Download - TÜV SÜD Product Service GmbH Terminal Quality Management Overview 2010.

TÜV SÜD Product Service GmbH

Terminal Quality ManagementOverview

2010

TÜV Product Service Ltd

Agenda

• Scope• Requirements • Benefits • Process• Recommendations for TQM implementation• Fees• Contact


TQM scope overview

Scope1. Relevant devices:

Terminal Level 1 Components- for contact: InterFace Modules (IFMs) - for contactless: Proximity Coupling Devices ( PCDs)

2. Relevant Vendors: Vendors developing products embedding an IFM or a PCD

Requirements3. Same structure as ISO 9001

4. Focus on configuration management

MethodologyBased on assessment of questionnaires with surveillance by audits.


TQM scope - EMV Level 1 Vs Level 2

7 Application

6 Presentation

5 Session

4 Transport

3 Network layer

2 Data link layer

1 Physical layer

Lev

el 1

Lev

el 2

OSI Model EMV Specifications

Level 2 Component

=

Application

Level 1 Component

=

IFM for contact

Or

PCD for contactless

Product Components

TQM only focuses on Level 1 Component (s)


TQM scope - Product Configurations in the field

• Fully Integrated TerminalTerminal

PCD/IFM

Level 1

Level 2

• Terminal and Intelligent Card Reader

TerminalPCD/IFM

Level 1

Level 2

Card Reader

• Terminal and Transparent Card Reader

TerminalPCD/IFM

Level 1

Level 2

Card Reader

PCD = Proximity Coupling DeviceIFM = InterFace Module

= Products subject to TQM


TQM scope - Terminal Type Approval Level 1

TerminalLevel 1

Terminal Type Approval Level 1 testing

TTA L1Success

One sample

Prototype/ Pre-series

Valid only for the tested sample:

• Specific Level 1 component containing specific HW + SW

• Embedded in specific product (s)

• Is compliant with the relevant specification

The vendor has been able ONCE to develop ONE compliant product configuration


TQM scope - Terminal Level 1 within a Product

Level 1

Level 1 Component interface

Part without impact on PCD/IFM functionality

Product

Product

Level 1 component: PCD or IFMA change in one of

these parts may impact the PCD/IFM

functionality


TQM scope - EMVco policy on changes

1. Major change does require new Type Approval

2. Vendor is responsible for assessing whether the change is minor or major and for demonstrating to the Acquirer that the change is minor.

Source EMVco bulletin 11


TQM requirements

• TQM requires the vendor to have implemented a Configuration Management System ensuring that:

1. The identification of the PCD/IFM and the PCD/IFM interface is sufficient and allows efficient impact analysis of changes on EMV compliance

2. Appropriate processes are implemented to control and improve the Product configuration management from R&D to maintenance.


TQM requirements - Configuration management

• MasterCard needs to be confident that:

1. Product configuration is controlled by the Vendor» Identified» Recorded» Checked

2. Impact of changes is assessed3. Subsequent unauthorized alterations are prevented

(guidelines for maintenance, process for information release to manufacturing sites, etc..)

That is the TQM purpose


• A TQM Label gives confidence that products are compliant with level 1 spec.

– products manufactured in volume,

– products which embed an approved IFM or PCD, but different from the tested model,

– products which embed an updated version of an approved IFM or PCD,

TQM added value


Benefits

• For the Acquirer– Vendor change management is reliable and takes into account EMVCo change

policy– Configuration management of the products will be controlled and continuously

improved by the vendor .– Interoperability issues will be managed following a controlled process by the

vendor.

• For the Vendor– A means to demonstrate to Acquirers that changes done on their products are only

minor changes.– Allow more design flexibility with less cost for approvals. – Give a marketing advantage.


TQM process - Overview

Mandatory process

Conditional process

MasterCardTQM Label

Vendor Registration with Assessment Body

Product Registration

TQM Compliance Assessment

Test of Product SamplesTQM Audit

TQM Label Recommendation and Preparation

TQM Label Grantingby MasterCard

Su

bco

ntr

act

ed

to

Ass

ess

me

nt

Bo

dy

RenewalCompletion of

TQM Questionnaires


TQM process - Outsourcing

• MasterCard has arranged for its Terminal Quality Management scheme to be administered by TÜV Product Service.

From now on, the TQM primary contact is:

Mr Dale WHITAKER

[email protected]

+44-1489-558342

• All your requests for registration, product plan number, documentation, granting of labels, TQM project management, etc. should be sent directly to [email protected]


TQM process - Product registration

• Objective– Identification of each Vendors IFMs or PCDs requiring a TQM label. – Agreement on submission timescale

• Key Steps– Vendor completes an Application Form listing all IFMs/PCDs that need a TQM

label) and proposes dates for submission of TQM Questionnaires.– Assessment Body confirms the schedule or agrees with the Vendor on a

modified schedule.– Assessment Body assigns a TQM Project Plan number for each PCD or IFM

that needs one.• Outcome

– Acknowledgement granted by granting of Project Plan number*.

( * formerly called action plan number)


TQM process - TQM is not required for

– Terminals not subject to TIP, (Terminal Integration Process)– End-of-life products (no longer being manufactured)


TQM process - Questionnaires

Vendor Organizational Description

(VOD)• Valid whatever the PCD or IFM• Objectives:

– Configuration Management System description

– Identification of organizational changes done after last assessment

– Corrective actions follow up,

Type Identification Description

(TID)• Specific to one PCD or to one IFM• Objectives:

– Description of the TTA L1 tested configuration

– Description of all the PCD/IFM “evolutions”

– Description of all the PCD/IFM implementations within products

– Identification of product changes done after last assessment

– Corrective actions follow up,

Based on self-assessment


TQM process - Recommendation to MasterCard

• Objective– The assessment body to make a recommendation to

MasterCard concerning the TQM Label* granting• Key Steps

– Assessment Body send to MasterCard:• The list of IFMs/PCDs involved in the TQM project• A management summary of the TQM project• The final audit report(s), if any• A recommendation for the granting of TQM label(s).

*Note that “TQM Label” means a unique reference allocated to an IFM/PCD following MasterCard’s acceptance of the TQM recommendation. Vendors will receive a “Statement of Compliance” listing all their TQM Labels. A physical label is not required to be attached to a terminal.


Recommendations for TQM implementation:

• Keep written documentation simple – No need for translation into English– Shorter is better– Just improve existing documentation when needed

• Use existing processes– Just improve existing process when needed

• Use existing tools


TQM pricing for EMV Contact and PayPass services

Note 1: Vendor Registration + 1 or 2 VODs + First TID

Amounts in EUR Initial Fee Annual Renewal Fee

Fee 1 TQM Program Fee (Note 1) 6 500 € 3 500 €

Fee 2 Per additional VOD 2 000 € 1 000 €

Fee 3 Per additional TID 1 250 € 800 €

Fee 4 Per additional Manufacturing Site 1 250 € 800 €

Fee 5 Audit Defined by TUV-PS Defined by TUV-PS

Delivered by TÜV Product Service


Contact

• TQM assessment body contact:– [email protected]

• MasterCard contact (for escalation purpose only):– [email protected]