Foregenix, one of the UK’s leading QSAs (Qualified Security Assessors), recently published a white paper outlining the benefits of End-to-End Encryption (E2EE or Point to Point Encryption) for magnetic stripe card transactions and how this can be achieved with CreditCall’s CardEase Ultra service.
E2EE helps combat the increasing problem of cardholder data theft, where sensitive card information is compromised by computer hackers once the data enters the POS system or while cardholder data is in transit on a Merchant’s network. CardEase Ultra utilises an encrypting mag-stripe reader to strongly encrypt the card data as soon as it’s read from the magnetic stripe.
The white paper also covers how CreditCall’s solution reduces the potential for compromise of cardholder data, increasing the security level for merchants and terminal manufacturers while reducing the scope of PCI DSS (for merchants) and simplifying PA-DSS compliance (for terminal manufactures) and therefore reducing cost.
CardEase Ultra also provides secure card tokenisation allowing future transactions, full or partial refunds without the card needing to be present.
The E2EE solution can be used widely within the card acceptance markets including mobile and stationary retail PoS, but is especially suited to unattended terminals such as parking, vending and kiosks where the benefits of PCI DSS "de-scoping" will be most significant.
Benjamin Hosack, director at Foregenix, explains: "CreditCall’s CardEase Ultra end-to-end solution addresses one of the most commonly overlooked areas, securing sensitive magnetic track data exposed during a swiped transaction. By putting together this whitepaper, we wanted to increase awareness among merchants and integrators that by using E2EE services, such as CreditCall’s CardEase Ultra, they can dramatically improve security within their mag-stripe environments right at the point of interaction."
Jeremy Gumbley, CTO at CreditCall said: "We are glad that Foregenix share our view of End-to-End Encryption and how it increases security in mag-stripe markets such as the USA as well as the savings it delivers to merchants and integrators alike. We look forward to working together with merchants and integrators to increase awareness, security and protection of cardholder data."
An outline of the whitepaper can be viewed on CreditCall’s website.
