© CCV GmbH - It is not allowed to duplicate or distribute this document without our agreement.
5.7.9.4 Security of COR-B20
The product combination #3 is foreseen special for the low-value payment market in segments
parking, vending, ticketing. From a security point of view, the product COR-B20 + OPM is
fulfilling the PCI-PTS 3.1 SRED requirements on contactless side as well, as on contactless
side the card holder data have to be secured from the point of digitalization.
On the contact chip card reader, the COR-B20 is using all security mechanisms as well. In this
context the COR-B20 is an non-encapsulated reader. From the point of digitalization all
requirements of SRED are fulfilled.
The following picture is explaining this.
• Clear-text PIN requirements are not applicable as the reader never is combined with
a PED.
• The security for card holder data is similar to the NFC, where this data are transferred
in plain text as well.