Certification Services

MEPS, together with the banking industry, was instrumental in the migration of magnetic stripe cards to chip-based cards (Payment Multi-purpose Card-PMPC) in Malaysia back in 2003; making Malaysia the first country to implement chip-based ATM cards in Asia. In this national initiative, MEPS was responsible for the development of the technical standards and specifications for the smart cards, card acceptance devices, loading and communication protocols, technical integration support and coordination of the card supply and personalization operations.

It notched another milestone when MEPS accomplished the migration from PMPC (Payment Multi Purpose Card) proprietary chip card standard to MCCS (Malaysian Chip Card Specification) EMVTM based chip card standards in 2015. A part of the national switches, MEPS provides expert guidance and assistance to the central banks, issuers and acquirer and the payment industries stakeholders throughout the journey of the MCCS implementation.

Certification Services (CS) was established in 2005 as the sole certification body for Malaysia domestic financial industry. Certification Services provides functional and security testing & assessment on chip cards, acceptance terminals, mobile payment products, payment systems, Integration or end to end testing, host validation and consulting services for the issuer and acquirer banks and relevant payment industrial stakeholders.

With more than 10-years’ experience, Certification Services owns a professional service team that’s well versed with the specifications and standards, qualified tester and equipped with qualified testing tools and equipments, and accumulates rich working experiences. Certification Services has defined a clear process and guidance all the ways through the certification with a high quality system of many cross-checks levels has been developed in coordination with the certification body and laboratory role.

At every step of the way, Certification Services adheres to strict compliance with international security best-practices and ensures the Malaysia payment infrastructures are secure, compliant and globally interoperable.

  • Payment Multipurpose Card (PMPC)Smart Card Services support the implementation of the payment multipurpose card scheme such as:
    • Managing the PMPC Chip Card specification & relevant technical standard
    • Support PMPC technical integration
    • Manage the PMPC component i.e. Key Management & Card Personalisation License
    • Central coordinating body for PMPC Chip Card & Personalisation Centre

    The PMPC scheme services and operation shall be sustained until the end of PMPC end date i.e. 31 December 2017.

    Further information required, please email to smart_card@meps.com.my

    List of PMPC Technical Specification & Document

    No. Specification Version
    1 PMPC Integrated Circuit Card Application Specification for ATM/MyDebit System 1.5
    2 PMPC ICC Card Application Personalization Interface Specification for ATM/e-Debit System 1.3.3

    Type of Certification Services and Approved Product

    • PMPC Card/Applet Provider CertificationSmart Card Services provide and manage the certification process for PMPC ATM and MyDebit card applications which includes:
      • Ensure compliance with the current PMPC specifications i.e. PMPC – Integrated Circuit Card Application Interface Specification for ATM / MyDebit System
      • Ensure the Card Life Cycle Process Flow of all new cards is in line with the existing cards
      • Ensure interoperability between the new cards and the current ATM infrastructure; and
      • Provision of advisory services to card suppliers on required improvements to card related documentation and sample cards, so as to ensure compliance with the PMPC Card Specification.

      PMPC Certified Card/Applet Provider (as at August 2017)

    • PMPC Personalisation Centre CertificationIn order to ensure that the ATM cards are personalized correctly in accordance to PMPC Technical Specification, MEPS provide the ATM card Personalization Centre Certification Services.

      This is to guarantee that the ATM card being personalized using a secured personalization system in a secured Personalization Centre.

      PMPC Certified Personalisation Centre (as at August 2017)

  • MEPS Brand Guideline
  • Malaysian Chip Card Specification (MCCS) SchemeThe financial industry agreed to replace the PMPC scheme with the adoption of white label EMV based specification named Malaysian Chip Card Specification (MCCS).

    Smart Card Services served the financial industry in ensuring the Malaysian payment infrastructures are secure, compliance and globally interoperable through the following services:

    • Managing the MCCS specification & relevant technical standard
    • Support MCCS technical integration
    • Manage the MCCS Card Personalisation License
    • Central coordinating body for MCCS related certification

    Further information required, please email to MCCS Certification Body at mccscb@meps.com.my

    FAQ

    List of MCCS Technical Specification & Document

    No. Specification Version Effective Date
    1 PURE Specification For Developer 1.5.3c 3 December 2012
    2 PURE Contactless Reader Specification for Dual Interface Cards and Mobile PURE 2.1.7 16 February 2015
    3 MCCS Issuer Authorization Host Document 1.2 30 June 2014
    4 MCCS Acquiring System Upgrade Specifications 1.3 3 March 2016
    5 MCCS Card Personalization Profile – Dual Interface Card 1.5.2 5 November 2015

    MCCS CARD TYPE APPROVAL (CTA)Card Type Approval (CTA) composed of MCCS Card Security Evaluation (CSE) and Card Functional Evaluation (CFE). CSE evaluation shall be performed by accredited laboratory and the result will be integrated with CFE process. CFE is the evaluation process to ensure the MCCS Card implementation complies with MCCS Specifications/requirements.

    MCCS PERSO SITE VALIDATION (PSV)Personalisation Site Validation (PSV) is designed to ensure the facility and process for MCCS card personalization/production meets the industry standards. Personalization validation process aims at providing a high level of confidence in interoperability and consistent behavior of the issued cards on the field.

    MCCS CARD PERSONALISATION VALIDATION (CPV)Card Personalisation Validation (CPV) testing is to ensure the MCCS card is personalized in compliance with MCCS Specifications/requirements. LoA issued shall contain necessary information in identifying the actual card personalization profiles approved.

    MCCS ACCEPTANCE DEVICE BRAND CERTIFICATION (ADBC)Acceptance Device Brand Certification (ADBC) testing is to ensure the MCCS Acceptance Device is meet the minimum criteria and configured in accordance with MCCS Specifications/requirements and complied with the appropriate connectivity and messaging interface to network.

    MCCS CONTACTLESS ACCEPTANCE DEVICE TYPE APPROVAL (CADTA)Contactless Acceptance Device Type Approval (CADTA) testing is to ensure the MCCS contactless reader implementation complies with MCCS Specifications/requirements. The evaluation scope does not include the Operating System but limited to the MCCS Contactless Kernel on the same reader that is implemented according to the MCCS specifications.

    MCCS HOST BRAND CERTIFICATIONMCCS Host Brand Certification is a process designed to ensure overall functionality of a specific Acquiring/ Issuing Messaging implementation and environment configuration are compliant with MCCS requirement.

    Further information required, please email to QA@meps.com.my