 |
PRODUCTS
| |
|
 |
...the firm's approach removes a layer of complexity from the database encryption process. It can also make it easier to ship production data into a test environment, which is a big deal for maintaining security in the troubleshooting process.
Paul Stamp, Forrester Research
(eWeek)
|
|
Data protection needs to take into account both internal and external threats, including those against critical database and application resources. However, many protection mechanisms require application retooling or add complexity that delays or halts deployment. Format-preserving encryption overcomes these issues. It's an exciting step toward improved, simpler data protection and compliance with regulatory requirements.
Trent Henry, Burton Group
|
| |
Voltage SecureData™ Payments
End-to-End Cardholder Data Protection for Merchants, Merchant Acquirers, and Processors
In today's environment of highly publicized software attacks and stronger regulatory requirements, mitigating the risk of a cardholder data breach at all points in the payment stream is critical. Merchants, acquirers, and processors must be able to reliably protect credit card data at rest and in transit within their environment.
Voltage SecureData Payments provides complete end-to-end data protection for payment transactions from the point of capture to authorization, settlement, and beyond. By combining two Voltage Security innovations, Identity-Based Encryption™ and
Format-Preserving Encryption™, Voltage SecureData Payments addresses the complexity of transaction-heavy retail environments without the massive disruption traditionally associated with encryption in merchant IT systems.
Voltage Identity-Based-Encryption (IBE) eliminates the complexity of traditional public key and symmetric key systems (e.g., Derived Unique Key Per Transaction – DUKPT). Voltage Format-Preserving Encryption (FPE) protects credit card numbers and other types of structured information without needing to change format. In addition, FPE maintains important data properties, such as a checksum, and allows portions of the data to remain in the clear. These capabilities help preserve existing processes such as bin routing as well as data such as the last four digits of the card.
| Voltage SecureData Payments Benefits: |
- Protects the critical endpoints of the payments stream
In many existing payment systems, credit card data is left unprotected during authorization, settlement, and routine business processes (such as processing for loyalty, charge-backs, or repeat payments). Voltage SecureData Payments protects cardholder data at these endpoints and as data flows throughout the payment stream.
- Reduces PCI audit cost and scope
Voltage SecureData Payments reduces the number of changes to underlying databases and payments applications. End-to-end encryption can be combined easily with tokenization to provide merchants with complete choice in reducing PCI audit scope.
Built-in, PCI-ready reports streamline and simplify the audit process.
- Reduces data breach risk
Voltage SecureData Payments protects cardholder data directly, wherever card data is stored, transmitted, or used. When deployed with sound internal controls, Voltage SecureData Payments renders sensitive information useless for fraudulent activities, reducing the risks associated with data breaches.
- Significantly lower implementation and management costs
Voltage SecureData Payments eliminates the burden of key injection, key rotation, and key management. With Voltage SecureData Payments, keys are securely generated on demand and not stored; point-of-sale (POS) devices are not subject to key injection; and key rotation occurs systematically — eliminating labor-intensive processes and reducing costs.
| Key Features and Capabilities: |
- A POS software development kit (SDK), which is integrated into a variety of POS devices and POS platforms, including devices with tamper-resistant security modules (TSRMs). For a complete list of payment terminal partners, please visit www.voltage.com/partners
- Multiple integration options, including a simple API (C and Java),
a web services API, and command-line tools for batch processing.
- Support for a wide variety of platforms, including Windows, Linux, HP NonStop, Stratus VOS, Teradata, and IBM z/OS.
More Information
Download Voltage Security Heartland Payment Systems
eBook Case Study 
Download Voltage SecureData Payment Data Sheet
|
|
|
|
