SAN JOSE, Calif. -- VeriFone Holdings Inc. said that it is extending its VeriShield Protect credit and debit card encryption technology to Secure PumpPay, its payment card industry (PCI)-approved solution for upgrading fuel dispensers to accept electronic payments securely. VeriShield Protect, announced last month, is designed to thwart continuing criminal efforts to gather unencrypted account holder data via breaches of merchant networks, applications and servers that come in contact with consumer credit and debit card information.
"VeriShield Protect and Secure PumpPAY product will enable [image-nocss] VeriFone retail petroleum partners to virtually eliminate the possibility of a data compromise across their corporate brands," said Jeff Wakefield, VeriFone vice president of marketing, Integrated Systems. "VeriShield Protect will protect card transactions that originate in the store as well as at the petroleum forecourt where over half of petroleum retailer card transactions originate."
VeriShield Protect was developed to prevent compromise of cardholder data even in the event of a breach. VeriShield Protect shields credit and debit account information from the moment a card is swiped until the data is received at a secure decryption appliance located in a merchant's secure data center, at an off-site service provider, or at an acquirer or processor organization.
VeriFone's Secure PumpPAY is the only PCI-approved solution that includes PCI EPP (electronic PIN pad) keypad, secure magnetic stripe reader, Triple-DES encryption and the ability to cryptographically mask all customer account information at the card reader, the company said. It meets the PCI requirements that must be retrofitted in existing fuel dispensers by July 1, 2010, and adopted in all new fuel dispensers as of Jan. 1, 2009.
The retailer environment is often too complex to be completely locked down against all intruders, and it is unrealistic to expect merchants to maintain constant vigilance over every access point and every location where data is stored or transported, said VeriFone.
Backed by a suite of PCI-compliant services including managed intrusion detection and protection systems, VeriFone provides a complete end-to-end security solution for petroleum retailers and other merchants.
The VeriShield Protect system employs a technology called H-TDES (Hidden-Triple Data Encryption Standard) to encrypt the personal account number (PAN) and magnetic-stripe track data in a manner that other applications interpret as valid card data. The data is encrypted within the tamper-resistant security modules of VeriFone's PCI-approved payment systems so that it can safely be transmitted over retailer networks to a centralized secure decryption appliance from Semtek Innovative Solutions Corp., the developer of H-TDES.
VeriShield Protect is currently available on the MX800 Series platform, and it will be available on the Secure PumpPAY and Vx Solutions product families later this year, said the company.
San Jose, Calif.-based VeriFone Holdings offers secure electronic payment solutions. Ite provides expertise, solutions and services that add value to the point of sale with merchant-operated, consumer-facing and self-service payment systems for the financial, retail, hospitality, petroleum, government and healthcare vertical markets.Members help make our journalism possible. Become a CSP member today and unlock exclusive benefits, including unlimited access to all of our content. Sign up here.