TMCnet News

Verifone Selects Thales to Protect Card Holder Data
[April 20, 2015]

Verifone Selects Thales to Protect Card Holder Data


Thales, leader in critical information systems and cybersecurity, announces that Verifone now uses Thales (News - Alert) nShield hardware security modules (HSMs) for its end-to-end payment encryption solution - VeriShield Total Protect - to provide robust, high speed, scalable crypto to protect card holder data, whether transmitted from a card or mobile device, right from the moment of capture.

Thales HSMs provide a highly secure, high speed and scalable solution in Verifone's end-to-end encryption architecture, which reduces the risk of payment card data compromise within a merchant's retail environment. The protection of payment card data by encrypting from Verifone's secure payment terminals all the way to the Thales HSMs also dramatically reduces the number of applicable Payment Card Industry (PCI (News - Alert)) controls, simplifying the deployment environment for the merchant.

VeriShield Total Protect from Verifone protects merchants, payment providers and consumers alike by encrypting card holder information from the moment it is captured at the terminal until it is securely accessed behind a processor's firewall. Thales HSMs are used to perform secure key exchanges and secure key derivations that produce a unique key to protect each and every payment transaction. All the decryption is performed within the Thales HSMs, protecting the encryption keys from virtually any attack. Taking advantage of capabilities unique to the Thales Security World architecture, Verifone is able to seamlessly combine multiple HSMs at multiple data centers to service very high transaction volumes with automated load balancing and failover, a capability not offered by other solution providers.

Joe Majka, Chief Security Officer, Verifone, says:

"As a global payment solutions and commerce enablement leader, Verifone's strategy is to develop and deploy "best in class" payment solutions and services that meet or exceed global security standards and help our clients securely accept electronic payments across all channels of commerce. We selected Thales HSMs to provide robust security, unmatched performance and superior scalability across our payment security platforms, protecting encryption keys from virtually any attack. This helps Verifone to continue reducing merchants' growing exposure to data breaches and cyber criminals and more aggressively safeguard consumer information through the multi-layered approach to security that Verifone is known for, which goes well beyond the requirements of PCI DSS."

p> Cindy Provin, President, Thales e-Security Inc., says:



"Direct attacks on payment devices have become increasingly common and highly sophisticated, but strongly encrypted card holder data is useless if ever there were a breach. Thales's extensive expertise and leadership in the payment market, enriched by our long-standing partnerships with leading payments processing vendors, helps customers such as Verifone reduce risk, trim costs and future-proof their payments infrastructures as the payment industry sees new challenges and business models emerge. We are delighted that after evaluating solutions from other vendors, Verifone has chosen to use Thales HSMs to protect its payment security technology, giving merchants, processors and consumers complete confidence that unencrypted data will never be exposed to potential thieves."

Supporting resources


Case study: Thales HSMs secure Verifone's VeriShield Total Protect solution

Visit the Thales booth South Expo #S607, RSA (News - Alert) Conference, Moscone Center, San Francisco, April 20-24, 2015.

For industry insight and views on the latest key management trends check out our blog www.thales-esecurity.com/blogs

Follow Thales e-Security on Twitter @Thalesesecurity, LinkedIn, Facebook and YouTube

About Thales e-Security

Thales e-Security is a leading global provider of trusted cryptographic solutions with a 40-year track record of protecting the world's most sensitive applications and information. Thales solutions enhance privacy, trusted identities, and secure payments with certified, high performance encryption and digital signature technology for customers in a wide range markets including financial services, high technology, manufacturing, and government. Thales e-Security has a worldwide support capability, with regional headquarters in the United States, United Kingdom, and Hong Kong. www.thales-esecurity.com

About Thales

Thales is a global technology leader for the Aerospace, Transport, Defence and Security markets. With 61,000 employees in 56 countries, Thales reported sales of €13 billion in 2014. With over 20,000 engineers and researchers, Thales has a unique capability to design and deploy equipment, systems and services to meet the most complex security requirements. Its unique international footprint allows it to work closely with its customers all over the world.

Positioned as a value-added systems integrator, equipment supplier and service provider, Thales is one of Europe's leading players in the security market. The Group's security teams work with government agencies, local authorities and enterprise customers to develop and deploy integrated, resilient solutions to protect citizens, sensitive data and critical infrastructure.

Drawing on its strong cryptographic capabilities, Thales is one of the world leaders in cybersecurity products and solutions for critical state and military infrastructures, satellite networks and industrial and financial companies. With a presence throughout the entire security chain, Thales offers a comprehensive range of services and solutions ranging from security consulting, intrusion detection and architecture design to system certification, development and through-life management of products and services, and security supervision with Security Operation Centres in France and the United Kingdom.


[ Back To TMCnet.com's Homepage ]