Thales e-Security has unrivalled
expertise in providing hardware security devices to protect ATM-EFTPOS
transaction processing systems. Since its introduction in the early 1980s,
the Thales Host Security Module (HSM) has been continually developed
to meet the increasingly complex requirements of the world’s financial
institutions.
One of the most common uses of Thales’ security products in the
ATM-EFTPOS arena is the protection of a customer’s PIN during
an ATM or EFTPOS transaction. After a cardholder’s PIN has been encrypted
at an ATM or EFTPOS terminal, it must be transmitted to the card issuer for verification – to check that the genuine cardholder
is present. Host Security Modules are used for PIN verification, card verification
and for any cryptographic translations of the PIN that may be required.
Thales' security products are used throughout the global ATM EFTPOS infrastructure,
for just about any function that requires cryptographic
security. These include:
- PIN verification (as described above)
- Printing secure PIN mailers
- CVV verification (checking cryptographic data that is recorded on
a card’s
magnetic stripe)
- CVC2 verification (CVC2 is the security number that are printed
on the signature panel of your payment card)
- Generation of cryptographic keys for use in ATM and EFTPOS terminals
- Secure delivery of keys to ATM and EFTPOS terminals
- MAC generation and verification (to ensure that sensitive data
has not been altered in any way)
- Many thousands of customer specific functions.
The global card payments industry has seen some major technological
changes in recent years: banks are migrating away from DES to Triple-DES
as the core cryptographic technology; EMV smart card technology is steadily
replacing the magnetic stripe. Thales e-Security has always been at the
forefront of these significant developments. We have been closely involved
in EMV since its inception in the mid 1990’s and have provided
EMV support in standard products since 1999. Our consultants have a tremendous
amount of experience in assisting banks through Triple-DES migrations.
|