News

UL Cloud-based Payments Test Suite wins MasterCard qualification

May 2, 2016

UL has extended its cloud-based payments test tool portfolio with a test suite to validate functional behavior of MasterCard cloud-based payment applications. The suite has been qualified by MasterCard, a UL press release said.

According to the MasterCard specification, issuers of cloud-based payments products must:

• define mobile payment application profiles;
• manage keys and tokenized PANs;
• issue and operate applications; and
• manage all in compliance with the payment brand requirements.

The UL Cloud-based Payment Functional Test Suite for MasterCard MCBP applications can be used to test MasterCard mobile payment applications as well as to prepare for formal approval by MasterCard. In helping with precertification, the test suite speeds up the entire certification process, the release said.

The suite includes all the contactless test cases as defined in the MasterCard cloud-based payments specification.

The tool allows testing of a MasterCard cloud-based payments-compatible application installed on an NFC-enabled mobile device using a contactless reader.

It also provides detailed analysis of APDU-level communication with interpretation of the data elements involved, to help in debugging the application under test.

Additionally, users of the test suite can utilize their own batch files for personalizing profiles, opening and closing the payment application, and entering a mobile PIN.

Lastly, the tool supports importing test plans in the new MasterCard-specific RegTool Syntax v.1 format. This allows mobile payment application developers, card issuers and test labs to test payment application implementations based on HCE and cloud specifications from MasterCard for global interoperability.

"[B]anks and payment brands need to ensure trust in security and interoperability," said Maxim Dyachenko, director of products in the UL transaction security division. "The UL Cloud-based Payment Functional Test Suites help banks to precertify their payment products and comply with the brand rules ensuring interoperability and good customer experience."