27 říjen 2011

Ingenico point-to-point encryption solution PCI P2PE compliant

Neuilly sur Seine – October 27, 2011. Ingenico (Euronext: FR0000125346 - ING), leading worldwide provider of payment solutions, today announces that its On-Guard point-to-point encryption (P2PE) solution, rolled out on its PCI PTS V3 payment terminals, fully complies with the P2PE requirements.

Download as PDF

Theses requirements were released last September 15th by the Payment Card Industry Security Standard Council (PCI SSC).

Using a P2PE compliant solution will greatly help merchants to reduce the scope of their PCI DSS assessment, as well as their audit and security implementation costs, and will ensure the protection of their customer account data over their networks. After the release of a first set of P2PE requirements on September 15th, the PCI SSC will provide additional material - test procedures, training courses and a list of hardware-based approved solutions - to help merchants in their selection process of P2PE solution providers.

At the encryption point, PCI SCC mandates the use of an SRED (Secure Read and Exchange of Data) certified device. In June 2011, Ingenico was the first payment terminal manufacturer to achieve complete PCI PTS V3 certification – including the optional SRED module - on its iPP350/iPP320 retail PIN Pads. The certified encryption module is embedded in the latest generation of Ingenico terminals, providing merchants with a consistent solution across all payment modes

While PCI PTS V3 compliancy is a unique and key asset in the deployment of P2PE solutions, additional expertise is required to handle secure operations such as data decryption, key distribution and terminal management. Ingenico manages all sensitive operations of its P2PE solution from a secure infrastructure which is already PCI DSS V2.0 certified and provides Payment Transactions Services for over 150 retailers worldwide.