EviPay NFC HSM: Secure Bank Card Payments, Cryptocurrency Transactions and SEPA Bank Transfers
EviPay NFC HSM protects sensitive payment and cryptocurrency information with NFC HSM technology. On compatible Android devices, bank card information can be securely autofilled into compatible online checkout forms only after the web context has passed Freemindtronic’s fail-closed Autofill security controls and the authorized NFC HSM device is presented.
The Android Autofill security architecture verifies the HTTPS web origin and exact host before releasing protected information. It is designed to reject origin mismatches, HTTP pages, deceptive domains, obvious typosquatting, IDN/homograph mismatches, mixed-origin frames and Browser-in-the-Browser attack contexts.
EviPay NFC HSM also integrates EviSeed NFC HSM technologies for protecting and managing cryptocurrency wallet information, with patented contactless access control and segmented-key authentication mechanisms.
EviPay NFC HSM: One Technology, Multiple Payment Systems
EviPay NFC HSM is designed as an evolving payment-security technology covering multiple ways of paying and transferring value while keeping sensitive financial information under the user’s control.
Its development strategy is organized around three major payment ecosystems:
- Bank Card Payments — secure storage and protected Autofill of payment card information through the NFC HSM, with fail-closed anti-phishing and web-origin verification.
- Cryptocurrency Payments — self-custody wallets, transaction review, NFC HSM cryptographic signing, signature verification and blockchain broadcasting on supported networks.
- SEPA Bank Transfers — protected management of account-holder information, IBAN and BIC through the NFC HSM, with secure preparation of SEPA payment instructions using bank QR codes, structured sharing, copyable payment information and ISO 20022 export. EviPay prepares the payment information; the bank remains responsible for authentication, Verification of Payee where applicable, authorization and execution.
EviPay NFC HSM will continue to evolve with the objective of covering as many payment systems as possible within the technical capabilities of the Freemindtronic NFC HSM ecosystem and the requirements of each payment network.
Vision: protect the payment instrument, protect the authorization process, protect sensitive credentials and cryptographic keys, and minimize their exposure during a transaction.
- What is EviPay NFC HSM?
- Benefits of EviPay NFC HSM
- Secure Android Bank Card Autofill
- Secure SEPA Bank Transfers
- Cryptocurrency Payments & NFC HSM Signing
- Cryptocurrency Payment Flow
- Cryptocurrency Payment Roadmap
- EviPay Payment Technology Roadmap
- Bank Card Payments
- Cryptocurrency Payment Systems
- Bank Transfers
- How to Use EviPay NFC HSM
- EviPay on Computer with EviCore Browser Extension
- EviPay NFC HSM Security
- Features & Functions
- Compatibility
- Comparison with Other Payment Solutions
- EviPay NFC HSM Datasheet
- International Standards
- Conclusion
What is EviPay NFC HSM?
EviPay NFC HSM: Securing Bank Cards, SEPA Transfers and Cryptocurrency Payments
EviPay NFC HSM is a multi-payment security technology designed to protect sensitive information used across conventional and decentralized payment ecosystems. It combines protected bank card information, SEPA-compatible bank-account information and self-custody cryptocurrency wallet capabilities within the Freemindtronic NFC HSM ecosystem.
For bank card payments, EviPay protects payment credentials and enables authorized secure Autofill on compatible Android payment forms. For SEPA bank transfers, it protects account-holder, IBAN and BIC information and can prepare payment instructions for sending or receiving fiat funds. For cryptocurrency payments, it protects wallet information and provides user-authorized cryptographic transaction signing and blockchain broadcasting on supported FIELD-validated networks.
The NFC HSM technology can be integrated into different physical formats, including cards, labels, key rings, PCBs and compatible personalized objects.
Advantages of this Strongbox:
- Credit Card Information Storage: EviPay allows you to save credit card details. It can auto-populate online payment fields, including those related to cryptocurrencies.
- Additional Financial Data: Beyond crypto wallets, the NFC HSM can store other sensitive financial information, such as bank account details.
Technical Details:
- Power Source: The device operates using the NFC signal from an Android phone, which acts as both an HSM (Hardware Security Module) and an HMI (Human-Machine Interface) terminal.
- Memory Capacity: Equipped with EEPROM memory, it can store up to 64 KB of crypto-asset data, equivalent to approximately 33 cryptocurrency wallets (including each wallet’s BIP39 seed phrase, private key, and public key).
Security Features:
- Encryption: Data stored in the EviPay NFC HSM is automatically encrypted. The application employs cutting-edge algorithms, including 256-bit AES in CBC mode and 4096-bit RSA, for key sharing or backups to other storage media.
- Anti-Cloning and Anti-Replay Mechanisms: These prevent unauthorized access or duplication of secrets.
- Read and Write Monitoring: The patented system ensures the integrity and availability of the NFC HSM by monitoring reading and writing via the Android phone’s NFC signal.
- Contactless Access Control: Two distinct access profiles (administrator and users) are defined, preventing unauthorized access to each other’s secrets.
- Segmented Key Authentication: Define up to 9 trust criteria (e.g., geolocation, BSSID, password, or fingerprint) for secret encryption.
Strong box EviPay NFC HSM represents a significant strongbox advancement in securing cryptographic assets, providing peace of mind for users in this specialized domain. Additionally, it incorporates technologies such as EviSeed NFC HSM, EviVault NFC HSM, and EviCore NFC HSM, along with the EviCore NFC browser extension for optimized contactless and passwordless transactions. These combined technologies position EviPay NFC HSM as a comprehensive and robust solution for securing digital assets and facilitating cryptographic exchanges.
What are the Benefits of EviPay NFC HSM?
EviPay NFC HSM: One NFC HSM Security Architecture for Multiple Payment Systems
EviPay NFC HSM provides complementary security capabilities for bank card payments, SEPA bank transfers and self-custody cryptocurrency payments while adapting the authorization workflow to the technical requirements of each payment ecosystem:
- Fail-Closed Authenticator Sandbox for Anti-Phishing and Secure Autofill: EviPay NFC HSM integrates Freemindtronic’s Android Autofill security architecture to protect the release of login, password, TOTP and bank card information. Before protected data can be autofilled, the security layer verifies a trusted HTTPS web context and the exact authorized host. HTTP pages, missing or untrusted web origins, host mismatches, mixed-origin frames and deceptive Browser-in-the-Browser contexts are rejected. The URL Sandbox also preserves distinctions between
www, apex domains and subdomains and includes protections against obvious typosquatting and IDN/homograph deception. If the required security conditions cannot be established, the protected secret is not released from the NFC HSM workflow. - Secure Manager for Payment and Crypto Asset Transfer Information: The EviPay NFC HSM function uses the Freemindtronic app for Android NFC to manage various types of NFC HSM devices, such as Cards, Tags, PCBs, and others, to physically protect credit card, bank account, and especially cryptocurrency wallet information. It also allows users to customize access levels for each stored record and define additional trust criteria to limit the use of these sensitive data, such as a fingerprint and/or a geo-zone and/or a password.
- Secure SEPA Bank Account and Transfer Preparation: EviPay NFC HSM protects private or professional bank-account information such as account-holder name, IBAN and BIC inside the NFC HSM workflow. For validated SEPA accounts, the Freemindtronic application can also prepare receiving or sending operations using a reviewed payment order with an optional or required EUR amount and payment reference according to the selected workflow. Supported output methods include a SEPA bank QR code, structured payment information, Android sharing, copyable bank-transfer information and ISO 20022 export. EviPay does not execute or custody the funds: the receiving bank or payment service provider remains responsible for final beneficiary verification, authentication, authorization and execution.
- Loyalty function for managing and using loyalty cards associated with a payment system via QR code or Bar code: The loyalty function allows you to store and use your loyalty cards from your favorite stores or services. You can store the numbers, codes or QR codes of your loyalty cards in the NFC HSM device, which encrypts them without contact. You can then use the NFC HSM device to scan the QR code or Bar code of your loyalty card on the payment terminal of the store or service. You can thus benefit from the advantages, discounts or special offers linked to your loyalty card.
- Battery-Free Operation and Longevity: The NFC HSM device operates maintenance-free for life without a battery, using energy harvesting from smartphone NFC signals for self-powering.
- Virus-Sensitive Zone Security (such as COVID): EviPay NFC HSM helps you avoid physical contact for using sensitive data on a computer system via the local network, auto-encrypted from the NFC HSM device. This reduces the risk in environments that may be contaminated by viruses like COVID-19. You can perform various protected operations such as secure bank card Autofill and authorized cryptocurrency transaction workflows. For supported blockchain payments, private keys are used through the NFC HSM signing workflow rather than being autofilled into websites.
- Local Network Auto-Encryption: You can also use auto-filling remotely via the local network or by sharing a connection through your phone. This feature improves convenience and protects your health, allowing you to use the information contained in the devices on a nearby computer system or remotely on the same local network.
- NFC Contactless Security and Compliance: EviPay NFC HSM physically protects unauthorized access to credit cards with NFC stored in wallets or others against any malicious reading attempts of your credit cards. This is possible when the NFC HSM EviSeed device is juxtaposed with credit cards. Indeed, the NFC HSM protects other credit cards from detection by a scanner. Freemindtronic’s NFC HSMs have anti-collision technology that takes priority and prevents the reading of other bank cards. Additionally, Freemindtronic’s NFC HSM PCB models also have a copper ground plane that naturally short-circuits NFC signals, protecting all juxtaposed devices along with the anti-collision system. This is an effective physical protection of payment cards and others against all risks of remote and non-invasive attack attempts.
- Air Gap Security: EviPay NFC HSM uses physical isolation security, separating itself from computer networks. This ensures that the encrypted data of the NFC HSM Card device is stored exclusively in its non-volatile memory, preventing unauthorized access.
- Protection Against Fraudulent Use: EviPay NFC HSM ensures that all uses of financial information stored in the NFC HSM are not stored on computer systems, phones, or online cryptocurrency transaction sites. This preserves your privacy and anonymity. The encrypted data is transmitted securely to the computer system, protecting it from potential threats and unauthorized access.
- Physical Protection of Credit Cards: Advantageously, due to the storage of information from all types of credit cards, you can erase sensitive data such as the CCV of bank cards. Indeed, saved in the NFC HSM Card devices. Erasing the CVV present on the card secures it against the risk of illicit use, especially online.
- Enhanced Security: EviSeed uses the standards of BIP (Bitcoin Improvement Proposal) formats, notably BIP39, to generate and enter recovery phrases without error thanks to a checksum control.
- Encrypted Backup: EviSeed allows you to save your recovery phrases encrypted with your own encryption keys, which can be segmented according to an implementation of the patented invention on segmented key authentication.
- Extended Compatibility: EviSeed is compatible with most popular wallets and blockchains that use the BIP39 standard to generate their recovery key.
- Durability: The chosen supports for storing your recovery phrase can resist water, high heat, shocks. They do not deteriorate over time.
- Ease of Use: With EviSeed, there is no need to write or engrave your recovery phrase; simply enter the seed phrase to be automatically stored encrypted in the NFC HSM supports.
- Secure Exchange: EviSeed also generates a QR code containing your encrypted recovery phrase, which you can print, share, send, or save between NFC HSM devices by scanning the encrypted QR code in RSA 4096.
Additional Features:
- Cryptocurrency Transfer Between NFC HSM Devices: A notable innovation is the ability to store more than thirty different cryptocurrency wallets in a single NFC HSM support. It is possible to credit one wallet contained in an NFC HSM from another NFC HSM, transferring cryptocurrencies between wallets contained in different NFC HSMs. This technology can be custom adapted under a white label license.
- Cryptocurrency Transfer: Similar to transfers between NFC HSM devices, it is also possible to transfer cryptocurrencies by defining the values to be transferred to a public address. Thus, EviPays NFC HSM technology can be adapted and implemented as a payment system for goods and services in cryptocurrency from an NFC HSM. This technology must also be custom adapted under a white label license.
These features position EviPay NFC HSM as a comprehensive solution for enhanced security in managing payment and cryptocurrency transfer information.
Secure Bank Card Autofill on Android with NFC HSM
Bank card Autofill protected against phishing and deceptive web contexts
EviPay NFC HSM enables compatible online bank card forms to be securely autofilled directly on Android. Sensitive payment information remains protected by the NFC HSM workflow and is released only after the Android Autofill security checks have validated the web context and the authorized NFC HSM device has been presented.
Fail-Closed Security Before NFC HSM Release
Before protected bank card information can be released, Freemindtronic Autofill 3.2.2.8 applies a fail-closed security chain:
- HTTPS verification — HTTP payment pages are rejected.
- Exact web origin and host verification — the website must match the authorized host associated with the NFC HSM record.
- URL Sandbox — scheme, host, Punycode/IDN representation and port are used to establish the web identity.
- Strict domain isolation —
www.example.com,example.comand other subdomains are not automatically treated as the same host. - Anti-typosquatting protection — obvious look-alike domains such as
paypa1.comversuspaypal.comcannot obtain the trusted site’s Autofill match. - IDN / homograph protection — visually deceptive hostnames using different alphabets do not inherit authorization from the legitimate host.
- Mixed-origin and iframe protection — conflicting fillable web origins cause the Autofill context to be treated as untrusted.
- Browser-in-the-Browser protection — visual elements such as titles, favicons, links or displayed URLs are never used as proof of web identity.
- Overlay and tapjacking protection — obscured interaction conditions can prevent protected information from being released.
- NFC HSM authorization — payment data is obtained only after the security context has passed the required controls and the NFC HSM is presented.
Fail-closed principle: if the trusted HTTPS origin cannot be established, the host does not match, the page contains an untrusted or mixed web origin, or the release security guard denies the operation, protected bank card information is not autofilled.
What Bank Card Information Can Be Autofilled?
For compatible payment forms, the dedicated CARD workflow can classify and fill supported payment fields such as:
- Cardholder name —
cc-name - Card number (PAN) —
cc-number - Expiration information —
cc-exp, including compatible month/year fields - Security code —
cc-csc(CVV / CVC / CSC)
Payment Autofill Is Isolated from Login and MFA
The CARD workflow is independent from login, password, PIN and TOTP workflows. A recent login or MFA session cannot authorize the release of bank card information. The temporary MFA mechanism used for multi-step authentication is not an authorization mechanism for a payment checkout.
Designed to Resist Phishing, Typosquatting and BitB Attacks
EviPay does not trust what a payment page merely looks like. A copied logo, fake address bar, favicon, hyperlink, page title or visually convincing Browser-in-the-Browser window is not sufficient to authorize Autofill.
The security decision relies on the web origin supplied through the Android Autofill context, the exact authorized host and the NFC HSM security workflow.
Temporary Handling of Sensitive Payment Data
PAN, CVV/CVC/CSC and other protected CARD values are treated as sensitive secrets. The Autofill architecture is designed not to place these secrets in the clipboard, notifications or SavedState. Temporary sensitive values used for the authorized Autofill operation are wiped from application memory after use.
Android and Computer Interoperability
On Android, EviPay can use the native Android Autofill framework with the Freemindtronic application and the NFC HSM device.
On computers, the EviCore NFC HSM Browser Extension can use the Freemindtronic Android application and the same NFC HSM ecosystem to provide protected Autofill through the local connection workflow.
Android: Payment page → Android Autofill → URL/Origin Security → NFC HSM → Authorized CARD Autofill
Computer: Payment page → EviCore NFC HSM Browser Extension → Freemindtronic Android application → NFC HSM → Authorized Autofill
Secure SEPA Bank Transfers with EviPay NFC HSM
From Protected Bank Account Data to a Reviewed SEPA Payment Order
EviPay NFC HSM extends the BANK function beyond protected storage of bank-account information. Account-holder name, IBAN and BIC can remain protected through the NFC HSM workflow while the Freemindtronic application prepares standardized information for receiving money or preparing a SEPA bank transfer.
The objective is not to replace the bank. EviPay prepares and protects the payment information while the bank or payment service provider remains responsible for beneficiary verification, user authentication, authorization and execution of the transfer.
Two Simple Banking Operations
The BANK workflow provides two user-oriented operations:
- Receive Money — use a protected BANK account to prepare bank details for receiving a SEPA transfer. Amount and payment reference can be optional according to the selected workflow.
- Send Money — select a protected BANK beneficiary, enter the required EUR amount and optional payment reference, review the payment information and authorize access through the NFC HSM before generating the selected transfer format.
Available SEPA Transfer Methods
A validated bank payment order can be represented through several complementary methods:
- SEPA Bank QR Code — generates an EPC-compatible QR payment payload for compatible banking applications.
- Structured Payment Information — provides beneficiary, IBAN, BIC, amount and reference in a human-readable structured format.
- Android Share — securely hands the prepared payment information to a compatible Android sharing target selected by the user.
- Copy Payment Information — allows the user to copy the structured bank-transfer information when manual transfer to a banking application is required.
- ISO 20022 Export — an advanced export option can generate ISO 20022 payment information for compatible banking, professional or accounting workflows.
Receive Money
Protected BANK account → Amount / reference (optional) → Review → NFC HSM → SEPA QR / Share / Copy
The user can therefore securely retrieve protected bank-account information and generate a convenient payment request without providing Freemindtronic with access to the bank account itself.
Prepare a Bank Transfer
Protected beneficiary BANK account → EUR amount → Reference → Human Review → NFC HSM → SEPA output → Banking application
Before the payment information is exported, the user can review the beneficiary, IBAN, BIC, amount and reference.
The final bank-transfer authorization is always performed through the user’s bank or authorized payment service provider.
SEPA and IBAN Validation
EviPay validates the supported bank-account information before producing a SEPA payment order. Invalid IBAN, BIC or incompatible SEPA information causes the operation to fail closed rather than silently generating an invalid payment payload.
Designed for Sovereign Banking Data Protection
The EviPay BANK architecture is designed around data minimization:
- bank-account information remains protected through the NFC HSM workflow;
- no Freemindtronic cloud account is required to prepare the SEPA payment information;
- amount, reference and payment payload are treated as temporary transaction data;
- the application does not custody funds;
- the application does not automatically submit or confirm the bank transfer;
- the bank remains responsible for Verification of Payee where applicable, Strong Customer Authentication and payment execution.
Important: EviPay NFC HSM prepares and protects SEPA payment information. It does not itself execute a bank transfer or guarantee that a bank supports every generated handoff format.
Multiple Standards, One Protected Bank Account
The same protected BANK information can therefore serve several interoperable workflows:
NFC HSM BANK → Review → SEPA QR | Structured Text | Android Share | Copy | ISO 20022
This multi-channel approach is designed to maximize interoperability while keeping the bank as the final trusted execution environment.
Self-Custody Cryptocurrency Payments with EviPay NFC HSM
Sign and Broadcast Blockchain Payments with an NFC HSM
EviPay NFC HSM provides a self-custody cryptocurrency payment architecture in which the user controls the authorization and signing of blockchain transactions through an NFC HSM device.
Unlike a custodial cryptocurrency service, EviPay does not need to hold cryptocurrency funds on behalf of the user. The private key used to authorize a supported blockchain payment remains protected by the NFC HSM workflow.
For FIELD-validated production chains, EviPay can prepare, review, cryptographically sign, verify and broadcast supported cryptocurrency transactions.
How an EviPay Cryptocurrency Payment Works
The payment process separates identification, transaction preparation, human approval, cryptographic signing and blockchain broadcasting.
- Tap #1 — Identify the wallet: the user presents the NFC HSM device. The application obtains the information required to identify the selected wallet and its public address. Sensitive secret material is cleared before network communication.
- Create or receive the payment request: the destination address and transaction parameters can be obtained through the supported payment workflow, including compatible QR code or URI-based payment requests.
- Balance Gate: before proceeding, the application checks the conditions required for the transaction. If the required validation cannot be established, the payment workflow fails closed.
- Human Review: the transaction that is about to be signed is presented for review. The user can verify the relevant payment information before authorizing the cryptographic operation.
- Tap #2 — NFC HSM Signature: the NFC HSM is presented again to authorize the signing operation. The transaction payload approved by the user is cryptographically signed using the protected wallet key.
- Signature Verification: the application verifies the result of the signing operation before the transaction can continue.
- Blockchain Broadcast: in AUTO mode, the same signed payload is broadcast to the supported blockchain network. The application does not automatically create a different transaction or silently re-sign another payload.
- Transaction Receipt: after the operation, the user can receive human-readable transaction information and an explorer reference or QR code without exposing the seed phrase, mnemonic or private key.
Two NFC Interactions, Two Different Purposes
The two NFC interactions provide a clear separation between identifying the wallet and authorizing the transaction.
Tap #1:
NFC HSM → Wallet identification → Public address → Payment preparation
Tap #2:
Reviewed transaction → NFC HSM → SIGN → VERIFY → Signed transaction
Then:
Verified signed payload → Blockchain broadcast → Transaction receipt
The Private Key Does Not Need to Be Sent to the Blockchain Network
The private key is used to authorize the cryptographic signature through the NFC HSM workflow. Blockchain communication uses the resulting signed transaction rather than requiring the private key itself to be transmitted to the blockchain network.
This distinction is fundamental to the EviPay self-custody architecture: the blockchain needs the valid cryptographic transaction signature, not disclosure of the user’s private key.
Human Review Before Cryptographic Authorization
Before Tap #2, EviPay separates transaction preparation from transaction authorization.
The transaction presented for approval represents the intent that will subsequently be signed. This allows the user to review the relevant transaction information before the NFC HSM signing operation.
The objective is to avoid treating transaction signing as an invisible background operation.
Review → Sign → Verify → Broadcast: the transaction is reviewed before signing, the NFC HSM performs the authorized cryptographic operation, the signature is verified, and the signed payload can then be submitted to the supported blockchain network.
Same Signed Payload for Automatic Broadcast
When automatic broadcasting is enabled for the supported network, EviPay broadcasts the same payload resulting from the authorized signing workflow.
The AUTO stage does not mean automatic authorization of another payment. It is the network submission stage of the transaction that has already passed the review, NFC signing and verification process.
Supported FIELD-Validated Cryptocurrency Payments
The production payment interface is restricted to blockchain implementations that have passed the required FIELD validation.
| Blockchain Payment | NFC Signature | Broadcast | Production Status |
|---|---|---|---|
| EVM Native | Supported | Automatic broadcast with network gate | FIELD validated |
| ERC-20 | Supported | Automatic broadcast with network gate | FIELD validated |
| XRPL Payment | Supported | Network-dependent; Mainnet submission is disabled by default in the documented release configuration | FIELD E2E validated |
Other blockchain implementations that have not passed the required FIELD release validation are not exposed as production payment capabilities.
Cryptocurrency Payment Roadmap
EviPay NFC HSM is designed to progressively extend its self-custody payment architecture to additional blockchain networks.
The objective is to provide a consistent security model across supported cryptocurrencies:
Identify → Prepare → Review → NFC HSM Sign → Verify → Broadcast → Receipt
The current production scope is limited to blockchain implementations that have passed the required Freemindtronic FIELD validation and release gates.
Future developments are intended to extend transaction preparation, NFC HSM signing and payment capabilities to additional major blockchain ecosystems, including:
- Bitcoin (BTC) — planned support for Bitcoin transaction preparation, NFC HSM authorization and cryptographic signing.
- Litecoin (LTC) — planned support for Litecoin payment transactions and NFC HSM signing.
- Solana (SOL) — planned integration of Solana transaction signing and payment workflows after the required implementation and FIELD validation.
- Stellar (XLM) — planned support for Stellar payment transactions and NFC HSM cryptographic authorization.
- Cardano (ADA) — planned support for Cardano transaction preparation and NFC HSM signing.
Roadmap notice: these additional blockchain payment capabilities are development objectives and must not be interpreted as currently released functionality. A blockchain payment capability is exposed in production only after the corresponding implementation, security validation and Freemindtronic FIELD release requirements have been completed.
A Multi-Blockchain Payment Architecture
The long-term objective is not simply to add a list of cryptocurrencies. EviPay aims to provide a common NFC HSM security architecture that can be adapted to the transaction model and cryptographic requirements of each supported blockchain.
Each blockchain integration may require its own:
- address and wallet derivation rules;
- transaction serialization format;
- fee calculation mechanism;
- balance and transaction validation rules;
- cryptographic signature algorithm;
- network and broadcast mechanism;
- transaction identifier and blockchain explorer format;
- FIELD security and end-to-end validation.
The common EviPay principle remains the same: the user reviews the payment intent before authorization, the NFC HSM protects the cryptographic signing workflow, and only the resulting authorized transaction is submitted to the supported blockchain network.
Self-Custody — Not an Exchange
EviPay NFC HSM is designed around self-custody.
The cryptocurrency payment functionality is not intended to operate as:
- a cryptocurrency exchange;
- a broker or OTC service;
- a custodian holding cryptocurrency on behalf of third parties;
- a cryptocurrency mixer or fund-obfuscation service;
- an in-app token sale or ICO platform.
The user remains responsible for the wallet and authorizes supported blockchain transactions through the NFC HSM.
Cryptocurrency Payment Is Independent from Bank Card Autofill
EviPay uses separate security workflows for conventional online card payments and blockchain payments.
| Bank Card Payment | Cryptocurrency Payment |
|---|---|
| HTTPS checkout form | Blockchain payment request |
| Exact web-origin validation | Wallet and transaction identification |
| Anti-phishing / BitB security | Balance and transaction gates |
| NFC HSM authorization | Human transaction review |
| Protected CARD Autofill | NFC HSM cryptographic signature |
| Merchant payment processor handles the card transaction | Signature verification and blockchain broadcast |
A bank card Autofill authorization does not authorize a cryptocurrency transaction. Likewise, a cryptocurrency signing operation does not authorize the release of CARD, login, password or TOTP information.
Fiat Values Are Informational Only
When a fiat equivalent is displayed for a cryptocurrency transaction, it is informational.
The fiat display is not the cryptographic source of truth and is not what the NFC HSM signs. The blockchain transaction parameters remain authoritative for the cryptographic payment operation.
From NFC HSM to Blockchain
The complete EviPay payment architecture can therefore be summarized as:
NFC HSM → Wallet identification → Payment request → Balance Gate → Human Review → NFC HSM SIGN → VERIFY → Signed payload → Blockchain broadcast → Receipt
This architecture combines physical NFC interaction, self-custody wallet control, explicit transaction review and cryptographic transaction signing in a contactless payment workflow.
EviPay NFC HSM Payment Technology Roadmap
From Payment Credentials to Payment Authorization
EviPay NFC HSM is an evolving Freemindtronic technology whose objective is to secure multiple forms of electronic payment while minimizing the exposure of sensitive financial information.
The roadmap is structured around three complementary payment families.
1. Bank Card Payments
The bank card architecture focuses on protecting payment credentials during online checkout.
Secure CARD workflow:
Bank card information → NFC HSM → HTTPS / Origin Security → User Authorization → Protected Autofill → Merchant Checkout
Supported protected information can include cardholder information, PAN, expiration information and CVV/CVC/CSC according to the compatible CARD workflow.
The objective is to prevent protected card information from being released to phishing sites, deceptive domains, mixed-origin contexts or unauthorized applications.
2. Cryptocurrency Payments
The cryptocurrency architecture goes beyond credential Autofill because a blockchain payment requires cryptographic transaction authorization.
Crypto workflow:
NFC HSM → Wallet Identification → Payment Request → Balance Gate → Human Review → NFC HSM SIGN → VERIFY → Blockchain Broadcast → Receipt
Current and future blockchain integrations are designed around a self-custody model in which the user controls the wallet and authorizes the transaction.
The development roadmap is intended to progressively cover major blockchain payment ecosystems, with production availability depending on implementation and FIELD validation.
Current FIELD-oriented payment scope
- EVM native transactions
- ERC-20 token transactions
- XRPL Payment according to the enabled release and network gate
Planned blockchain payment expansion
- Bitcoin (BTC)
- Litecoin (LTC)
- Solana (SOL)
- Stellar (XLM)
- Cardano (ADA)
- Additional blockchain payment systems where the required cryptographic operations, transaction model and security controls can be integrated into the EviPay NFC HSM architecture.
3. SEPA Bank Transfers
EviPay now extends the BANK function from protected bank-account storage to secure preparation of SEPA payment information.
Current SEPA workflow:
Protected BANK account → Beneficiary / destination → EUR amount and reference → Human Review → NFC HSM authorization → SEPA output → Banking application → Bank authorization and execution
Supported output channels include:
- SEPA bank QR code for compatible banking applications;
- structured payment information;
- Android Share;
- copyable bank-transfer information;
- ISO 20022 export for advanced compatible workflows.
EviPay prepares and protects the payment information but does not act as the bank, custodian or payment initiation service provider.
Future Banking Interoperability
The architecture also reserves a future capability for direct interoperability with compatible banks, fintechs or regulated payment providers.
This capability remains disabled until a compatible provider, security model and applicable regulatory requirements have been validated.
Secure bank-form Autofill also remains a future optional capability because IBAN, BIC, beneficiary and payment-reference fields are not universally standardized across banking applications and websites.
One Security Philosophy Across Different Payment Systems
Although bank cards, cryptocurrencies and bank transfers use fundamentally different infrastructures, EviPay’s objective is to provide a consistent security philosophy:
- Verify the destination or execution context before releasing sensitive information or authorizing an operation.
- Keep sensitive information protected by the NFC HSM workflow whenever technically possible.
- Require explicit user authorization for sensitive payment operations.
- Separate identification, preparation and authorization so that identifying a payment destination does not automatically authorize a transaction.
- Fail closed when the required security conditions cannot be established.
- Minimize secret exposure on smartphones, computers, websites and network services.
The EviPay Vision
EviPay NFC HSM is intended to continue evolving toward broader payment-system coverage within the technical capabilities of the Freemindtronic technology and the requirements of each payment ecosystem.
Bank Cards + Cryptocurrency + Bank Transfers
Rather than forcing these different payment technologies into a single protocol, EviPay applies specialized security workflows to each one while maintaining a common NFC HSM security foundation.
EviPay development principle: a payment capability should only be presented as operational once its complete workflow — preparation, authorization, security controls and execution — has reached the required implementation and validation level.
To harness the full potential of EviPay NFC HSM technology, follow these active steps:
Initiate by Downloading
Begin by downloading the Freemindtronic app. This app is not only compatible with EviSeed NFC HSM but also integrates seamlessly with all Freemindtronic technologies, including EviCore NFC HSM for Android NFC phones and the browser extension for computers.
Proceed to Pair
Continue by pairing your NFC HSM Card device with your Android NFC phone through the Freemindtronic app. Consequently, the app will automatically recognize the model and brand (white label) of the device. Subsequently, you can register various information such as credit card details and bank accounts.
Engage in Wallet Creation
Directly manage wallet creation from the NFC HSM device, utilizing EviSeed NFC HSM, EviVault NFC HSM, and the technology for creating wallets on the Bitcoin and Ethereum blockchains. The wallet, including a BIP 39 format secret key, a private key, and a public key, will be auto-generated. Furthermore, the public address will be auto-generated from this information, enabling transaction signatures for operations like transfers and receipt of cryptocurrency.
Envision Payment Solutions
Imagine using it for payment of goods and services via a simple scan of a public address to transfer cryptocurrency from the NFC HSM. This innovative approach can be realized under a white label license, tailored to the market targeted by the licensee.
Enhance Security
Adapt the security level to fortify the use of the NFC device by adding trust criteria. For instance, to confirm a transaction, the user must validate all trust criteria, such as a password or fingerprint and/or being within an authorized geographic zone.
Expand Possibilities
The EviSeed NFC HSM technology, protected by two international patents, notably in the United States, broadens the horizons where other technological solutions are limited.
Remember, it’s essential to incorporate all the information provided to preserve the integrity of the original text, especially regarding white label technologies that imply customization according to the market targeted by the white label licensee.
Enhance Your Security with EviPay NFC HSM
Unlock the full potential of EviPay NFC HSM on your desktop using the EviCore NFC HSM Browser Extension. This powerful, free tool bridges your NFC HSM device and the websites you frequent, ensuring a seamless and secure online experience. Pair it effortlessly with our Freemindtronic app for NFC-enabled phones, available on Google Play, and enjoy the convenience of advanced secret management.
Effortless Encryption and Auto-Fill Features
With EviCore NFC HSM Browser Extension, encrypting and decrypting data is as simple as using your phone as a terminal. Say goodbye to the hassle of remembering passwords; our extension allows for automatic form-filling and login, safeguarding your secrets without the need to know or access them directly.
Multi-Factor Authentication Made Easy
Experience robust security with multi-factor authentication powered by our Android NFC app. EviCore NFC HSM technology automatically validates every authentication factor set by you, providing peace of mind with every use.
Additional Tools for Enhanced Protection
Beyond NFC capabilities, the extension comes equipped with a password generator, QR Code generator, and domain name extension alerts to shield you from potential fraud. These tools are at your disposal even without the NFC device.
Getting Started with EviCore NFC HSM Browser Extension
- Download the Freemindtronic Extension from the Chrome Web Store or other compatible browsers.
- Pair your NFC HSM device with your phone by scanning a QR code provided by the extension.
- Establish a secure connection between your phone and computer using an encrypted local or ad-hoc network, fortified with one-time keys and certificate renewals.
- Access and manage your secrets with ease, utilizing the extension for various online activities.
EviPay NFC HSM: Elevating Cryptocurrency Security
EviPay NFC HSM harnesses EviCore NFC HSM technology to protect sensitive data within NFC HSM devices. Let’s explore the key aspects:
Algorithmic Precision:
- EviPay utilizes a variety of encryption algorithms, each selected for their specific use case.
- Algorithms are chosen to leverage their strengths and secure any potential weaknesses.
- For example, AES CTR SHA256 with segmented keys provides robust symmetric encryption.
Holistic Security Approach:
- Zero Trust, Zero Knowledge: EviPay functions without the need for servers, databases, or online account creation.
- Transactions are kept confidential, ensuring user anonymity.
- EviSeed NFC HSM technology, supported by international patents, delivers unmatched security.
Seamless Interaction:
- Wallet Creation: Directly generate wallets on the Bitcoin and Ethereum blockchains.
- BIP 39 format secret keys, private keys, and public keys are auto-generated.
- Public addresses are created from the private keys, facilitating secure transactions.
Innovative Possibilities:
- Cryptocurrency Transfer: Transfer cryptocurrencies effortlessly by setting values to public addresses.
- White Label Adaptation: Tailor EviPay to specific markets with a white label license.
User-Friendly Experience:
- Recovery phrases need not be written or engraved; EviPay manages this automatically.
- Secure QR Code Exchange: Encrypted recovery phrases can be shared via QR codes encrypted with RSA 4096.
Physical Protection:
- EviPay defends against unauthorized access, modification, or interception.
- Sensitive data, like CCV from credit cards, can be erased for added security.
- Air gap security provides data isolation, enhancing protection.
In conclusion, EviPay NFC HSM stands out as an ideal solution for securing sensitive data and safeguarding cryptographic assets. Its seamless integration and robust encryption offer a superior choice for users seeking
EviPay NFC HSM has different functions that allow you to manage and use your payment and money transfer information in various ways. Here is a table that summarizes the main functions of EviPay NFC HSM and their features:
| FUNCTION | DESCRIPTION | FEATURES |
|---|---|---|
| Authenticator Sandbox | Fail-closed anti-phishing, anti-typosquatting and secure Autofill |
|
| Crypto Wallet & Payment | Self-custody cryptocurrency wallet, transaction signing and blockchain payment |
|
| Card | NFC HSM protection and secure bank card Autofill |
|
| Bank Account / SEPA | Protected bank-account management and SEPA payment preparation |
|
| Loyalty | Management and use of loyalty cards associated with a payment system |
|
| NFC/RFID Blocking | Protection of contactless cards from unauthorized reading |
|
You can access these functions from the EviPay NFC HSM application on your phone or from the EviCore NFC HSM Browser Extension on your computer.
EviPay NFC HSM is compatible with various types of cards and cryptocurrencies. Here is a table that shows some examples of compatible cards and cryptocurrencies:
| TYPE | EXAMPLES |
|---|---|
| SEPA Bank Account | Supported SEPA bank accounts using validated account-holder, IBAN and BIC information |
| SEPA Payment Formats | SEPA bank QR, structured payment information, Android Share, copyable transfer information and ISO 20022 export |
| Bank card | Visa, Mastercard, American Express, etc. |
| Credit card | Visa, Mastercard, American Express, etc. |
| Loyalty card with payment | Carrefour, Auchan, Leclerc, etc. |
| Loyalty card without payment | Sephora, Fnac, Ikea, etc. |
| Cryptocurrency Payments | FIELD-validated EVM native and ERC-20 payment workflows, with XRPL Payment according to the enabled release and network gate. Additional blockchain ecosystems including Bitcoin, Litecoin, Solana, Stellar and Cardano are part of the development roadmap. |
You can use EviPay NFC HSM to store and use any of these cards and cryptocurrencies securely and easily.
EviPay NFC HSM: A Comprehensive Cryptocurrency Payment Solution
Unique Features of EviPay NFC HSM
EviPay NFC HSM is a hardware-based solution that stands out in the cryptocurrency payment landscape. It offers a suite of features that provide enhanced security and functionality for managing and transacting with digital assets.
Comparison with Other Cryptocurrency Payment Solutions
Here’s an updated comparison of EviPay NFC HSM with other cryptocurrency payment solutions, focusing on their ability to handle transactions for products and services:
| Feature | EviPay NFC HSM | Ledger Nano X | Trezor Model T | ELLIPAL Titan | CoolWallet Pro | PayPal |
|---|---|---|---|---|---|---|
| Direct Wallet Creation | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
| Multiple Wallets (Up to 33) | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Segmented key authentication system | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Encryption level AES 256 SHA256 bits & 1x RSA 4096 bits | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Number of secrets stored up to 100 | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Access control system admin & user | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| 100% Contactless Operation | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| International Patents | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Private Key and Seed Phrase Sharing | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Android NFC Phone Compatibility | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Browser Extension for Chromium and Firefox | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Credit Card and Bank Account Information Storage | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
| White Label Customization for Market Adaptation | ✔ | ❌ | ❌ | ❌ | ❌ | ❌ |
Advantages Over Other Solutions
EviPay NFC HSM offers a unique combination of features not commonly found in other solutions. It supports the creation of up to 33 different wallets within a single device, ensuring that an entire financial ecosystem is stored securely in one place.
Accessibility and User-Friendliness
Its 100% contactless operation and compatibility with Android NFC phones and browser extensions make it highly accessible and user-friendly.
Security and Innovation
The device’s international patents highlight its innovative approach to security, enabling the secure sharing of private keys and seed phrases.
EviPay NFC HSM vs. PayPal
On the other hand, although PayPal recently introduced cryptocurrency transactions, it does not offer the same level of hardware security or the ability to create and manage multiple wallets.
White Label Customization
EviPay NFC HSM’s white label customization also allows for bespoke implementations, making it a versatile choice for businesses looking to integrate cryptocurrency payments into their services.
EviPay NFC HSM revolutionizes the way we handle contactless transactions, offering a suite of features that enhance security and convenience. Here’s an improved overview of its technical specifications:
| EviPay NFC HSM Datasheet | Technical Specifications and Features |
|---|---|
| Encryption Algorithms | AES 256 bits and RSA 4096 bits |
| Memory Capacity | 64 KB EEPROM |
| Communication Protocols | ISO/IEC 15693 |
| Operating Frequency | 13.56 MHz |
| Operating Distance | Up to 10 cm |
| Operating Temperature | -40°C to +85°C |
| Data Retention | Up to 40 years |
| Write Endurance | Up to 1,000,000 cycles |
| Power Supply | Via NFC signal |
| Dimensions | Depending on device type |
| Weight | Depending on device type |
| Contactless In-Store Payments | Utilize your NFC HSM Card device at any NFC-enabled terminal for seamless payments. Online payments require no physical payment information. |
| Secure Online Bank Card Autofill | On compatible Android payment forms, the CARD workflow can autofill supported cardholder, PAN, expiration and CVV/CVC/CSC fields after HTTPS origin validation, exact-host security checks and authorized NFC HSM interaction. |
| Contactless Money Transfers | Send and receive funds effortlessly with other NFC HSM Card or Freemindtronic app users, and transfer money to cryptocurrency wallets. |
| SEPA Bank Transfer Preparation | Prepare secure SEPA bank transfers and payment requests using bank-account information protected through the EviPay NFC HSM workflow. Supported methods include SEPA bank QR codes, structured payment information, Android Share, copyable transfer details and ISO 20022 export. EviPay prepares the payment information while the user’s bank or authorized payment service provider remains responsible for beneficiary verification, authentication, authorization and execution. |
| SEPA Receive Money | Uses bank-account information protected through the NFC HSM workflow to prepare the information required to receive a SEPA payment. Depending on the selected workflow, the amount and payment reference can be optional. |
| SEPA Send Money | Uses protected beneficiary bank-account information together with the EUR amount and payment reference to prepare a reviewed SEPA transfer instruction before NFC HSM authorization and handoff to the banking environment. |
| SEPA Bank QR Code | Generates an EPC-compatible SEPA payment QR payload containing the supported beneficiary and payment information for compatible banking applications. |
| Structured SEPA Payment Information | Provides supported beneficiary, IBAN, BIC, amount and payment-reference information in a structured human-readable format for compatible transfer workflows. |
| SEPA Android Share & Copy | Allows prepared SEPA payment information to be shared through a compatible Android target selected by the user or copied for manual use in a banking application when required. |
| ISO 20022 Export | Provides an advanced ISO 20022 payment-information export for compatible banking, accounting or professional workflows. |
| SEPA Human Review | Displays the relevant beneficiary and payment information for user review before the protected BANK information is used to generate the selected SEPA transfer format. |
| Bank Execution Boundary | EviPay prepares and protects the SEPA payment information but does not custody funds or automatically execute the bank transfer. Final beneficiary verification, authentication, authorization and execution remain under the responsibility of the bank or authorized payment service provider. |
| Self-Custody Cryptocurrency Payments | Supports user-authorized blockchain payments through a self-custody NFC HSM workflow. The application does not custody cryptocurrency funds on behalf of the user. |
| Cryptocurrency Payment Flow | Identify wallet → payment request → Balance Gate → Human Review → NFC HSM SIGN → VERIFY → broadcast signed payload → transaction receipt. |
| NFC Transaction Signing | A second NFC interaction authorizes the cryptographic signing stage after transaction preparation and Human Review. |
| Signed Payload Verification | The result of the NFC HSM signing operation is verified before the transaction proceeds to the network submission stage. |
| Automatic Blockchain Broadcast | For supported FIELD-validated networks and enabled network gates, AUTO submits the same signed payload produced by the authorized signing workflow without automatically re-signing a different transaction. |
| FIELD-Validated Crypto Networks | EVM native and ERC-20 are FIELD validated. XRPL Payment has FIELD end-to-end validation, with network submission governed by the release configuration. |
| Transaction Review | The payment intent is presented for Human Review before the NFC HSM cryptographic signing operation. |
| Transaction Receipt | Provides human-readable transaction information and compatible blockchain explorer reference / QR information without including seed phrases, mnemonics or private keys. |
| Fiat Display | Any displayed fiat equivalent is informational only. It is not the cryptographic source of truth and is not the value signed as a fiat payment. |
| Contactless Access Control | Access your blockchain financial information securely. Define distinct access profiles for administrators and users, ensuring privacy and control. |
| Segmented Key Authentication | Encrypt your data with up to 9 trust criteria, such as geolocation and biometrics, tailoring security to your preferences. |
| Hardware Encryption with Secure Element | Store your data in a 64 KB EEPROM memory, shielded by top-tier encryption algorithms like AES 256 bits and RSA 4096 bits. |
| Air Gap Security with Non-Volatile Memory | Isolate your financial data from networks, storing it in non-volatile memory for unmatched protection. |
| Anti-Cloning and Anti-Replay Protection | Safeguard your transactions with unique anti-cloning and anti-replay mechanisms, ensuring security with each use. |
| Battery-Free Operation and Longevity | Enjoy over a decade of maintenance-free use, powered by the NFC signal from smartphones, eliminating the need for batteries. |
| Compatibility | Android phones with NFC chip and internet connection; Computers with browsers compatible with Freemindtronic Extension |
| Supported Encrypted Data Types | Bank card and credit card information, bank-account information including account-holder name, IBAN and BIC, loyalty card information, cryptocurrency wallet information, BIP39 recovery phrases and supported cryptocurrency private-key information. |
| Payment Types | Secure online bank card payments through protected Android CARD Autofill; SEPA bank-transfer preparation for sending and receiving fiat funds using bank QR, structured payment information, Android Share, copy and ISO 20022 export; and self-custody cryptocurrency payments using Human Review, NFC HSM cryptographic signing, signature verification and blockchain broadcasting on supported FIELD-validated networks. |
| Phone Compatibility | Freemindtronic NFC HSM functions depend on the Android device and application version. Secure Android Autofill requires Android Autofill API 26 or later and an NFC-compatible Android device for the NFC HSM workflow. |
| Autofill Anti-Phishing Security | Fail-closed HTTPS and exact-origin verification with URL Sandbox, strict host isolation, anti-typosquatting, IDN/homograph, mixed-origin, iframe/BitB and obscured-window protections. If the trusted web context cannot be established, protected Autofill data is not released. |
| Computer Compatibility | Full compatibility with EviCore NFC Browser Extension |
This comprehensive table provides a detailed look at the specifications, features, and compatibility of the EviPay NFC HSM device.
Compliance with international standards
EviPay NFC HSM adheres to various international standards related to security, encryption, and communication:
- ISO/IEC 15693: Defines communication protocols for vicinity cards operating at 13.56 MHz with a range of up to 1 meter. EviPay NFC HSM uses this standard for communication between the NFC HSM device and the phone or computer.
- ISO/IEC 14443: Defines communication protocols for proximity cards operating at 13.56 MHz with a range of up to 10 cm. EviPay NFC HSM uses this standard for communication between the phone or computer and the payment terminal.
- ISO/IEC 7816: Specifies smart card specifications, including the secure element that stores and encrypts secrets in the NFC HSM device.
- ISO/IEC 27001: Sets requirements for information security management systems, ensuring end-to-end cybersecurity between the NFC HSM device, phone or computer, and the payment terminal.
You can find more information about these standards on their respective websites:
EviPay NFC HSM is a technology that respects and follows these standards to ensure the highest level of security and encryption for your payments and transactions.
In summary
EviPay NFC HSM: One Security Foundation for Bank Cards, SEPA Transfers and Cryptocurrency Payments
EviPay NFC HSM provides a common NFC HSM security foundation for multiple payment ecosystems while preserving the specific security requirements of each one. Bank card payments, SEPA bank transfers and self-custody cryptocurrency payments use dedicated workflows designed to minimize the exposure of sensitive financial information and keep the user in control of each operation.
For bank card payments, EviPay NFC HSM protects sensitive CARD information and enables secure Autofill on compatible Android payment forms only after the required HTTPS origin, anti-phishing and NFC HSM authorization controls have been satisfied.
For SEPA bank transfers, EviPay NFC HSM protects account-holder information, IBAN and BIC and can prepare reviewed payment instructions for receiving or sending fiat funds using supported SEPA workflows such as bank QR codes, structured payment information, Android Share, copyable transfer details and ISO 20022 export. The bank or authorized payment service provider remains responsible for beneficiary verification, authentication, authorization and final execution.
For cryptocurrency payments, EviPay NFC HSM applies a self-custody architecture in which the user reviews the transaction intent before NFC HSM cryptographic signing. The resulting signature is verified before the authorized signed payload can be broadcast to a supported FIELD-validated blockchain network.
EviPay NFC HSM therefore brings fiat and cryptocurrency payment technologies together around one principle: protect the payment instrument, protect sensitive financial information and cryptographic keys, verify the execution context whenever technically possible, require explicit user authorization for sensitive operations and minimize the exposure of protected data throughout the payment workflow.
For comprehensive insights into EviPay NFC HSM technology and its suite of products, explore the Freemindtronic website. EviPay NFC HSM also integrates seamlessly with other Freemindtronic cybersecurity technologies such as Contactless OTP Manager for multi-factor authentication and EviBitB for protection against deceptive Browser-in-the-Browser phishing contexts. These technologies are available under license from Freemindtronic and can be tailored to strengthen security according to specific payment, banking and authentication use cases.
Secure Android Autofill with NFC HSM
EviPay NFC HSM also extends its security architecture to compatible Android online payment forms. Freemindtronic Autofill uses a fail-closed URL and origin security model designed to prevent protected bank card information from being released to HTTP pages, unauthorized hosts, obvious typosquatting domains, IDN/homograph mismatches, mixed-origin frames or deceptive Browser-in-the-Browser contexts.
The visual appearance of a website is not considered proof of identity. Protected CARD information is released only through the authorized Autofill and NFC HSM workflow after the required security conditions have been satisfied. Login/MFA authorization remains isolated from bank card authorization, and temporary sensitive CARD values are wiped from application memory after use.
Secure SEPA Bank Transfer Preparation with NFC HSM
EviPay NFC HSM also extends its payment-security architecture to SEPA-compatible bank accounts. Protected account-holder, IBAN and BIC information can be used to prepare reviewed payment instructions for receiving or sending fiat funds through supported SEPA workflows, including bank QR codes, structured payment information, Android Share, copyable transfer details and ISO 20022 export.
EviPay protects and prepares the payment information but does not replace the banking infrastructure. The bank or authorized payment service provider remains responsible for the applicable beneficiary verification, Strong Customer Authentication, payment authorization and final execution.
Self-Custody Cryptocurrency Payments with NFC HSM
For supported blockchain payments, EviPay applies a different security model based on self-custody and cryptographic transaction authorization. The user reviews the transaction intent before NFC HSM signing, the resulting signature is verified, and the authorized signed payload can then be broadcast to supported blockchain networks that have passed the required Freemindtronic validation and release controls.