaEB Card Co.Samsung PayAMIFARE
2016Mobile SuicaJapanJR EastApple PayFMobile FeliCa
China T-UnionChinaVariousHuawei Pay/Samsung PayAPBOC 2.0
2017Beijing/Shanghai TransitChinaBMAC/SPTCCApple PayAPBOC 2.0*
2018iPassTaiwaniPass Co.FitBit Pay/Garmin PayAMIFARE
EasyCardTaiwanEasyCard Co.Garmin PayAMIFARE
HOPPortlandTriMetGoogle PayAMIFARE
Smart OctopusHong KongOCLSamsung PayFMobile FeliCa
2019HOPPortlandTriMetApple PayAMIFARE
Smart OctopusHong KongOCLApple Pay (announced/delayed)FMobile FeliCa
VentraChicagoCTA/CubicApple Pay (announced/delayed)AMIFARE
Mobile mykiVictoriaPublic Transport VictoriaGoogle PayAMIFARE4Mobile
2020ShenzhenGreater Bay RegionShenzhen Tong LimitedApple Pay (announced)APBOC 3.0 (?)
GuangzhouGreater Bay RegionGuangzhou Yang Cheng Tong LimitedApple Pay (announced)APBOC 3.0 (?)
FoshanGreater Bay RegionApple Pay (announced)APBOC 3.0 (?)
SmarTripWashington DCWMATA/CubicApple Pay (announced)AMIFARE
EasyCardTaiwanEasyCard Co.Samsung PayAMIFARE
VentraChicagoCTA/CubicGoogle Pay (announced)AMIFARE
Mobile PASMOTokyoPASMOOsaifu Keitai (announced)FFeliCa

Transit card payment mobile protocols are FeliCa, MIFARE and PBOC 2.0/3.0, the later is the Chinese variant of EMV which uses Type A NFC with the slowest grocery store checkout transaction speeds of the three protocols:

Each card organization has formed its own specifications based on the EMV specification based on its own business refinement and expansion, such as China UnionPay’s PBOC 2.0 specification…PBOC based on the EMV standard, combined with the needs of domestic banks, the People’s Bank of China promulgated the PBOC series of standards:
1 PBOC1.0: e-wallet / electronic passbook / magnetic stripe card function
2 PBOC 2.0: E-wallet extension application, debit/credit application, personalization guide, contactless IC card standard
3 PBOC 3.0: Cancel e-wallet and electronic passbook application, cancel downgrade transaction, multi-algorithm extension, multi-application extension, mobile payment standard

Super Lu

Compared to other contactless smartcards in use, the data transmission of <China T-Union> Yang Cheng Tong is criticized by commuters that it takes 1~2 seconds between the card and reader to complete the transaction, though the operator claims that the data communication only takes 0.5 seconds in its official site.

Wikipedia Yang Cheng Tong
YouTube comment lucidly explains the speed differences between NFC types (blocked outside of Canada)
This Wikipedia chart needs to be updated but illustrates how many China T-Union cards there are

Some China transit cards used FeliCa and MIFARE protocols in the past but have been migrated to the PBOC 2.0/3.0 China T-union card spec for interoperable transit cards that work across the country, similar to what Japan has with Suica, ICOCA, PASMO, etc. Mobile FeliCa developed by Sony and NTT Docomo has been around the longest and works across multiple mobile hardware platforms from Symbian handsets, to Android, to iOS/watchOS. MIFARE and PBOC 2.0 have a shorter history on mobile. The key period is 2015~2016 which saw transit card debuts on Apple Pay, Samsung Pay and Huawei Pay. Initial Apple Pay support for Beijing and Shanghai transit cards was listed as beta on iOS 11.3. An NFC engineering source said the early Apple implementation was not the full PBOC 2.0 spec, apparently fixed in iOS 12.3 when the beta label was removed.

One of the biggest advantages of transit cards in digital wallets is the freedom of anywhere anytime recharge with credit/debit cards; transit users are no longer chained to station kiosks to recharge plastic smartcards or renew a pass. The more payment options supported on the recharge backend, the more convenient. These are great customer features, so why is it taking so long to get transit cards on mobile in America and Europe when there are many China T-Union transit cards already on mobile?

Many transit card fare systems outside of Asia are managed by Cubic Transportation Systems, including Oyster, Opal, Clipper, OMNY, Ventra and SmarTrip to name a few. Cubic and operators like Transport for London and Transport for NSW have focused primarily on Open Loop EMV card support as a mobile solution instead of native virtual transit cards.

Publicly run transit system resources are usually limited so using bank cards for open loop transit is seen as a way to reduce system costs. The downside is that banks get a cut from transit gate transactions and transit cards for mobile are slow in coming, if at all. Cubic’s very first virtual transit card effort, the long delayed Apple Pay Ventra, is all the evidence you need when open loop is a priority and transit cards are not. Despite the recently announced Google Pay and Cubic alliance, I think transit cards on mobile will continue to arrive in a slow trickle. Let’s face it, HOP is the only American transit card that has gone mobile so far, and it’s not managed by Cubic. It’s the same story in Australia with Melbourne myki Google Pay.

Putting aside the open loop fad for a moment, I think the large deployment of China T-Union cards on mobile comes down to one simple thing that has nothing to do with protocols or smartphone hardware: all China T-Union cards share a common recharge backend cloud provided by Union Pay. It’s the reason why China T-Union sports a similar logo, the Union from Union Pay, and can only be recharged with a Union Pay card. It’s all one package. From Apple Support:

Here’s what you need to create a new Beijing Transit or Shanghai Transit card in Wallet to use with your iPhone:
An iPhone 6, iPhone 6 Plus, or later, set up with Face ID, Touch ID, or a passcode
A China UnionPay debit card for Beijing, or a China UnionPay credit or debit card for Shanghai that you’ve added to Wallet

Add a Beijing or Shanghai transit card to Apple Pay

A common recharge backend cloud shared by all transit cards with the same card architecture makes hosting virtual cards much easier, the various transit operators don’t have to host everything directly or build a cloud backend from scratch, and there’s nothing to negotiate because Union Pay is the only payment network.

China T-Union in the cards for Hong Kong Octopus?
China T-Union illustrates the power a national transit card standard backed with a shared cloud resource but it’s a straightjacket: Union Pay is the only payment network allowed. The real interesting development here is that QR Codes (AliPay/WeChat Pay) for transit, and everything else, are mainstream in China. There are many reasons for this outcome but on the transit gate QR Codes and PBOC-EMV transit cards are pretty much the same speed. There isn’t enough difference to care, and AliPay/WeChat Pay represent a choice outside the Union Pay straitjacket with all kinds of incentives to use QR.

Another interesting development is the pressure from QR Code players like Alipay for a piece of MTR transit gate action, and the Greater Bay Area transit card negoiations with Yangchengtong on the Hong Kong MTR/Octopus Card Limited mobile strategy roadmap. QR is mobile only of course, but a dual mode FeliCa/PBOC card approach for the Greater Bay Area is much cheaper and easier to implement on mobile than plastic.

Unfortunately in the face of pressure MTR/OCL, a world leading transit platform business model and innovator, has been surprisingly slow rolling out virtual Octopus cards on digital wallets to encourage the migration from plastic cards with new kinds of mobile services. It’s a troubling turn of events because OCL has had all the necessary transit on mobile infrastructure in place to move forward quickly for some time.

The recent Hong Kong protests followed now by the coronavirus crisis are certainly slowing things down. In the end however, growing mobile services is the best way forward for Octopus to remain a viable Hong Kong MTR business in these uncertain times. Because if it does not, Octopus risks becoming just another China T-Union card. Put it this way, if OCL doesn’t innovate and invest it its future as a world’s leading transit platform, it does not have one.

Taiwan EasyCard coming to Japan

This is an interesting development, Bank of the Ryukyus announced support for Taiwan EasyCard (aka Taiwan’s Suica). The press release is a little vague but says this is a co-venture for Bank of the Ryukyus to build….wait for it…another contactless payment platform for Japan. A separate Nikkei article (Japanese) quotes Bank of Ryukyus as having 7000 stores in Okinawa lined up and ready to go by March with a service launch planned in July. The long term plan is extending EasyCard payments beyond Okinawa to other areas in Japan. There is no mention of transit support.

This will be a boon for inbound visitors from Taiwan, especially Samsung Pay users because it will support EasyCard. Apple Pay and Google Pay support of EasyCard is rumored to be coming…”later” which can mean anything, but all 3 digital wallet platforms support the EasyCard MIFARE format. Now that EasyCard is coming to Japan, I wonder if Suica can go to Taiwan, or how about Octopus support in Japan. This kind of mix and match business opportunity is what global NFC smartphones are all about.

And in other Okinawa related good news: inbound Apple Pay Suica users, and other major transit IC cards are finally accepted on the Okinawa Monorail starting March 10.

MTA OMNY Apple Pay Express Transit User Problems

Apple’s decision to offer Apple Pay EMV style Express Transit as a iOS 13 feature when adding cards to Wallet may not have been a good idea after all, especially on the work-in-progress mixed environment that is MTA OMNY. Manual swipe MetroCards will be around for a few years, and with Cubic Transportation running the show it is anybody’s guess when OMNY, the system and the MIFARE MetroCard replacement, will completely in place and running smoothly.

For every tweet saying Express Transit is great, there are plenty of complaints of unwanted OMNY charges because iPhone users didn’t know Express Transit was turned on. The thing is iPhone and Apple Watch have to be damn close for a read. Unless the device is in a pants or coat pocket or wrist that brushes on the OMNY reader, accidental reads can’t happen. Nevertheless Apple would have happier New York City customers keeping EMV Express Transit off by default, and leave default on for the native OMNY transit card, whenever that arrives.

UPDATE: London TfL users are having the same problem

5G Contactless Payments Part 1: Fast QR vs Ultra Wide Band enhanced FeliCa and MIFARE

Payment empire players envision a brave new world of 5G enhanced contactless payment solutions, seen in recent moves by JR East and other major Japanese transit companies to replace expensive legacy mag strip ticketing with lower cost QR Code ticketing. 5G flavored QR Code and ‘Touchless’ Ultra Wide Band (UWB) Mobile FeliCa solutions were also on display at last months Docomo Open House 2020. How can it be that Docomo is developing Ultra Wide Band Mobile FeliCa and QR Code solutions?

The endless push pull of ‘this contactless payment works great for me’ that drives somebody else crazy is endless fascinating. We have more choices than ever: digital wallets, plastic cards, face recognition, NFC, QR Codes, etc. 5G and UWB promise to mix things up even more.

Ultra Wide Band enhanced FeliCa and MIFARE Apple CarKey?
The evolution of EMV, FeliCa, MIFARE and other similar protocols as they transition from plastic smartcards to digital wallets devices opens up opportunities to include other radio technologies like Ultra Wide Band and Bluetooth in addition to NFC. Ultra Wide Band Touchless FeliCa on display at the Docomo Open House was all about cars, not Touchless walkthrough transit gates that will appear in a few years.

Touchless FeliCa makes great sense as a ‘NFC car key’ that utilizes UWB for operation at greater distance and better accuracy when needed. Touchless makes even more sense as a ‘keep phone in pocket’ touchless payment method for drive thru purchases. The addition of UWB into the mix makes smartcard protocols much more useful than just NFC. I would certainly welcome a smartphone UWB powered Touchless FeliCa replacement that ditches the need for automobile ETC cards and readers on Japanese expressways.

How UWB enhanced FeliCa would fit with Apple’s new CarKey feature said to be coming with iOS 13.4 is unknown but iPhone already supports FeliCa. UWB touchless support for iPhone 11 and later models is a logical evolution. Sony and Docomo are developing the technology with NXP which certainly means that MIFARE will also support UWB enhancements. The long history of FeliCa and MIFARE as keycard solution providers is a natural fit with Apple CarKey. NFC is the only protocol that has been discovered in iOS 13.4 beta CarKey framework so far but I would not be surprised if UWB code references turn up at some point.

5G Cloud vs Local Processing
The Docomo Open House also showcased a QR Code transit gate with 200 millisecond (ms) transaction processing but the real star was the speed of 5G. 5G powered cloud processing promises to upend the current advantage of locally processed prepaid stored value cards…cards like Suica.

The basic promise of 5G is that IT system designers finally achieve a nirvana of everywhere, always available, big pipe central processing without wires, the big cloud. The original Suica card design effort back in the 1980’s had to leverage local processing because central processing wasn’t up to the task of handling massive transaction volumes of a Tokyo-Shinjuku-Ikebukuro station at peak rush hour. This is why Suica cards are stored value by design, the FeliCa technology behind the card design delivers 200 ms and faster transaction times for local processing at the transit gate. What happens when 5G promises, in theory, to deliver 200 ms central processing?

Kill mag strip paper tickets first then Suica?
As Junya Suzuki points out in his article ‘Is QR the future of Suica?‘, transit QR Codes on the complex Japanese transit network only need be a unique local passkey with everything else, verification, transaction, etc., done in the 5G cloud. The same concept applies for facial recognition systems where the registered face is the unique local passkey. With the power and speed of 5G, Suzuki san argues that the need for Suica-like local processing falls away. In his scenario all Suica needs to be is a unique passkey that can lose stored value functions.

I understand his point, Suzuki san comes from an IT system background, as a journalist he has covered JP transit payment system developments for a long time. For low traffic stations a Suica-lite 5G cloud based network makes sense and does away with the expensive hard wired transit gates. Just one year ago JR East said they are building a cloud networked Suica to cover all non-Suica areas.

However the old Tokyo-Shinjuku-Ikebukuro station peak rush hour central processing crunch problem remains. I’m not convinced super fast 5G enabled cloud processing is going to solve that problem any better or cheaper than Suica does now, and reliability is a complete unknown. We also have the next generation ‘Super Suica’ format and FeliCa OS coming in the next 12 months, the design goals here include a flexible, modular cloud friendly architecture and lower costs. Next generation Suica coupled with a flexible local processing~cloud processing backend may be a compelling solution that finally delivers a practical inexpensive Suica infrastructure to the little end of the line station which only gets a few trains or buses a day.

New JR East Suica / QR Code transit gate for Takanawa Gateway station

JR East, Hanshin and Osaka Metro are testing QR Codes and facial recognition ID ticketing to replace mag strip paper. As Junya Suzuki points out, mechanical paper ticket transit gates are more expensive to install and maintain than IC transit card gates but the real expense is mag strip paper recycling costs. Mundane but not surprising. The more important long term question is this: do transit companies keep the current more expensive cash base paper ticket fare vs less expensive IC card fare structures in place, or do away with it when QR Codes replace mag strip tickets? I don’t think we’ll see an answer to that question for a few years.

There is no doubt that 5G will enable new payment possibilities, and a lot of debate. But I don’t see 5G cloud completely upending and replacing the need for local processing and stored value cards. Both are evolving, both have their place. It doesn’t have to be, and should not be a one size fits all solution. Each approach has strengths that can be complementary and build a better stronger system.

For me it comes down to one simple thing. My Apple Watch can be buried under multiple sleeve layers but Apple Pay Suica works great going through rush hour transit gates every time. It’s the best argument for UWB enhanced FeliCa and MIFARE touchless transit gates and stored value local processing I can think of. QR can never match that, nor can face recognition…think face masks during an epidemic or pollen season.

In the next installment I hope to explore 5G and the evolution of digital wallets.