PCI SSC takes on Pin Entry Device security

Council takes over from credit card companies

Written by Ian Williams

The Payment Card Industry Security Standards Council (PCI SSC) has assumed responsibility for the Pin Entry Device (Ped) security requirements previously administered by JCB, MasterCard and Visa.

PCI SSC is a global independent industry standards body providing management of the PCI Data Security Standard relating to all card-based payments.

The Ped security requirements are designed to secure Pin-based transactions globally, and apply to all devices that accept Pin entry.

"Adding the Ped security requirements reinforces and expands our commitment to securing the payment process globally," said Bob Russo, general manager of the PCI SSC.

"The addition of the Ped Security Requirements under the PCI SSC will remove conflicting requirements, simplify the testing process and maintain consistent security measures to improve the overall security of payment transactions."

Ped manufacturers submitting devices for security testing will be able to rely on a single set of requirements, helping to ensure cardholder security and providing opportunities for faster development and deployment.

The Ped security requirements look at all aspects of Ped development, including physical and its logical characteristics, as well as how the Ped is produced, controlled, transported, stored and used throughout its life cycle.

The transfer of power will happen over the next few months. During this time, all devices previously approved and designated as compliant with existing PCI Ped requirements will automatically be accepted into the new programme.

The PCI SSC has said it will honour existing compliance agreements, with these devices listed on the PCI SSC approval list until their current existing approvals expire.

See also:

reader comments

related articles

E-commerce firm fights fraud with offline payments

Internet Retailer partners with PayOffline to target 'cautious internet users' 05 Sep 2007

 

Mobile operators sign up to Payforit

The mobile wallet may finally become a reality 04 Sep 2007

Vietnam a victim of 'e-commerce boycott'

Nation's online shoppers under anti-fraud blockade 03 Sep 2007

RBS debuts 'contactless' payment cards

Forget chip and Pin, do you want fries with that? 28 Aug 2007

PCI council sets payment security standard

New rules on the storage of payment details 16 Apr 2008

PCI to assess the assessors

New assurance programme for certified assessors 17 Nov 2008

PCI DSS version 1.2 tackles wireless security

Latest iteration of data security standard released 01 Oct 2008

latest news

Exclusive: Bell Micro EMEA confims job cuts

Distributor looking to make cost savings of 10 per cent across the business 21 Nov 2008

Avnet looks forward to 2009

Chief executive Roy Vallee reveals why the distributor is confident of riding out the storm 21 Nov 2008

PC growth forecasts slashed by two-thirds

Market watcher downgrades 2009 PC growth expectations from 11.9 to 4.3 per cent 21 Nov 2008

poll

Securing the future

Securing the future

Does the security channel need a governing body?

Previous poll results

Vendor Q&A Session: Rick Wallis, NEC Computers

Vendor Q&A Session: Rick Wallis, NEC Computers

During this Q&A session Rick Wallis, UK Sales Director at NEC Computers, talks about the firm’s reasons for committing to a 100 per cent channel strategy

In the Studio with CRN: Oracle

CRN TV catches up with Alan Hartwell, vice president of technology solutions and channels at Oracle

events

Channel Expo 2009 logo

Channel Expo 2009

The UK's top reseller exhibition will return to the NEC on 20 May 2009

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

White papers

Search white papers

Top categories

Primary Navigation