Page 44 - GS140301
P. 44
ChapterTitleTitleCoverStory
Chapter
Signature has been giving away sensitive account data. That's why
devices since June 2013. Every new additional security steps, like
merchant the company has boarded encryption and tokenization, will
since then has received an Ingenico remain important offers for ISOs and
EMV device free of charge, Amiryants acquirers. "Security is much more
said. The same policy applies when than EMV," McCarthy said.
merchants send non-EMV compliant
terminals in for servicing. Peabody agreed. "Security is about
layers, and this is adding another
Signature also has trained call-center layer," he said of EMV.
employees to encourage customers
to accept free EMV-compliant End-to-end encryption and
terminals, no matter what their tokenization also have received
reason for calling. "We explain to much attention.
them why they need EMV, that it's
simple [to use] and it's not going to First Data offers a solution,
cost them anything," Amiryants said. TransArmor, that combines
"We tell them the faster they do it the hardware-based encryption with
better." card-based tokenization to protect
data from the point of entry through
Despite the heavy push, Amiryants the entire processing stream.
estimated that only about 40 percent Using token numbers in place of
of Signature's merchant base is EMV cardholder data virtually eliminates
compliant today. "October 2015 just the possibility that card data will be
doesn't seem realistic," she said, stolen. Merchants can use the token
referring to the EMV deadline for later to access the data for business
terminal compliance. and/or marketing purposes.
If the deadline is missed, it could (On the issuing side of the card
prove costly to merchants, as well business, First Data teamed with
as to their ISOs and acquirers, Oberthur Technologies, a leading
should there be breaches, said Barry provider of smart cards, to get more
McCarthy, President, Financial EMV-compatible cards in the market,
Services at First Data Corp. "Visa and McCarthy noted.)
MasterCard have been very clear that
they are not moving away from the Ingenico, a leading provider of smart
liability shift that occurs in October card terminals, has been betting big
2015," he said. "October 2015 is a firm on EMV, and it seems to be paying
date. It's going to stick." off: in 2012 the company said it had
shipped 5 million EMV terminals. In
Meeting the deadline may seem a February 2014, Ingenico reported it
monumental task, but high-profile had shipped its 5 millionth contactless
breaches like Target's drive home the EMV-compliant terminal.
gravity of the situation. "EMV would
have helped in those situations," Several leading U.S. acquirers
McCarthy said. He pointed out and ISOs have agreements to help
that some older terminals can be develop or have been certified to
retrofitted for EMV compliance. For distribute Ingenico's Telium line
example, he said two of First Data's of EMV compliant devices. These
older terminals (the FD 100 and 200) include Total System Services Inc.,
incorporate a USB port that can be Heartland Payment Systems Inc., POS
used to support EMV protocols. Portal and Vantiv LLC. Heartland,
which sets up merchants with its
Security doesn't stop at EMV proprietary E3 terminal (supporting
Just how much protection EMV end-to-end encryption) said in 2013
will provide against card fraud is it was teaming with Ingenico to
unclear, however, since, at least for manufacture POS terminals that
the foreseeable future, chip cards will support EMV as well as end-to-end
also include mag stripes containing encryption.
44
44
44
Chapter
Signature has been giving away sensitive account data. That's why
devices since June 2013. Every new additional security steps, like
merchant the company has boarded encryption and tokenization, will
since then has received an Ingenico remain important offers for ISOs and
EMV device free of charge, Amiryants acquirers. "Security is much more
said. The same policy applies when than EMV," McCarthy said.
merchants send non-EMV compliant
terminals in for servicing. Peabody agreed. "Security is about
layers, and this is adding another
Signature also has trained call-center layer," he said of EMV.
employees to encourage customers
to accept free EMV-compliant End-to-end encryption and
terminals, no matter what their tokenization also have received
reason for calling. "We explain to much attention.
them why they need EMV, that it's
simple [to use] and it's not going to First Data offers a solution,
cost them anything," Amiryants said. TransArmor, that combines
"We tell them the faster they do it the hardware-based encryption with
better." card-based tokenization to protect
data from the point of entry through
Despite the heavy push, Amiryants the entire processing stream.
estimated that only about 40 percent Using token numbers in place of
of Signature's merchant base is EMV cardholder data virtually eliminates
compliant today. "October 2015 just the possibility that card data will be
doesn't seem realistic," she said, stolen. Merchants can use the token
referring to the EMV deadline for later to access the data for business
terminal compliance. and/or marketing purposes.
If the deadline is missed, it could (On the issuing side of the card
prove costly to merchants, as well business, First Data teamed with
as to their ISOs and acquirers, Oberthur Technologies, a leading
should there be breaches, said Barry provider of smart cards, to get more
McCarthy, President, Financial EMV-compatible cards in the market,
Services at First Data Corp. "Visa and McCarthy noted.)
MasterCard have been very clear that
they are not moving away from the Ingenico, a leading provider of smart
liability shift that occurs in October card terminals, has been betting big
2015," he said. "October 2015 is a firm on EMV, and it seems to be paying
date. It's going to stick." off: in 2012 the company said it had
shipped 5 million EMV terminals. In
Meeting the deadline may seem a February 2014, Ingenico reported it
monumental task, but high-profile had shipped its 5 millionth contactless
breaches like Target's drive home the EMV-compliant terminal.
gravity of the situation. "EMV would
have helped in those situations," Several leading U.S. acquirers
McCarthy said. He pointed out and ISOs have agreements to help
that some older terminals can be develop or have been certified to
retrofitted for EMV compliance. For distribute Ingenico's Telium line
example, he said two of First Data's of EMV compliant devices. These
older terminals (the FD 100 and 200) include Total System Services Inc.,
incorporate a USB port that can be Heartland Payment Systems Inc., POS
used to support EMV protocols. Portal and Vantiv LLC. Heartland,
which sets up merchants with its
Security doesn't stop at EMV proprietary E3 terminal (supporting
Just how much protection EMV end-to-end encryption) said in 2013
will provide against card fraud is it was teaming with Ingenico to
unclear, however, since, at least for manufacture POS terminals that
the foreseeable future, chip cards will support EMV as well as end-to-end
also include mag stripes containing encryption.
44
44
44
