Tomorrow's Transactions

Thought leadership from Consult Hyperion

Archives for November 2010

Stux on you

by

[Dave Birch] The media are full of cyberwar at the moment. I’m sleeping safely in my bed knowing that we now have a cyberwar strategy. But there does appear to have been one cyberwar attack that has already succeeded. The story about Stuxnet is fascinating, especially now that the Iranians have admitted that it worked.

President Mahmoud Ahmadinejad admitted Monday that “several” uranium enrichment centrifuges were damaged by “software installed in electronic equipment,” amid speculation Iran’s nuclear activities had come under cyberattack.

[From France24 – Iran admits uranium enrichment hit by malware]

So whoever wanted to stop the Iranians from enriching uranium (the Americans, the Saudis, the Israelis etc) found a cheaper and more efficient way to do it than launching cruise missiles or dropping bunker busting bombs.

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

One of these days, this sort of thing will get me into trouble

by

[Dave Birch] I very much enjoyed my day chairing the Next Generation Cards and Payments conference (tag #ngcp) in Brussels. I have to say that our friends at Clarion did a fantastic job: the speaker line-up was outstanding and the room was packed (mainly with banks but there were telcos, retailers and others too).

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

Moving transactions online

by

[Dave Birch] Well I managed to get myself invited to the launch of Forum friend Sir Bonar Neville-Kingdom‘s new book. As the government’s technology outreach czar, he makes a point of having his personal assistant Patricia use all forms of new information and communication technology. He has, of late, been dictating tweets for her to place on the Twitter and now, to ensure that these valuable insights into the heart of British government IT policy are preserved for posterity, they have been gathered together in “The Twitters of Sir Bonar Neville-Kingdom“. I wasn’t sure about the current regulations concerning the photographing of key civil servants, but I managed to sneak a few pictures and have put them on Flickr for the general public to peruse. Here are a few of them so that you can see what was going on (I spotted known activists in the crowd and am perfectly prepared to hand my footage over to the relevant authorities on the condition of pseudonymity).

Given Sir Bonar’s famous “ring of soup” formulation for government identity management services, I was keen to ask him how he sees the evolving balance between privacy and surveillance. In particular, I was curious about his views on Umair Haque succinct note that

The internet itself isn’t disempowering government by giving voices to the traditionally voiceless; it’s empowering authoritarian states to limit and circumscribe freedom by radically lowering the costs of surveillance and enforcement.

[From The Social Media Bubble – Umair Haque – Harvard Business Review]

Unless we take steps to build an identity infrastructure that embodies certain protections, encodes certain balances, then I think it is perfectly reasonable to anticipate a path whereby governments become authoritarian by default, simply becuase they can and not because of any directed or debated policy. I don’t think that you have to be some kind of privacy nutter to find this a concern: unfortunately, I was not able to put this point to Sir Bonar because he had to leave for a pressing bottle of claret, but I perhaps I will be able to catch up with him again in the not-too-distant future.

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

Form and function

by

[Dave Birch] Money has several different functions in society.

All of these functions are bundled together into a single (for lack of a better word) asset: currency. Sometimes, these functions are complementary [and sometimes the] functions of money conflict with one another.

[From Umair Haque / Bubblegeneration]

Umair is spot on, and to back him up I thought I’d blog an extract from some pieces I wrote a few years ago to try to explain to a business audience why the digitisation of money might lead to these functions being implemented very differently in the future. The beginning of the extract comes from a paper call “E-Cash, So What?” that I presented at “Digital Cash and Micropayments, Unicom (London: February 1997)”, the second part is from a paper that Neil McEvoy and I wrote called “Electronic Cash – Technology will denationalise money” that I presented at “Financial Cryptography (Anguilla: February 1997)” and the more detailed final section comes from an unpublished chapter of a book I’m working on.

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

Masters key

by

[Dave Birch] This whole internet thing is getting more and more complicated. I’m trying to work out what government policies toward the internet are, so that I can help our clients to develop sound long-term strategies with respect to digital identity. To do this, we need to understand how the security environment will evolve and what the government’s attitude to security is. Should people be allowed to send data over the internet without interference? The US government thinks so.

Since 2007, Congress has inserted a total of $50 million of earmarks into the State Department’s budget to fund organizations dedicated to fighting Internet censorship.

[From Rebecca MacKinnon: No quick Fixes for Internet Freedom – WSJ.com]

Uh oh. This cannot be popular with people in favour of internet censorship, such as U2’s boss.

U2 manager Paul McGuinness said that the only reason the music industry had tanked over recent years was not because outfits like U2 peddled the same boring crap that they did in the 1980s, but because of the introduction of broadband.

[From Comment: Broadband only useful for pirates – U2 manager screams blue murder | TechEye]

Setting aside the fact that the British music industry earned more money than ever before last year, U2 are totally wrong to expect the rest of society to pay to uphold their business model in face of all technological change. Bono is wasting his time calling for Chinese-style internet censorship in order to maximise record company profits, or at least he is if the US government is going to continue funding the opposition.

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

Why?

by

[Dave Birch] Why do you pay the way you pay? Why do you choose certain cards and why do you choose the subset of those cards that you carry around? What is in your wallet? I saw this, and began thinking…

So I polled the Credit Slipsters, and a few other people who teach payments law (some of whose responses will appear in comments to this post), and here is what they said about what they carry and how they pay.

[From What’s in Our Wallets? – Credit Slips]

It was very illuminating to see the answers and to reflect on the combination of marketing, economics, psychology and technology that drove the choices, so I thought it might be fun to repeat the experiment in the Digital Money playhouse and see if anyone would join in (please comment) below. I’ll go first.

I actually have three wallets: I call these my travel wallet, my main wallet and my “London” wallet. My main wallet contains four cards:

  • A British Airways American Express card, which is my default business card. I travel a lot and this card gives me BA miles. But more importantly, if you spend more than £10,000 per annum, it gives you a free BA complimentary flight: since I have so many miles, this means that last year (and this year) I will get a free first class flight anywhere in the world. For a humble salaryman such as myself, this is a wonderful perk.
  • A John Lewis MasterCard, which is my default non-business card. It has 1% cashback in John Lewis vouchers: last month, this meant a nice surprise in the post: £80 off our weekly shop in Waitrose. Actually, as I write, it isn’t in my wallet because John Lewis called me up a couple of days ago and said that my card details had been used to buy something on Yahoo in a transaction I didn’t recognise, so they’ve cancelled our cards and are sending us replacements.
  • A Barclays Visa debit card, which I only ever use at the ATM. I never, ever, buy anything with my debit card and I have the slightest idea why anyone else does either.
  • A Visa prepaid card. It’s always useful to have a prepaid card to hand. Now and then the kids will need to go to the shops to get something — the Bluetack, folder and card for the school project to be handed in the next morning — and it’s convenient to be able to give them a card instead of rummaging for cash or going to the desktop to FPS money to their accounts.

I don’t always take this wallet with me. If I only going into London for meetings, I have a small cardholder that I call my London wallet and carry in my back pocket. This only contains loyalty cards for the main coffee chains and my Barclaycard OnePulse contactless Visa card with Oyster built-in. This is a brilliant card: tubes and buses and it auto-reloads from my Barclaycard account.

My travel wallet changes every time I travel: I use it to carry foreign cash, plus prepaid cards. So, if I’m in the US or elsewhere, it will have my stripe Travelex Visa US$ prepaid, if I’m in Europe, it will have my chip Thomas Cook MasterCard € prepaid card. If I’m going somewhere that I have transit card for (eg, SF, Singapore) then I put the transit card in it. I had my main wallet stolen in Brussels a few years ago, so now I leave my main wallet locked up in the hotel and I’ll only take one of the cards out that and put it in my travel wallet if I know I’m going to buy something expensive, such as dinner for one of our valued clients.

None of the above are my favourite though: that’s still my MasterCard PayPass prepaid contactless sticker on the back of my iPhone. So far, I have twice forgotten my wallet when I go to the office (because I cycle to the office, so I sometimes forgot to put the wallet in my cycling rucksack) but remained smugly indifferent, because I can pop out for coffee and a sandwich in Guildford and pay with my sticker. I never forget my phone, and if I did, I’d go back home and get it.

My payment choices are, I think, pretty mercenary. I’ll go with the best rewards deal or the best cashback, generally speaking. The two cards that I use all the time where this isn’t true are the OnePulse card, because it’s so convenient to go around with just the one card for travel, for QSR contactless and for regular chip & PIN purchases, and the PayPass sticker because it’s always on my mobile and therefore always on my phone (and, frankly, because it’s fun and cool to astonish other shopppers by paying with your iPhone). OK, I’ve been honest and open. Your turn.

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

It’s a card Jim, but not as we know it

by

[Dave Birch] The issue about EMV migration continues to attract attention and discussion as the US and EU become two regions divided by a common standard, as one might say. The problems with using US-issued magnetic stripe cards (dynamic or otherwise) elsewhere are becoming more common and more serious. Take this representative tale of woe from Business Week, concerning an American stuck in Europe following volcanic misbehaviour in the North Atlantic.

Burke stood in line for more than seven hours at an Amsterdam train station in April as he sought passage to Belgium. He watched European travelers, also grounded by the eruption, buy tickets at automated kiosks that accepted microchip-embedded credit cards. Burke’s Bank of America (BAC)-issued Visa (V) card, with the standard magnetic stripe on the back, was useless. When the 64-year-old retired economist from Bandon, Ore., returned home, he called Bank of America to ask whether he could get a chip card. The answer disappointed him: “They have basically said, ‘Sorry, but you’re out of luck.’ “

[From Why U.S. Credit Cards May Not Work Abroad – BusinessWeek]

How they resisted the temptation to say “it’s card Jim, but not as we know it” I’ll never know. But there’s a serious point to all this: the end of the universal acceptance. It’s always been a pretty fundamental consumer characteristic of the international card schemes that customers expect to be able to use the cards wherever they see the acceptance mark, but how much longer can this last? I mean, I know it’s my business to mess around with different, new cards (and near-cards) all the time, but I do find it slightly worrying that I can no longer tell when going to buy something whether my cards will be accepted or not. It’s worse for our American friends, because the transition to chip and PIN makes it more attractive to have unattended POS for higher-value transactions.

The problem is particularly acute at automated kiosks in Europe, such as the vending machines at regional rail stations and bicycle rental racks in Paris, parking meters in parts of London, toll roads and gas stations, all of which accept only chip-and-PIN cards. And the problem could get worse. More unattended pay stations are appearing in Europe.

[From Americans abroad run into trouble using credit cards – USATODAY.com]

I don’t know what proportion of US cardholders travel to Europe, or indeed anywhere else, but I imagine it’s quite low. So, we’re soon going to see a situation where unless US issuers provide chip and PIN cards to those cardholders, they will start to find their cards useless. At which point, they might be vulnerable to an assault from Bling or Isis or whoever.

In line with Europol’s stance on the future of the magnetic stripe and in support of the industry’s efforts to enhance the security of cards transactions by migrating from the “magnetic stripe” to “EMV chip” cards, the Eurosystem considers that, to ensure a gradual migration, from 2012 onwards, all newly issued SEPA cards should be issued, by default, as “chip-only” cards.

[From The end for the magnetic stripe on payment cards?]

Of course, the reverse will also be true. Persons such as myself who travel to the US will have to obtain magnetic stripe cards from their banks. I already have a Travelex $ Cash Passport stripe-only prepaid card that I take to the US with me, and I really wouldn’t have a problem with paying a couple of quid to my issuer to get a stripe-only limited-time card for use in the US when I travel there. I would also like the ability to limit my Barclays Visa debit card to ATM-only use in the US. I’m not alone in thinking about this sort of thing.

In the first poll 60% of the respondents felt that European EMV cards should not hold sensitive cardholder data as standard in a magnetic stripe, and in the second poll 28% indicated that they would be happy to contact their bank to activate the stripe on their card before travelling outside of Europe, 12% were happy to carry a Chip only card, and to apply for a separate stripe card should they need to travel outside Europe, and 20% were in favour of both.

[From The end for the magnetic stripe on payment cards?]

How do we balance this out? What is the appropriate strategy in the US? We might categorise the broad options as migrate to EMV (very expensive), keep stripe and issue EMV to international travellers (very inexpensive) or forget about stripe and chip and (via contactless) let them fade away as we move to NFC, mobile, biometrics and other forms of 21st-century payment (costs utterly unknown).

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

China syndrome

by

[Dave Birch] What should government policy on identity be? Not specifically our government, or EU governments, or any other government, but governments in general. Or, let’s say, governments in democratic countries. OK, that’s a very big question to tackle. Let’s narrow it down to make a point: what should government policy on the internet be? No, that’s still too big and perhaps to vague. Let’s focus down further on a simple internet question: should the government be allowed to see what is going through the internet tubes. Of course! One of their jobs is to keep me safe from drug-dealing Nazi terrorist child pornographers who formulate devilish plots with the aid of the web.

According to reports, the FBI is asking for the authority to require all Internet communications platforms build in a “backdoor” allowing law enforcement easy wiretapping access

[From Should Government Mandate “Backdoors” for Snooping on the Internet? | Center for Democracy & Technology]

In parallel, the FBI is talking to technology companies about how they could be making it easier for criminals to see your credit card details and for the government to read to your e-mail.

Robert S. Mueller III, the director of the Federal Bureau of Investigation, traveled to Silicon Valley on Tuesday to meet with top executives of several technology firms [including Google and Facebook] about a proposal to make it easier to wiretap Internet users.

[From F.B.I. Seeks Wider Wiretap Law for Web – NYTimes.com]

This, superficially, sounds likes a good idea. Who could object? We don’t want the aforementioned Nazi drug-dealing child pornographers plotting terrorist acts using the interweb tubes with impunity. No right-thinking citizen could hold another view. But hold on…

In order to comply with government search warrants on user data, Google created a backdoor access system into Gmail accounts. This feature is what the Chinese hackers exploited to gain access.

[From U.S. enables Chinese hacking of Google – CNN.com]

It’s not that simple, is it? If you create a stable door, then sooner or later you will find yourself bolting it long after the horse has had it’s identity stolen. What I can’t help but wonder about in this context is whether the content actually matters: suppose you can’t read my e-mail, but you can see that a lot of mail addressed to Osama bin Laden is coming from my house? Surely that would be enough to put me under suspicion and trigger some other law enforcement and intelligence activity?

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

Innovate and innovation

by

[Dave Birch] One thing that struck me about PayPal's "Innovate 2010" conference in San Francisco, in (I have to say) fairly stark contrast to many of the events I attend in the more traditional banking world is just how much innovation was actually going on. Too often I'm tempted into a presentation on radical innovation in international payments only to find that the radical innovation being discussed is changing field 27 of message type 94 from two bits to three bits. At Innovate, though, the innovation was real: entirely new products and services that depend on the existence of the new payment platform underneath them.

Some of the stuff on show was fabulous: the stuff on augmented reality (with Layar), the digital TV commerce button, the digital goods purchasing. I enjoyed looking round what the developers were doing and I even wandered into the hackathon to see if I could understand what they were doing. What they were doing was writing code to create new applications there and then. And they did.

Over 300 people hacked for 15 hours and we’re pleased to announce the winners of our Hackalicious Hackathon! Congratulations to PayTEL, Affiliation APP, Tweet Engine for PayPal Docs and Buddy Beers social gift-giving for creating the most innovative demonstrations of how to “change the way people pay” using PayPal X’s tools, services and products

[From PayPal X Developer Network: Naveed Anwar's Blog: Winners of Second PayPal X Developer Challenge and Hackathon Revealed! Innovate 2010 Comes to a Close.]

It's funny though, but I thought that one of the most significant announcement was one of the dullest. While the stuff about television buy buttons and digital goods purchases and super-cool augmented reality will grab most people's attention, I thought that it was the announcement of PayPal Business Payments that seemed to me to be something that will mean real industry change. By coincidence, I happened to be chatting in the break to a developer who works on real-estate management software and he surprised my by saying that he works on commercial projects (for shopping malls and so forth) where the tenants want to use PayPal to pay bills. This, and a couple of other conversations I was involved in, leads mean to think that Russ Jones from Glenbrook is surely right to say that

We expect PayPal Business Payments to find a good reception in B2B payments, rent payments, healthcare payments, and other similar commercial markets. Learn more about PayPal X for business payment

[From PayPal X Innovate 2010 – Day 1 — Payments Views from Glenbrook Partners]

This is why I ended up spending more time looking at what the folks from Freshbooks and Bill.com were doing, because it seems to me that these kinds of solutions will be transformational: they will make a big difference to small businesses, which are most businesses. Freshbooks provides an outsourced invoicing service for small businesses, so that if you are (say) a small architect practice or law firm then you sign up and they generate invoices for you and automate collections. Bill.com works on the other end of the problem, which is to take your bills and automate their payment: when you get a paper bill you scan it in or fax it to them, and they turn it into an electronic item that you can process online (and pay using PayPal, naturally). If you think about the processes in a typical small business, the automation of the payment by itself just does not mean a massive cost saving: you have to get rid of the paper documents that go with it too.

We might summarise the sector as "e-invoicing" and, believe me, no matter how dull that sounds, the companies that crack it are going to make a lot of money.

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

Russian regulation

by

[Dave Birch] As many people have noted, the Russia e-payments landscape is really

According to Victor Dostov

There are 25 million active “e-purses” (web wallets containing pre-paid value) and the market is growing at 20%.

The market is now going to be shaped by regulation. It’s a difficult problem for regulators, to take a rapidly growing market and add prudent regulation without disrupting

The government has approved a bill to regulate e-payments, a market that is growing at 40% per annum.

Viktor Dostov, the chairman of the Russian E-Money Association, says that the bill is a reasonable compromise, requiring operators such as WebMoney and Yandex.Dengi to obtain a Central Bank licence for “non-banking credit organisations”. The law requires such organisations to have a minimum equity of 18m roubles ($600,000), which may be a little high for innovative startups.
It is very tempting for regulators to demand rigorous identification Here’s an example. The current “Draft law on the National Payment System” has the concept of “proportionate identification” which is important.. The law also contains a sensible balance on KYC, so no identification is needed for payment accounts with a maximum balance of 15,000 roubles.

Under current framework, there is no equivalent of the European “Payment Institution” or “Electronic Money Institution”. One of the key aspects of European regulation is that it has allowed non-banks to bring innovation to the sector

khjkh.

Yota, Russia’s leading 4G networks operator (offering WiMax, battling for LTE frequencies and thinking about brand-name handset), launched a partnership with Mobi. Dengi (a mobile money transfer scheme working closely with Beeline, a Russian MNO) and Tavrichesky Bank – to allow its subscribers to use the money they have topped up to their prepaid account – to pay for other services like utility bills, TV, mobile top-up.

[From Retail Banking in Russia: Innovation Unfolded: Each decent Internet service provider strives to create its own payments wallet]

lkjljljlkj

[Read more…]

These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.

RSS Recent Posts

RSS Recent Comments

RSS Recent Mobile Money Practice blog posts