Building Networks and “Openness”

8 Dec 2011

I’ve been reading some off beat stuff lately. One book “Weak Links: Stabilizers of Complex Systems from Proteins to Social Networks” was very thought provoking. As Mark Stefik (PARC Fellow) said ‘Something magical happens when you bring together a group of people from different disciplines with a common purpose.’ The combination of people, experience and approaches often leads to unexpected consequences.

As an engineer I like to solve problems.. I usually learn more from mistakes than I do from successes… but it is the learning that is fun. As an investor and entrepreneur I don’t like making mistakes… my preference in the start up environment is to have the learning cycle counted in minutes and days (vs customers and capital). I was speaking with a US Central Banker last month and the concept of “openness” was discussed. A hypothesis was laid out by the Fed “Mobile payments are not taking off because of a lack of common standards”.  The Fed team is very good, the best way to encourage a good dialog is to lay out something radical; as for this hypothesis I disagreed completely. As stated in my numerous blogs: history has clearly showed that closed systems must form before open ones.  I also told the Fed that the problem in US mobile payment IS NOT lack of standards but lack of a value proposition to consumers and retailers. In other words existing payment instruments solve all of my problems.. mobile payment simply does not add additional value (in isolation) compared with existing products (See Mobile Advertising Battle). In order to stimulate a change in behavior (merchant and consumer) there must be a strong value proposition. Two years ago I discussed the implications for broad payment standards in SEPA: Chicken or the Egg and in March of this year I outlined how SEPA has depressed payment innovation in the EU.

Given all of the chaos in NFC at the moment, I woke up this morning asking myself what is the “right amount” of openness and standards? How do successful networks form and mature? What are successful “open” networks? What is the first “open” standard you think of ? TCP/IP? Linux? Java? RosettaNet? EDI? Open Network? Internet? GSM? US Interstate system? SEPA? The Weak Links book opened my eyes to many new concepts, one was on how affinity influences network creation, and another on how few open networks exist in Nature. Networks form around a function and open networks are not necessarily the most efficient.

Scale-free distribution (completely open networks) is not always the optimal solution to the requirement of cost efficiency. .. in small world networks, building and maintaining links between network elements requires energy…. [in a world with limited resources] a transition will occur toward a star network [pg 75] where one of a very few mega hubs will dominate the whole system. The star network resembles dictatorships in social networks.

The network forms around a function and other entities are attracted to this network (affinity) because of the function of both the central orchestrator and the other participants. Of course we all know this as the definition of Network Effects. Obviously every network must deliver value to at least 2 participants. Networks resist change because of this value exchange within the current network structure, in proportion to their size and activity. Within the EU, SEPA undertook a rewrite of network rules and hoped that existing networks would go away or that a new (stronger) SEPA network would form around its core focus areas (SCT, SDD, SCF, ..). It was a “hope” because the ECB has no enforcement arm. In other words there was a political challenge associated with ECB’s (and EPC specifically) ability to force an EU level change on domestically regulated banking industry.. given that SEPA rules destroyed much value in existing bank networks, the political task was no small effort. We have seen similar attempts (and results) when governments attempt to institute major change in networks (Internet NetNeutrality v. Priority Routing, US Debit Card Interchange, …)

Mobile Payments Standard?

If we take a look at today’s payment networks what are the biggest problems to be solved? I have a perspective, but its certainly biased. How about payment routing and speed? These seem to be common merchant and consumer concerns. Keeping with an internet analogy, can you imagine if there were no DNS servers to route IP traffic? Every router would have to keep the directory for the entire internet not only of the final destination, but also the most effective route to forward traffic. What if the internet were not indexed? No ability to find information (thanks Google for fixing this).  In the payments environment, the central assets of Visa and MA is 1) A Directory and 2) the rule that EVERY participant must route traffic through them (with a new PIN debit exception in US).

Outside of card transaction’s banks maintain their own directory for routing retail and commercial payments; this is called “least cost routing”.  A key bank service I would propose (note: I’m not the originator of this idea) is a universal directory service mapping e-mail, phone and account numbers.  In Australia, the banks have this today run by my friends at Cardlink and completed under project Mambo. In the US, The Clearing House (TCH) has had the UPick service completed for a number of years.. without much interest.

My thought here, is that rather than facilitate a EU mistake in mandating a change in all rules.. decrease the switching costs between networks so that market forces can take hold. I’m not proposing to take the directory public.. but at least give regulated entities equal access. In Australia the driver was to decrease bank switching costs, also note that Australia has no Signature debit.. just as in Canada.  A common directory could also follow rule that non-regulated institutions could not hold account data (or card number).. Just as I don’t have to know my Bank’s IP address.. I could use another identifier (email, mobile, …) for online transactions. The danger for banks is that this would certainly open up the world of least cost routing to non-banks. Payments would become “dumb pipes”.. which is perhaps what it should be.

Mobile payments is certainly not critical government infrastructure. So what is Government’s proper role? Consumer data protection, transparency, regulatory requirements, equal participation/access..  ? I don’t know the answer. I like the idea of the Government creating a model service for R&D purposes.. perhaps based on Fedwire and letting non-banks have access to it… I also like the idea of a common directory.

ISIS

For 2.5 years I’ve been writing about ISIS.. I’ve always have been a huge advocate.. until lately. What has changed? My position, and that of retailers, is that today’s payment networks are heavily tilted in favor of the banks. The opportunity I originally saw for ISIS was constructing a new merchant friendly network that was an “extension” of the current mobile network which the carriers run (The original business case for ISIS is outlined in ISIS: Moving Payments from Rail to Air).

Keeping with my theme of openness and standards how is ISIS creating a platform for other to invest in? What value is an ISIS mobile payment to a retailer? Yesterday’s blog talked about the complex supply chain necessary to deliver on NFC. Don’t get me wrong, there is nothing wrong about NFC technology.. it is a very well defined specification. But it is complex.. if it was a NEW WAY of doing payments (or better yet commerce) perhaps it should have started a little less ambitiously. The team seems as if it prudently sought to reduce risk, but it also gave up on a central element to its value proposition. My analogy for today is that ISIS project is like Vanderbilt’s skipping steam and going straight for high speed mag lev in 1880…. While the entire country was growing at a 10x pace and he had no right of way..

Big projects are tough in normal times.. but mobile is changing at an unbelievably fast pace. Small focused projects are certainly lower risk when innovating at the cutting edge. Everything is changing.. how could anyone architect an open system in such a fast changing environment? It would seem that technical standards like TCP/IP or GSM were successful because of their ubiquity and distributed control. They could be used by all to create different networks with different value propositions.. which incented millions of companies and consumers to invest.  I just don’t see how MNOs can create a business platform based on NFC. Their best shot may be to work with someone like Sequent Software to create an architecture for 1000s of applications to access secure element data.. instead of the one single CSAM wallet coming out in Pilot Dec 2012.

Your thoughts are appreciated

Previous Blogs (Nokia NFC Ecosystem, ISIS Ecosystem or Desert, Banks will win in Payments.. but WHICH ones?)

Nexus S – Verizon’s Plan B

6 December 2011

Today’s WSJ article that Verizon plans to block Google’s wallet on its new Samsung Galaxy Nexus .  While the mainstream press sees this as a slam on Google… I see this as Verizon constructing a fallback strategy. Why on Earth would Verizon want to allow the Nexus S on its network at all? It is a 2 year old Google designed phone which embeds a “non-standard” NFC architecture (embedded SE) which is controlled by Google (and cannot be controlled in a UICC based architecture).

As I stated yesterday, the ISIS is experiencing delays in its “go to” architecture. The rumor is that the current ISIS timeline is pilot in December of 2012 and production in mid 2013. I see this move by Verizon as accomplishing 3 things..

1)      The Google Nexus S is the only production NFC phone in the market (actively using NFC.. 50M blackberry’s have it.. but element is cold and lonely). It could allow Verizon and the ISIS team to reconfigure their CSAM wallet platform to this “non standard” architecture to accelerate time to market for a test.  The desired ISIS architecture is SWP/UICC based…  Note that if this is indeed Verizon’s plan, they will need Google participation as Google owns the SE keys in the Nexus S AND they have not published the APIs for the NXP element access

2)      Gives Verizon a phone in the market to pilot with Google. In other words they can play in the Google camp without a formal commitment. Verizon can play ISIS and Google off of one another to see which horse will win. This is very smart.

3) Gives Verizon access to NFC/Android much beyond payment. As Google has clearly articulated in Android Beam, NFC will be the tool for machine-machine communication. How you share pictures, videos, music and apps with another phone. VZ’s current NFC plans revolve all around ISIS and payment (and very closed), Google sees NFC as another radio to do many, many different things. As this week’s Comscore report shows.. Android’s 46%+  market share is a key driver of VZ’s success. VZ needs this handset not just for wallet.. but for access to all the other cool new Google toys that will come out supporting NFC. The question the analysts should be asking VZ is how their SWP/UICC architecture plays in the Google model. How will VZ allow many apps to access the NFC radio AND the secure data? There is only one software company that can help here and that is Sequent.. The other option is a multi SE architecture (see my previous blog, note blog was wrong on Apple), which RIM will likely support. In either of these scenarios, complexity reigns.. the only real option is to let Google drive the definition and the apps. Perhaps this is why VZ has thrown in the towl to Google’s Nexus architecture (hardware).. but not yet on software (wallet)

Don’t believe everything you read.  Verizon’s decision to commit to selling the Galaxy Nexus  is an indication of major strategic planning.

Related article on the ISIS Platform: Ecosystem or Desert?

ISIS Delay..

ISIS Delay

My last blog on this subject was only 2 months ago.. Headline was “ISIS has 12 months”.  Rumor this week is that ISIS has 12 months to go TO PILOT (Dec 2012). The driver seems to be the UICC chip that supports the SWP SE (Gemalto’s fault??).  Note that my previous nine party chart did not even consider the UICC.. so here is a revision.. (added UICC, MNO, and POS register)…

How would you like to run an industry consortium that had to coordinate a release and a new technology across 12 different companies!?? Oh.. a few other minor considerations as well:  no compelling customer value proposition and against Google? My favorite question to ask anyone from ISIS is what will the application do for me that my Citi sticker won’t do now?

  • Provision over the air? (Who cares)
  • Turn on/off the card/element? (Who cares I don’t pay for fraudulent charges)
  • Offers? (Who cares.. Citi can tie merchant offers directly to card use.. Clovr Media/Linkable)

There are MANY future functions like eReciepts and Item level coupons.. but these are VERY far off because they require retailer participation.

ISIS is proving that the NFC supply chain is not workable… at least not without a very substantial customer value proposition. A December 2012 delay to a PILOT may well be the death knell for ISIS… how can carriers invest $200M in a team that won’t see production until mid-late 2013?   There is no shortage of parties complaining about Google’s approach.. but by taking control of the spec, the architecture, the handset and “TSM” they have eliminated the complexity and have been able to get something to market… and are improving from there based upon REAL customer feedback. So while ISIS will struggle to get a pilot running by late next year, Google is signing up new retailers every week, improving its applications and gaining market experience.

As I outlined previously, carriers started from a basis of control with the NFC Forum’s technical specification. Obviously, the handset has proven to be a platform of digital/physical convergence.   We all see enormous opportunities to re-wire physical commerce with the handset at the core. But today the handset’s “commerce” success is driven by its open nature (apps and connectivity). It is a platform where anyone can build anything within a given set of loose rules (tighter in Apple’s case). In order to attract retailers, advertisers, issuers.. the MNOs had to continue this “open” approach.. but instead have taken one of control. This control approach may have been unintentional as not many organizations have successfully built business platforms (favorite book on topic is Platform Leadership). MNO’s control approach could have also been driven by the desire to securely maintain customer information. Whatever the reason, companies will likely develop approaches (See Square Card Case) that keep information out of the secure element and place it in the cloud. As I related in the Square article.. the success of NFC is far from given.. All that is really needed at the POS is a “key” that key could be a single number/identifier delivered by NFC, your voice or your IRIS.  Keeping all customer information on the phone is rather stupid. One MNO told me this week.. its on the phone in case it doesn’t have connectivity. Well guess what.. stores have the connectivity.. that’s how Visa’s system works.. Stores are not dependent upon the Phone’s connectivity.. but rather their own.

It’s never easy for a Fortune 100 organization to admit that they made the wrong bet.  Globally, there is also a very strong inter-carrier commitment to “carrier controlled NFC” work. All it will take is one major carrier to change course and join Google’s camp to bring down a global house of cards that is NFC.  My guess is that carrier controlled NFC find long term traction in public transit and ticketing perhaps even in government identification. .. but this is 3+ years out before any substantial (>20%) adoption.

Customers.. you want ISIS mobile payments functionality? Go get a sticker.

MNOs.. do you want ANY part of mCommerce? You better move quickly to partner with someone that can get all of this done. Their dance card may fill up quickly. If you don’t move beyond the “control” approach.. you will be relegated to dump pipes.. as thousands of businesses work to get around your controls..   Given the Carrier IQ blow up this week, you have no ground for claiming you would manage privacy better than Facebook or Google.