12 © Hypercom EMEA Ltd. 2011 Important information
Important information (continued)
Payment Council Industry
Data Security Standard (PCI DSS) advice
The Hypercom Optimum T/M4200 terminal contains a Payment Application
that stores, processes, and transmits cardholder data. It therefore falls
within the scope of the Payment Card Industry Data Security Standards
(PCI DSS), specifically a compliance program known as Payment Applica-
tion Data Security Standard or PA-DSS.
The objective of PA-DSS is to help terminal software vendors such as Hy-
percom to develop secure payment applications that do not store prohibit-
ed data, such as full magnetic stripe, CVV2 or PIN data, and ensure their
payment applications support compliance with the PCI DSS.
It is important to note that PA-DSS validated payment applications alone
do not guarantee PCI DSS compliance and that the validated payment ap-
plication must be implemented in a PCI DSS compliant environment.
Who is mandating the security review and approval of payment applica-
tions?
The PCI Security Standards Council (PCI SSC) has established the guide-
lines and the Card Schemes (Visa Europe and MasterCard) serve as the
source of enforcement. Processors, Acquirers and manufacturers are the
mechanisms by which the regulations will be implemented.
What protection does a PA-DSS application provide?
Applications that have successfully completed a PA-DSS audit are certified
to not retain or compromise what is considered to be secure elements of
the card‟s track data (full magnetic stripe data), card validation codes and
values, PINs and PIN blocks. A PA-DSS certified application also facilitates
your own PCI DSS needs:
Benefits of using PA-DSS software include:
Prevents storage of sensitive cardholder data
Reduces opportunities for compromise and misuse
Ensures payment solutions meet the highest levels of security
To Next Page
Loading...