Curtis Watson Consulting offers industry solutions and expertise to the advanced payment market including: * Problem analysis and requirements definitions* Solution architecture and product design* Custom code implementations/solutions* Security Certification Solutions* Subject Matter Expertise (SME) in: - Contact Smart Card (ISO/IEC 7816) - Contactless Smart Card (ISO/ICE 14443) - Near Field Communication (NFC) (ISO/IEC 18092) - Global Platform - Common Criteria for Smart Cards/ EMV Security - Mobile Payments

Consultant to Isis, an AT&T, T-Mobile and Verizon Wireless joint venture to add contactless payments technology to the US mobile phone infrastructure.

Designed the Isis mobile wallet companion applet (a Global Platform CREL) and Isis mobile PPSE. Led development efforts and direct developers. Program in Java Card as necessary to meet project obligations. Team Leader in the Isis Global Platform Profile definition, negotiated a common definition compatible with AT&T, T-Mobile and Verizon Wireless systems as well as Visa, MasterCard, American Express and Discover Network contactless payment solutions.Created the Isis NFC mobile device and SE acceptance process and a chief participant in establishing a common approval process for AT&T, T-Mobile, MasterCard, Discover, American Express, Discover, Visa and MasterCard.Global Platform, ISO/IEC 7816 and ISO/IEC 18093 (NFC) Subject Matter Expert (SME) educated staff as needed.

Lead a distributed S/W team dedicated to improving value add to class II gaming machines.

Rcruited by TI to create a first of a kind secure contactless payments concept for American Express, and to win future American Express business. The proof of concept was very successful and TI won American Express’ business. Following successful American Express launch I continued my role as key member of the contactless payments business management team, and as TI RFID Security Manager.As Security Manager, I led cross functional teams to develop cryptographic security policies and procedures. I trained personnel in policies and procedures. Negotiated security upgrades with IT Managers, Plant Managers, COOs, and Security Managers. Selected auditing firms, created auditing Statement of Work contracts and managed security evaluations. Mentored and trained developers in secure code development.• Created American Express Contactless Payments PoC architecture, built the S/W development team that produced the PoC, project manager and team leader of the team that proved the contactless payment idea. • Security and technical sales lead on the team that sold the PoC to American Express.• Led security team that established security requirements for TI’s ePassport project to successfully pass Common Criteria EAL5+.• Led American Express requirements discussions and created three additional SOW contracts that made American Express TI RFID largest customer.• Led three successful American Express and Master Card security evaluations and audits.• Negotiated technical and product security requirements with MasterCard, led the development team that produced the best in class MasterCard PayPass IC, and 1st to receive full MasterCard certifications.

Resource manager with over twelve direct reports, full budget responsibility for over $1M annual budget and signature authority for $20,000. Rolled up my selves and wrote C/C++ code for QNX O/S.

VeriFone’s Dallas based SE Department hired me to address their need for a smart card and cryptographic key management SME. I was brought on board to invent a Visa DUKPT key management solution for their new SC55x PIN pad / smart card reader, and to lead smart card knowledge transfer. Over my four years at VeriFone, I advanced from individual contributor, to team lead, and on to Software Supervisor.• Designed, implemented, and drove from conception to completion Standard U.S. Personalization 1. A security module designed to support on-line PIN encryption (Master session & Derived Unique Key Per Transaction) and smart card off-line cryptographic authentication, certificate verification and file access. Optimized to fit into 2KB E2PROM space and passed several outside security audits.• Contributed to smart card T=1 communication architecture development.• Secure device security auditor and taught defensive coding techniques.• Actively involved in IS0 9000 process (level II), a trained internal 9001 auditor.• Mentored and consulted team through the first Verifone POS to seek and receive EMVCo Letter of Approval for contact smart card.

In 1986 MCTI was one of the Top 50 Texas Business Shooting Stars, and smart cards were a revolutionary invention. I joined MCTI as a Sr. Robotic Engineer, and advanced through MCTI technology ladder until I became their leading US smart card engineer. • Sr. Robotic Engineer, I advanced manufacturing knowledge transfer from France to US, the first USA smart card manufacturing line, and enhancing manufacturing throughput by > 300%.• Sr. Software Engineer, I created the a first smart card based access control management system, and the fist smart card Electronic Benefits Transfer (EBT) system in the US.• As Subject Matter Expert, I instructed hundreds in smart card application development, O/S internals principles of cryptography, and defensive coding.