Ride the Rails with Apple Pay Suica and Earn JRE POINT

The enhanced NFC functions of iOS 13 could not have come at a better time for the Japanese market. The great 10% consumption tax cashless experiment begins October 1 when the tax hike becomes effective and the Japanese government starts giving 2%~5% refunds for cashless payments via established card point systems. The ‘My Number‘ Japanese Individual Number card will be a centerpiece for getting those point rebates and the Japanese government has already announced iOS 13 support for My Number card. The whole rebate/refund thing is clear as mud but exciting too. Suica is listed as one of the many e-money cards eligible for consumption tax refunds/rebates. Suica consumption tax point refunds will be delivered via JRE POINT.

JR East added to the excitement today with the announcement that starting October 1 Suica users can earn JRE POINT simply by riding the rails. Mobile Suica transit users (Apple Pay Suica, Google Pay Suica, Osaifu Keitai Suica) earn 1 JRE POINT per 50 yen of IC transit fare, plastic Suica cards earn 1 JRE POINT per 200 yen of IC transit fare.

That’s a huge incentive to drive transit users from plastic Suica to Mobile Suica. The same JRE POINT rates apply to Green Car Seat purchases. And get this, only Mobile Suica Commuter Plan purchases and renewals are eligible for JRE POINT with 1 JRE POINT per 50 yen of the purchase/renewal. This is a sweet deal if your company sponsors your commuter pass. They give you the money, you get the points. Ugh, now I have to hold off renewing my Apple Pay Suica Commute Plan until October 1 but the points are worth going without my commute plan for a few days. JR East’s big push for Mobile Suica over plastic is remarkable and will become a shove when the next generation ‘Super Suica’ format arrives in April 2021.

To earn points the Suica card must be registered to a JRE POINT account. The JRE POINT account setup process has gotten a little more streamlined, and the iOS JRE POINT App a little less clunky over the past year. Mobile Suica and JRE POINT systems are now dynamically linked so you don’t need to worry if the Apple Pay Suica card ID number changes.

Today’s announcement only applies to regular train travel but JR East will be adding a lot more in 2020~2021 as the Super Suica start date approaches: JRE POINT for Touch and Go Shinkansen travel starts with the new JR East eTicket system in April 2020, Round trip fixed travel route coupon-like JRE POINT is due December 2020. And finally, with Super Suica in place, the regular express train/Shinkansen ‘EkiNet‘ ticketing and point system will be rolled into the JRE POINT system. Travelers can then earn and use JRE POINT to purchase regular express train and Shinkansen eTickets and upgrade seats. It will be Apple Pay Super Suica eTicket bliss.

Advertisements

Bug Bounties, Public Betas and Risk Management

I love Paul Jorgensen’s blog and his unique take on cyber security issues. It is his chosen profession and he was one of the very few to notice and take interest in the August 2017 Google BGP leak that brought down Apple Pay Suica services and major parts of the Japanese internet. He was also one of the few to blog about China Telecom spoofing the BGP protocol to poison internet routes to suck up massive amounts of American and Canadian internet traffic for intelligence analysis.

In his post today Paul quotes Katie Moussouris on bug bounties and risk management. Specifically, relying on public bug bounty programs that just create the “appearance of diligence”:

“This is not appropriate risk management. This is not getting better when it comes to security vulnerability management..

A lot of the patterns [have] not actually shifted that much from where we were when I started out professionally 20 years ago as a penetration tester…

We’ve created a $170 billion industry, which, we’re really good at a few things, security not exactly being one of them. Marketing, definitely.”

As Paul points out, “bug bounties are a tool, but only one tool. And it’s a game, so people will look to take advantage.”

To draw a close analogy I would also say that the public beta approach that Apple now uses for iOS and macOS development is similar in that it just conjures the appearance of diligence, not diligence itself. It creates an atmosphere of reduced expectations, both on the engineering side and the user side: “it’s just a beta, we can still work out the bugs.” I wonder if we would be better off without a public beta, a better developer beta program with robust bug reporting tools might set a higher bar.

As others such as John Gruber have noted, iOS 13 has been one of the buggiest beta development cycles in recent memory. Perhaps I am being nostalgic, but I think when Steve Jobs still walked the halls in Cupertino, his drive to deliver an excellent shipping product, and fear of his wrath when things didn’t measure up, was due diligence that instilled the Apple development culture of that time.

People perceive quality even if they cannot put it into words, the old look and feel thing. As Moussouris points out, marketing is a poor substitute for diligence and quality. The risk of the current environment is that Apple ships software products that have lower expectations which no amount of marketing can make up for.

iOS 13 Apple Pay Suica Warning for EX App users

One of the early issues of using Apple Pay Suica was that the Suica card ID number would change every time the card was removed and re-added to Wallet, migrated to a new iPhone, or transferred from iPhone to Apple Watch. This was no problem for using Suica for transit and payment, but soft-linked services like JRE POINT and the JR Central Shinkansen EX App were a problem. Users had to manually update the Apple Pay Suica card ID number in those service accounts. If they did not, those services stopped working.

The good news is that Mobile Suica and Apple Pay fixed the issue in 2017. The bad news is that the issue is back again. JR East has done a lot of backend work on the Mobile Suica system to get the iOS 13 direct Suica card creation Wallet feature in place. I moved by main Apple Pay Suica card to test it on Apple Watch and noticed that the Suica card ID had changed. I thought I might need to issue an all points alert, but close investigation revealed that JR East has really improved things on the Mobile Suica system.

The official JR East Mobile Suica support position is that Suica card ID numbers can change when removed and re-added to Wallet. Softlinked Apple Pay Suica services like EX App (smartEX and Express Reservation) and Touch and Go Shinkansen stop working when the Suica ID number changes and need to have the registration information updated to re-link the services.

My own experience is the Suica card ID number changes, once. After that, moving Suica around doesn’t change anything. I suspect this is related to the changes in iOS 13 Wallet. Another interesting change is that the JRE POINT system automatically updates a changed Suica ID number from Mobile Suica. It just works. Hurray!

Softlinked Apple Pay Suica services like EX App (smartEX and Express Reservation) and Touch and Go Shinkansen are still a problem. Touch and Go Shinkansen users simply register their device again at a JR East station kiosk. Apple Pay Suica & Express Card EX App users need to open up Suica App, tap the Express Reservation option and login to EX via the shitty little mobile EX browser window. You should see a “Your Registered Device has changed” and a “Update” button. Tap that and all is done. You can confirm the updated Suica ID number in EX App.

I do not have a smartEX account and cannot confirm this, but I suspect users need to update any changed Suica ID number manually in the EX/smartEX Apps. In the future I hope that JR Central does a better job of dynamically connecting their EX system with Mobile Suica.

Tokyo Cashless 2020: Dear JR East, we need a new Suica Charge App

1️⃣ >Dear JR East, we need a new Suica Charge App
2️⃣ Consumption tax relief with the CASHLESS rebate program
3️⃣ Are Apple Maps and Siri really Apple Pay level ready for the Tokyo Olympics?
4️⃣ Blame the Japan Cashless Payments mess on VISA and EMVCo, not FeliCa

Tokyo Cashless 2020 is a series covering all things cashless as Japan gears up for the big event. If there is a topic that you’d like covered tweet me @Kanjo

Now that iOS 13 with supercharged Core NFC is almost here, it’s time for JR East to junk the old Suica Charge app for Sony PaSoRi FeliCa reader combo on life support until the plug is pulled in September 2020, and create a new Core NFC supercharged app for iOS 13. Since any iPhone 7 and later has the ability to Read/Write FeliCa cards build a whole new app around iPhone as the NFC read/write device. Here are some other helpful suggestions:

  • Make the app multilingual, or at least support English in addition to Japanese
  • Cooperate with the other major transit card companies to support all compatible Japanese transit IC cards for recharging, not just Suica
  • Support international issue credit/debit card registration in the app so that anybody from anywhere can recharge plastic transit IC cards with their bank card
  • Support In-App Apple Pay for recharging
  • Support the app on Non-Osaifu Keitai Android phones that can read/write NFC-F, there are lots of them out there coming to Tokyo in 2020, support Google Pay for In-App recharging too

There is an ocean of plastic Japanese transit IC cards out there. There are lots of Android users, and even iPhone users, who cannot use Apple Pay Suica or Google Pay Suica. A handy Suica recharge app that lets inbound travelers recharge plastic transit cards on the go with just a smartphone is screaming to be born, it would be an essential tool in alleviating station recharge kiosk lines during the Tokyo Olympics. JR East, please make it happen.

Update: I forgot that JR East already announced the end of “Suica Internet” services in September 2020. Suica Internet is a set of internet based services for online shopping and recharging Suica cards with the Sony PaSori reader and a Windows PC. JR East is pruning legacy services as they prepare for the next generation Super Suica rollout in April 2021.

Dear Apple: We need a Global NFC iPad

Now that iOS 13 is almost here, it’s time to sit down and think about the enhanced Core NFC Read/Write functionality and what it means for iOS/iPadOS. Core NFC “requires a device that supports Near Field Communication.” Theoretically this means iPhone and Apple Watch, but the reality is that only iPhone iOS supports Core NFC, NFC Tag Read/Write and new services like NFC Tag Apple Pay that use Background NFC Tag reading.

Until now nobody has discussed the need for a NFC capable iPad. Without the enhanced Core NFC functions of iOS 13 which limited NFC to Apple Pay Wallet card, there wasn’t a reason. After all who would want to use iPad for Apple Pay Suica transit in Tokyo, you’d look as silly as watermelon man (watermelon in JP = suika…get it?).

But iOS 13 Core NFC changes all this: sure you still don’t want to use an NFC iPad at the checkout line, but businesses would love an NFC iPad loaded with all kinds of enhanced Core NFC apps to do all kind of work as all-in-one mobile POS systems, factory inventory NFC tag read/write systems, and much more. Imagine how an NFC iPad bundled with Recuit’s AirPAY would appeal to Tokyo area businesses as they gear up for the 2020 Olympics. The possibilities are interesting and not insignificant.

What is the optimum global NFC iPad hardware configuration? Background NFC tag reading ability is an absolute must which means A12 Bionic is the minimum support configuration. Outside of that I would say: iPad Air and iPad mini, not iPad Pro, a NFC + cellular model, and a WiFi only model. The NFC iPad needs to be as inexpensive as possible with A12 Bionic and Touch ID. I think it could do well.