3D-Security Module Provides Cost Effective Hardware for Verified by Visa and MasterCard SecureCode

Thales e-Security today announced the launch of the 3D-Security Module, an all-in-one hardware solution, designed to support the new 3D-Secure protocol developed by Visa and MasterCard. In addition to providing support to both Visa and MasterCard infrastructures, it guarantees card issuers the highest level of security for their transactions as well as simple integration and cost-effective operation.

To make the Internet a secure place to trade, reduce charge-backs and increase card usage, Visa and MasterCard have developed 3D-Secure, a new protocol for handling internet transactions. Within this new architecture, also branded Verified by Visa for Visa and MasterCard SecureCode, issuers now bear the responsibility of authenticating their cardholders. In parallel with this shift in responsibility, the liability for online transactions also shifts to card issuers. This means that card issuers now control the crucial process of authenticating their customers – providing an excellent opportunity to reduce fraud as well as increase customer confidence in using their cards online.

Steve Ryan, Vice President of Corporate Development & Alliances at Arcot Systems, the world's leading provider of 3D-Secure solutions worldwide, said: “Thales e-Security's 3D-Security Module is a great offering for our customers to use in conjunction with our TransFort ACS product. Very attractive pricing, as well as the fact that the 3D-Security Module delivers outstanding redundancy, are key benefits to our customers."
In order to fulfil their new responsibility within the 3D-Secure infrastructure, issuers need to implement a new type of server for handling these transactions – the Access Control Server (ACS). In order to guarantee the security of the infrastructure and protect the cryptographic information of the card issuer, Visa and MasterCard have mandated that all keys and processes associated with the ACS are stored and protected within tamper-resistant hardware modules.

To meet this requirement and to facilitate the development, integration and implementation of an ACS and to provide the right hardware security, Thales e-Security has launched the 3D-Security Module. This new device is an all-in-one hardware solution that provides banks the highest level of protection for their keys and ACS security processes and delivers second to none ease of integration and operation.

Thales 3D-Security Module is based on a failover-capable hardware architecture, which delivers redundancy, scalability and automated key management. This ensures maximum availability of operations, which is critical for an internet-connected infrastructure like an ACS. Each hardware module delivers maximum performance for Verified by Visa and MasterCard SecureCode cryptographic calculations. If more performance is needed, the plug-and-play scalable platform allows organisations to add more hardware devices without having to change the existing infrastructure.

Furthermore, the 3D-Security Module is packaged with all the tools needed to effectively integrate a 3D-Secure infrastructure, thus dramatically reducing the time and complexity of implementation. The 3D-Security Module also integrates seamlessly with the Host Security Module already present in the bank’s back office, allowing for true end-to-end security of the card transactions. Finally, the 3D-Security Module is one of the most cost effective hardware solutions for 3D-Secure ACS protection and reduces cost of ownership by providing a future-proof and scalable platform.

Paul Meadowcroft, head of transaction security at Thales e-Security, said: “With online fraud increasing dramatically and customer confidence in trading online declining, 3D-Security Module helps card issuers cost-effectively tackle this issue. Providing the core security component of Verified by Visa and MasterCard SecureCode, this new solution guarantees the highest level of security for internet transactions, which will help reduce fraud and make the internet a safer place to do business.”

About Thales
Thales is a world leader and front-runner in professional electronics in three key markets: Aerospace, Defence and Information Technology & Services (IT & S). The Group employs 65,000 people in nearly 50 countries worldwide, and generated revenues of over €11 billion in 2002.

About Thales e-Security
Operating in three main markets covering e-security, card payment and network security, Thales e-Security addresses the business, government and finance industries’ need for cryptographic security products and solutions. Over half of the world’s banks, together with the majority of the busiest exchanges, currently use Thales technology. For more than 20 years the company has been at the forefront of security and payment technology, co-operating and contributing to set the industry standards used for financial transactions and e-commerce globally. Thales e-Security offers a wide range of security solutions to protect Government and Defence critical information infrastructures, thereby positioning the company as a leading worldwide supplier of certified network security products. Visit

About Thales and Security
Thales, one of the globe's leading suppliers of integrated security solutions, addresses the business security needs of corporations and governments alike, protecting transactions, networks, identification documents and sensitive sites. Thales' security capability extends to security and payment technology for financial transactions, networks and e-commerce. An acknowledged expert in smart card technology and applications, Thales is a European leader in security critical electronic payments, integrated Electronic Fund Transfer (EFT), e purse payment and secured keyboards, as well as being the UK's leading supplier of electronic card payment terminals.