Consumers are using a growing number of access devices for participating in the e-/m-commerce framework, including home and office PCs, mobile phone handsets, personal digital assistants (PDAs), TV set top boxes, and mobile Internet access devices. Consequently, consumers would like to extend their actual payment experience with credit and debit cards to make remote payments, using the aforementioned access devices, as they would use the payment cards in face-to-face transactions. This requires the provision of an acceptable security level for remote card payments: authenticating consumers and their cards, authenticating merchants, protecting the card's financial data while conveyed from the cardholder access device to the merchant access device, and providing enough identification means for the transactions that would impede attackers to replicate them. These business requirements are the impetus for the addition of Annex D in Book 3 of the EMV 2000 specifications, which defines the Transaction Processing for Chip Electronic Commerce.