Stripe – Apple Pay

Re:Stripe – Apple Pay by adamfeldman on Monday October 20, 2014 @03:11PM (#8483909)

I'm so disappointed that the 5s doesn't support Apple Pay for in-app purchases of physical goods (the payments product Stripe partners with Apple to provide).

I've yet to discover any reason why except marketing/branding – ostensibly consumers would be confused that they can use their 5s for purchases through apps but not in retail stores, due to the lack of NFC.

From a technical perspective, there doesn't seem to be anything holding the 5s back. The A7 has a secure element/"enclave" like the A8 (a cryptographically secure place on the SoC to store payment tokens, fingerprints, and the like), and the 5s has an A7 and the TouchID sensor.

EDIT: The secure element is in fact distinct from the secure enclave. agnokapathetic explains below.

[ Parent | on HN ]

Re:Stripe – Apple Pay by agnokapathetic on Monday October 20, 2014 @03:32PM (#8484024)

The technical reason is that while the iPhone 5s has the Secure Enclave co-Processor (SEP), it does not have an Apple Pay Secure Element (SE).

The SEP is a ARM TrustZone-like separate processor running a stripped down L4 derived microkernel. This manages encryption keys, the secure boot-loader and OS update signing.

The Apple Pay Secure Element is a separate chip which runs a Java-Card-OS. "Cards" in the java-card-OS are cryptographically "personalized" by the payment network (VISA, AMEX, MasterCard) with per-device keys and the device personal account number (DPAN)--the tokenized device only credit card.

This is the same java-card + payment network personalization that physical chip-and-pin cards, Google Wallet and most other NFC payments use.

So my guess is that the Payment Networks were not comfortable using the Secure Enclave Processor and preferred to reuse the same technology used by chip-and-pin, with a separate Secure Element chip.

Source: https://www.apple.com/privacy/docs/iOS_Security_Guide_Oct_20...

[ Parent | on HN ]

Re:Stripe – Apple Pay by adamfeldman on Monday October 20, 2014 @03:40PM (#8484055)

Thanks for clearing that up. Assuming the Secure Enclave has a level of security comparable to the Secure Element, it'd be nice if the payment networks would trust it, but they're so notoriously conservative...and understandably want everyone using the same base tech to keep complexity lower.

I think the bulk of my disappointment is that I upgraded to a 5s anticipating I wouldn't be totally shut out of Apple's (at the time rumored) impending launch of a payments product. Oh well, at least we get TouchID auth for apps.

[ Parent | on HN ]

Re:Stripe – Apple Pay by sliverstorm on Monday October 20, 2014 @06:20PM (#8484852)

I upgraded to a 5s anticipating I wouldn't be totally shut out of Apple's impending launch of...

I thought Apple was pretty notoriously bad about this sort of thing?

[ Parent | on HN ]

Re:Stripe – Apple Pay by wodenokoto on Tuesday October 21, 2014 @01:03AM (#8485962)

No, they are actually pretty good at this. Probably the best within the mobile phone space.

[ Parent | on HN ]

Re:Stripe – Apple Pay by mrcwinn on Tuesday October 21, 2014 @11:09AM (#8487713)

They're notoriously good about this. If a phone's processor lacks a component necessary to make it function, it will be difficult to compensate for that through software. I'm sure Apple would've loved to get an extra 50m folks using a payment network that they get a cut of, but they couldn't, so buy an iPhone 6 if you want to use it.

[ Parent | on HN ]

Re:Stripe – Apple Pay by jedrek on Tuesday October 21, 2014 @06:28AM (#8486710)

The iPhone 5 is fully supported under iOS 8.1, as far as what is technically possible (no touchID, for example).

Find out which flagship Android phones have an official 5.0 ROM and let us know.

[ Parent | on HN ]

Re:Stripe – Apple Pay by andrewpi on Tuesday October 21, 2014 @10:15AM (#8487418)

There is no support for T-Mobile's Wi-Fi Calling on the iPhone 5, even though its almost identical to the iPhone 5C.

[ Parent | on HN ]

Re:Stripe – Apple Pay by kingnight on Monday October 20, 2014 @04:07PM (#8484204)

'"Cards" in the java-card-OS are cryptographically "personalized" by the payment network (VISA, AMEX, MasterCard) with per-device keys and the device personal account number (DPAN)--the tokenized device only credit card.'

Is this 'tokenized device only credit card' the same concept as the Point-of-Sale seeing a unique CC # (generated) for the transaction? (What I believe is one of the selling points for Apple Pay). Are there other products that do this?

[ Parent | on HN ]

Re:Stripe – Apple Pay by matthewarkin on Monday October 20, 2014 @07:18PM (#8485072)

According to the email I got from American Express, the POS will see the DPAN. So every POS transaction would see the same unique card number.

[ Parent | on HN ]

Re:Stripe – Apple Pay by evanspa on Monday October 20, 2014 @08:20PM (#8485287)

Just to add to this, there is a body that covers "secure chip" technology: GlobalPlatform[1].

[1] http://www.globalplatform.org

[ Parent | on HN ]

Re:Stripe – Apple Pay by mitman on Monday October 20, 2014 @03:27PM (#8483992)

I was under the impression that Secure Element is separate from Secure Enclave. Secure Element is for CC information and Secure Enclave for fingerprint data. Since the 5s lacks Secure Element, it makes sense why even Apple Pay in apps wouldn't work. I have not been able to find anything to suggest one way or the other, so I could be wrong. Please correct me if I said something wrong.

[ Parent | on HN ]

Re:Stripe – Apple Pay by bobbles on Monday October 20, 2014 @04:31PM (#8484325)

The apple watch will allow for contactless payments via apple pay for people with the iphone 5/5s

[ Parent | on HN ]

Re:Stripe – Apple Pay by adamfeldman on Monday October 20, 2014 @06:28PM (#8484886)

And it owuld appear that in addition to contactless payments owning an Apple Watch will allow for in-app Apple Pay(ments) too

[ Parent | on HN ]

Re:Stripe – Apple Pay by fbpcm on Tuesday October 21, 2014 @10:39AM (#8487545)

According to https://www.apple.com/apple-pay/ in-app Apple Pay does not work with Apple Watch.

[ Parent | on HN ]

Re:Stripe – Apple Pay by fbpcm on Monday October 20, 2014 @06:25PM (#8484869)

I've only heard about 5s supporting Apple Pay with Apple Watch.

[ Parent | on HN ]

Re:Stripe – Apple Pay by josephlord on Monday October 20, 2014 @08:03PM (#8485225)

I suspect that is because touchID is required so no plain iPhone 5 support.

[ Parent | on HN ]

Re:Stripe – Apple Pay by fbpcm on Tuesday October 21, 2014 @10:37AM (#8487538)

Actually iPhone 5, iPhone 5c, iPhone 5s, iPhone 6 and iPhone 6 Plus can all do Apple Pay with the Apple Watch.

[ Parent | on HN ]