mobile myki madness

If I had an Australian dollar for every online complaint of Mobile myki, the mobile version of Public Transport Victoria’s (PTV) myki transit card in the Melbourne region, I could probably purchase a nice bit of property there. Reddit forums regularly erupt with mobile myki mind melting nonsense, invariably bashing Apple for refusing to put myki in Apple Pay because Apple ‘doesn’t support HCE’ or because they charge a ‘30% commission’. Neither of them true. myki is MIFARE which has never used HCE and Apple Wallet already supports lots of MIFARE transit cards.

The whole HCE thing is a straw man anyway: embedded secure elements (eSE) are standard on NFC smartphone chips these days. The reason why Île-de-France Mobilités (IDFM) chose HCE for Smart Navigo on Android for example, had nothing to do with Android devices lacking an eSE, it was simply that IDFM didn’t want to deal with Android manufacturer ‘gatekeepers’. Imagine the nightmare of asking every Android manufacture to issue firmware updates for older devices to support Calypso on the eSE. There was no chance in hell they would listen or do it for free, so IDFM and Calypso spent a lot of time and money creating a special HCE version of Calypso, that doesn’t support Express Transit Mode, just for Android (but not for Samsung Pay devices which use native eSE and support Express Transit Mode).

Why IDFM and Calyspso did this is all you need to know about the chaotic mess that is Android NFC. When Smart Navigo comes to Apple Wallet later this year, it will run on iPhone 8/Apple Watch 3 and later without a hitch in full Express Transit Mode glory because firmware, eSE and software are upgraded in a single iOS update. That’s the advantage of having a good gatekeeper who’s on the job.

As for the 30% commission straw man, Apple Pay doesn’t ‘charge a commission’ for using transit cards, they only take a negotiated commission when a credit card is used to add money to the transit card. Why PTV and Apple haven’t reached an agreement yet is a mystery, but judging from myki user complaints, the mobile myki backend system might not be up to Apple’s user experience high-bar. And the myki system is about to get much more complicated: PTV is hitting the reset button.

Open loop envy
PTV has Opal open loop envy and want EMV contactless cards to replace most of myki. This is certainly doable but there is the issue of the native MIFARE myki already on mobile. Oyster and Opal cards are MIFARE too but those systems added EMV contactless support as the foundation for ‘mobile’, relegating MIFARE as legacy plastic. By doing this they offloaded the card issuing operation to VISA/Mastercard/AMEX card issuers, who already have digital card systems in place and agreements with digital wallet operators. myki having come this far with mobile however is going to be a real juggling act, can PVT, or whoever wins the service contract, keep all the service balls in the air while going forward?

There is also the problem of Express Transit Mode support. Look carefully at Apple Express Transit Mode small print and you’ll notice that mobile EMV and mobile MIFARE transit card Express Transit Mode don’t coexist on the same system. It’s one or the other, never both. I suspect a smart Express Mode that chooses the right transit card for the job depends on smart modern transit gate reader hardware with the latest firmware and updated backend software. Getting the latest, greatest transit gates/readers installed takes time and money. Mostly money. Buckle up myki users, it’s going to be a bumpy ride to mobile transit card nirvana.


Apple Wallet Express Transit Mode is basically limited to native transit cards

myki transit card expanding to Apple Pay

The Open Loop lovin’ NFC Times (paywall) reports that with the successful launch of myki on Google Pay, Public Transport Victoria (PVT) has allocated 1 million AUD to expand the virtual myki transit card to other digital wallet platforms, like Apple Pay and Samsung Pay.

Anyone up for taking bets on who gets it first?

UPDATE: It looks like Apple Pay is the winner when iOS 13 ships this fall. iOS 13 will be bringing Apple Pay Octopus transit support to Hong Kong as well.

HCE Secure Element in the Cloud is pie in the sky

Stefan Heaton’s blog piece “The reason Mobile myki isn’t available on iPhone… yet” is all the proof you need that Google inspired endless nonsense and confusion with Android Pay Host Card Emulation (HCE). This was shortly after the NFC “secure element” wars were over, with the mobile carrier locked SIM card secure element losing out to the embedded secure element (eSE) on smartphone NFC chip. Google’s network connection dependent HCE secure element in the cloud strategy for Android seemed like it would solve everything and free NFC from the evil clutches of mobile carrier SIM lock-in contracts and the cost of eSE hardware. Except that it didn’t. It’s eSE or nothing now.

So why is Heaton spouting HCE support nonsense for MIFARE myki on Apple Pay when Android myki doesn’t even use HCE? He incompetently confuses HCE as a hardware secure element when HCE actually means a virtual secure element hosted in the cloud or in an app. People who should know better have been sowing confusion ever since.

myki is MIFARE which has never used HCE. HCE is an EMV payment solution for credit cards on Android devices without a hardware secure element. Ditto for FeliCa, which Google Pay users outside Japan assumed would work for Suica until they found out HCE-F is fakeware that nobody uses, not even Google, and lost their minds. As FeliCa Dude pointed out, “HCE-F is not useful for card emulation…because the API has been needlessly crippled.” Good luck with that.

What nobody has said, and I think it’s worth pointing out, is that the Android Pay to Google Pay shift was also a break with HCE and Google pretending to provide a ‘free’ secure element strategy for all Android licensees (ahem, see Google’s “Android Ready SE” alliance).

Google is now focused on Pixel hardware and their own Google Pay eSE strategy, all other Android licensees and manufacturers be dammed to find their own solutions for MIFARE, FeliCa, Calypso and so on. I guarantee you that, in time, Google will be doing most, if not all, of the same security hoops that Apple does for Google Pay on the Google Pixel platform.

So yes, Apple does limit NFC Secure Element (in Apple Silicon) access with PassKit NFC certificates. But Apple Pay MIFARE is real MIFARE used around the world, and Apple Pay FeliCa is real FeliCa. Public Transport Victoria (PTV) can apply for a myki card PassKit NFC certificate just like any developer. And for goodness sake Stefan, stop writing sentences that confuse Express Mode payment cards (EMV credit/debit cards) with regular Express Mode transit cards (FeliCa, MIFARE, PBOC). Suica is not a credit card and emulating EMV at a transit gate doesn’t automatically make a credit card into an Apple Pay Suica transit card, not by a long shot. If your aim is promoting open loop over closed loop, that’s one thing. Either way, your LinkedIn blog post is not doing your LinkedIn resume any favor.

Related: How much does Smart Navigo HCE suck?

Market Risks when Problems aren’t Fixed

Transit cards have one job: get the user through the ticket gate quickly and reliably every time, no questions asked. Because they are bullet proof, fast, highly reliable and also used for e-money purchases, transit cards like Suica and Octopus have evolved beyond transit smartcard systems into transit platforms.

A transit platform becomes even more powerful, flexible, essential and transformative when it is deployed on smartphone digital wallet platforms like Apple Pay, Samsung Pay and Google Pay. When economies of scale and masses of moving people with transit card loaded smartphones come together all kinds of exciting new business possibilities and synergies open up: for transit companies, for local area economies, for merchants, for the digital wallet platforms and for customers.

But this can only happen if the basic transit card job and performance on the smartphone matches the plastic one. It has to be as fast and reliable as a plastic transit smartcard every time. It has to be bullet proof. This is essential. When the smartphone transit card performance is not up to the plastic one, people simply don’t use it and stay with plastic or reach for something else. Ask any daily commuter.

The iPhone X Suica Problem
This is exactly what is happening to iPhone X in the Japanese market, perfectly captured in the following tweet of which you can find plenty more. Apple has not fixed the long running iPhone X Suica problem, 7 months and counting, and for customers who depend on Suica iPhone X is a poorly designed piece of expensive junk. A spec problem. The risk of Apple doing nothing has damaged Apple’s brand value in the Japanese market. A small thing can have big implications and Japan is not the only market where this is happening.

Japanese complaints of iPhone X Suica performance
Japanese complaints of iPhone X Suica performance have been constant

Apple Pay≠Apple Pay Transit
The iOS 11.4 update was originally slated to expand Apple Pay Transit cards beyond Beijing and Shanghai to include Jiangsu, Shenzhen, Wuhan and Chongqing but didn’t make the cut. Why not? China Apple Pay Express Transit cards are all the same spec right? The answer is on the Apple Pay Transit page and in Chinese discussion forums: Apple Pay China transit cards are a glitchy unreliable beta product. Chinese smartphones from Huawei, Xiaomi, Oppo don’t have these problems. Transit cards are different from credit cards because the spec is much higher with tight tolerances, they have to work perfectly every time. Apple Pay≠Apple Pay Transit.

Maybe the beefed up Core NFC changes rumored to be coming with iOS 12 will help Apple fix Apple Pay Transit card problems in the long run but fixing the current problems ASAP should be top priority if Apple wants to protect Apple brand value in the China and Japan markets.

Other Risks
This market risk applies not only to smartphone vendors, it applies to transit companies too. Especially those who are switching from fast, reliable ‘closed’ stored value (SV) systems to ‘open’ slow, glitchy EMV contactless.

People think contactless cards are all the same. They are not: a credit card is not a transit card, it’s not yours. Credit cards are subject to the whims and idiosyncrasies of the issuing bank who can deactivate any card at a moments notice without bothering to tell you. This is a problem when using a credit card as a transit card. Singapore transit users are complaining of fried plastic contactless credit cards and of card issuers deactivating cards mid-transit for being over limit. A stored value transit card is yours with your money stored on it. Locally ‘off line’ processed stored value transit cards will always be faster and safer than credit cards because the FeliCa, MIFARE and CEPAS technology behind them was tailored for transit needs.

The risk to transit companies going ‘open loop’ is that every glitch and problem gets blamed on the transit company, never the payment network or credit card company because people have zero expectations for credit card companies and banks. The transit company ‘brand value’ is damaged by the management whims of other companies.

The other downside it that all the exciting business possibilities and synergies of a transit platform + digital wallet are lost. In this case everybody loses: the transit company, transit area merchants, digital platform vendors and most of all, transit customers.

UPDATE: I incorrectly stated that China Express Transit Beijing and Shanghai cards use MIFARE technology. They used to be MIFARE but migrated to something similar to PBOC 2.0 ED/EP and T-Union cards are a further development but the Apple Pay Express Transit flavor is different.

Victoria to trial replacing Myki card with Android devices

ZDNet reports that Victoria is going to test native MIFARE based Mobile Myki on Android devices before rolling out the service in 2019. It sounds like a good plan, staying with an established closed ticketing smartcard system on mobile is the smart way to go.

Unfortunately Sydney is not making the smart choice, they are looking to dump their MIFARE based Opal smartcard system built by Cubic and replace it with ‘open’ EMV contactless:

While Melbourne is headed down a path that replaces physical cards with smartphone apps, Sydney is examining the prospect of dropping transit cards in favour of credit card usage.

In July, Transport for NSW began a trial on the Manly Ferry of using MasterCard instead of the Opal card for ticketing, allowing for mobile devices or wearables equipped with NFC payments connected to a MasterCard account to be used.

Good luck with that.