http://itknowledgeexchange.techtarget.com/security-bytes/experts-vendors-search-for-pci%e2%80%99s-holy-grail/ A SearchSecurity.com blog Thu, 26 Nov 2009 00:49:24 +0000 http://wordpress.org/?v=2.6.2 http://itknowledgeexchange.techtarget.com/security-bytes/experts-vendors-search-for-pci%e2%80%99s-holy-grail/#comment-623 Skendus Wed, 30 Sep 2009 13:19:33 +0000 http://itknowledgeexchange.techtarget.com/security-bytes/experts-vendors-search-for-pci%e2%80%99s-holy-grail/#comment-623 The First Data-RSA approach that uses encryption and tokenization to protect cardholder data seems to be moving to the forefront. In fact, in a press release from August 2009, Electronic Payment Exchange (EPX) announced that it became the first payment processor to offer a true end-to-end solution that endorses and incorporates both tokenization and encryption for securing cardholder data from the card reader through the entire transaction lifecycle. Using encrypted card readers with EPX’s BuyerWall™ credit card data tokenization technology, EPX has virtually removed merchants’ point-of-sale systems and card readers from the scope of PCI compliance and has substantially eliminated merchant liability associated with the risk of processing, transmitting, and storing sensitive cardholder data. Encryption built into hardware and software at the point of sale provides strong protection against potential breaches before card numbers enter into the authorization process by immediately encoding credit card numbers upon the card swipe. Further securing the transactions, tokenization provides unsurpassed security against data breaches and identity theft after the initial card swipe by replacing account numbers with values that are meaningless to hackers and identity thieves. While others are in the research and development phases of building solutions that use both encryption and tokenization, EPX's solutions are already in production. The First Data-RSA approach that uses encryption and tokenization to protect cardholder data seems to be moving to the forefront. In fact, in a press release from August 2009, Electronic Payment Exchange (EPX) announced that it became the first payment processor to offer a true end-to-end solution that endorses and incorporates both tokenization and encryption for securing cardholder data from the card reader through the entire transaction lifecycle. Using encrypted card readers with EPX’s BuyerWall™ credit card data tokenization technology, EPX has virtually removed merchants’ point-of-sale systems and card readers from the scope of PCI compliance and has substantially eliminated merchant liability associated with the risk of processing, transmitting, and storing sensitive cardholder data. Encryption built into hardware and software at the point of sale provides strong protection against potential breaches before card numbers enter into the authorization process by immediately encoding credit card numbers upon the card swipe. Further securing the transactions, tokenization provides unsurpassed security against data breaches and identity theft after the initial card swipe by replacing account numbers with values that are meaningless to hackers and identity thieves. While others are in the research and development phases of building solutions that use both encryption and tokenization, EPX’s solutions are already in production.

]]>