Common Core Definition (CCD) Approval Process

Upon receipt of the test reports from the laboratory, the product provider decides if it will submit the product to EMVCo for approval. Assuming so, the product provider shall complete a Request for Approval form and ask the laboratory to send EMVCo both the test reports and the card security evaluation report. EMVCo will grant a Letter of Approval (LOA) when a test report demonstrates sufficient product conformance. Applicable fees must be paid before the LOA is granted.

The Integrated Circuit (IC) provider and the product provider shall:

• fill out the Registration form
• download and submit a Business Review form to EMVCo.Once EMVCo reviews and accepts the forms, the IC and product provider will receive a contract.

Once the contract is signed, EMVCo will assign both an IC provider registration number and a product provider registration number. Registration is a one-time process.

The product provider shall select a laboratory and execute bilateral, required agreements and contracts. The product provider shall complete an Implementation Conformance Statement (ICS) document in which it provides detailed information about the product and supported features. The laboratory will validate and submit the ICS to EMVCo for verification.

The product provider shall also select a laboratory to perform a Security Evaluation of the card product.

Once EMVCo has accepted the ICS, CCD Level 1 and Level 2 testing will be performed. The test results are documented in test reports that the laboratory submits to the product provider.

The security evaluation of the card product is also performed, with results being sent to product provider.

If the CCD product also supports non-CCD features, the product provider shall select an EMVCo-qualified auditor, which will perform an evaluation to determine that (1) the mandatory CCD requirements are included in the owner specification, (2) the optional CCD requirements in the owner specification are compliant with EMV specifications, and (3) the non-CCD components of the owner specifications do not conflict with the CCD specifications. The auditor will also review the non-CCD level 2 test cases.

Upon receipt of the test reports from the laboratory, the product provider decides if it will submit the product to EMVCo for approval. Assuming so, the product provider shall complete a Request for Approval form and ask the laboratory to send EMVCo both the test reports and the card security evaluation report. EMVCo will grant a Letter of Approval (LOA) when a test report demonstrates sufficient product conformance. Applicable fees must be paid before the LOA is granted.