Business Wire

PCI Security Standards Council Publishes New Standard for Contactless Payments

Share

Today the PCI Security Standards Council (PCI SSC) published a new data security standard for solutions that enable merchants to accept contactless payments using a commercial off-the-shelf (COTS) mobile device (e.g., smartphone or tablet) with near-field communication (NFC). Using the PCI Contactless Payments on COTS (CPoC™) Standard and supporting validation program, vendors can provide merchants with contactless acceptance solutions that have been developed and lab-tested to protect payment data.

“Providing the payments industry with standards and resources that support secure payment acceptance in new and emerging card and card-rooted payment channels is a key focus for the Council,” said PCI SSC Standards Officer Emma Sutcliffe. “The PCI CPoC Standard is the second standard released by the Council to address mobile contactless acceptance. Specifically, the PCI CPoC Standard provides security and test requirements for solutions that enable contactless payment acceptance on a merchant COTS device using an embedded NFC reader.”

“Contactless, or tap and go, payment adoption is on the rise globally, and merchants want affordable, flexible and safe options for contactless payment acceptance that allow them to best serve their customers. In addition to PCI Software-based PIN Entry on COTS (SPoC) Solutions that enable contactless payment acceptance with a dongle attached to the mobile COTS device, the PCI CPoC Standard and Program now provide merchants the option to use validated solutions that require no additional hardware to accept contactless transactions,” said PCI SSC Senior Vice President Troy Leach.

The PCI CPoC Standard includes security requirements for vendors on how to protect payment data in CPoC Solutions and test requirements for laboratories (labs) to evaluate these solutions through the supporting validation program. Validated CPoC Solutions are listed on the PCI SSC website as a resource for merchants and acquirers. Program details are outlined in the CPoC Program Guide, which is available now on the PCI SSC website.

The primary elements of a CPoC Solution include: a COTS device with an embedded NFC interface to read the payment card or payment device; a validated payment acceptance software application that runs on the merchant COTS device initiating a contactless transaction; and back-end systems that are independent from the COTS device and support monitoring, integrity checks and payment processing. Software-based PIN entry is not permitted in a CPoC Solution.

Through a combination of the security controls built into the merchant application and ongoing monitoring and integrity checks performed by the back-end systems, merchants and consumers can have confidence in the security of the CPoC Solution and the contactless transaction.

“Developed with the input of the global payments industry via the requests for comments (RFC) process, the CPoC Standard is a continuation of the Council’s efforts to provide merchants with secure mobile payment acceptance options they can trust to support their customers and protect the integrity and confidentiality of their payment data,” added Leach.

The PCI CPoC Standard and Program documents are available on the PCI SSC website.

For more information on the new CPoC Standard and Program read PCI Perspectives Blog post Just Published: PCI Contactless Payments on COTS.

About the PCI Security Standards Council
The PCI Security Standards Council (PCI SSC) leads a global, cross-industry effort to increase payment security by providing industry-driven, flexible and effective data security standards and programs that help businesses detect, mitigate and prevent cyberattacks and breaches. Connect with the PCI SSC on LinkedIn. Join the conversation on Twitter @PCISSC. Subscribe to the PCI Perspectives Blog.

Contact information

Mark Meissner
PCI Security Standards Council
+1-202-744-8557
press@pcisecuritystandards.org
Twitter @PCISSC

About Business Wire

For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

A Better Alternative to Banking - ClubSwan.com27.1.2020 12:00:00 EETPress release

ClubSwan.com, the leader in membership driven financial solutions, further expands its innovative alternative banking capabilities to key global markets. As traditional financial institutions continually struggle to provide innovative and meaningful ways to bring value to individual and corporate customers and as digital assets/crypto currencies are experiencing global growth, ClubSwan.com continues to evolve to meet the efficiencies and demands that these new assets and our customers require and to which traditional banks have no answer. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20200127005046/en/ Instead, closed bank accounts, rejected transactions, crippling delays with customers receiving their funds (if at all) are all the norm with traditional banks. To add to this dilemma, the availability of trustworthy solutions where customers have peace of mind for both crypto assets and traditional currencies have been non-exi

GSMA Recognizes Turkcell and P.I. Works for the Value of AI Based Network Automation27.1.2020 10:00:00 EETPress release

Turkcell and P.I. Works have been recognized by GSMA Future Networks Programme for achieving exceptional efficiency gains in network operations and ensuring superior customer experience. P.I. Works and Turkcell have successfully shown that the AI based, service aware network automation delivered stronger improvements as compared to conventional automation solutions. The details of the deployed solutions and their benefits are provided in a joint white paper authored by GSMA, Turkcell and P.I. Works under GSMA’s Future Networks Programme. To read the white paper please visit: https://www.gsma.com/futurenetworks/wiki/case-study-ai-use-cases-in-service-assurance/ GSMA Future Networks Programme intends to help operators share best practices and discover new opportunities that will enable them to reduce operational and capital expenditures. Given the success of the project, GSMA invited Turkcell and P.I. Works to join the program and provide insights for the AI-based, Service Aware Automate

Phase 2 DESTINY-Gastric01 Trial of DS-8201 Versus Chemotherapy Met Primary Endpoint27.1.2020 10:00:00 EETPress release

Daiichi Sankyo Company, Limited (hereafter, Daiichi Sankyo) and AstraZeneca today announced positive topline results from the pivotal phase 2 DESTINY-Gastric01 trial of DS-8201, a HER2 directed antibody drug conjugate (ADC), in patients with HER2 positive unresectable or metastatic gastric or gastroesophageal junction cancer that had progressed following two or more treatment regimens including trastuzumab and chemotherapy. The trial met its primary endpoint, achieving a statistically significant and clinically meaningful improvement in objective response rate (ORR), as assessed by an independent review committee, in patients treated with DS-8201 versus investigator’s choice of chemotherapy (irinotecan or paclitaxel monotherapy). DS-8201 also showed a statistically significant and clinically meaningful improvement in overall survival (OS), a key secondary endpoint. The safety profile observed for DS-8201 in DESTINY-Gastric01 was consistent with previous clinical trials. These results c

HighRes Biosolutions and Novo Nordisk partner to transform drug discovery in automated Lab of the Future24.1.2020 17:00:00 EETPress release

HighRes Biosolutions and Novo Nordisk A/S today announced that they will collaborate to design a state-of-the-art robotic platform for high-throughput biologics engineering and characterisation. The integration of a multi-system robotics platform with sophisticated software control architecture will enable a digital transformation and accelerated discovery for Novo Nordisk’s peptide and large molecule therapeutics research. “In order to maintain our leadership within biologics engineering we are investing in a fully automated and digital design platform. This investment is linked to our build-up in AI and advanced analytics and demonstrates Novo Nordisk’s commitment as a world leading biologics research company,” said Lars Fogh Iversen, senior vice president, Global Research Technologies, Novo Nordisk. The platform will comprise several highly automated and integrated cells for production, characterisation and functional analysis of thousands of biologic compounds every month. Its scop

Conquest Invests in 5 Greenfield Onshore Wind Parks Totalizing 43MW in the Flanders Region24.1.2020 15:37:00 EETPress release

Conquest, acting through the Conquest Sustainable Infrastructure fund, announced the transaction was closed after an exclusive agreement had been reached with ENGIE Electrabel. Conquest acquires 51% of a portfolio expected to provide 111 GWh per annum of renewable power representing the annual electricity consumption of about 32,000 Belgian homes from early 2021 onwards. The projects benefit from 15 to 20-year green certificates local remuneration schemes, and thus generate yearly secured revenues. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20200124005221/en/ Credit: Electrabel While the energy and digital transitions continue to drive the infrastructure sector, Conquest keeps building its diversified sustainable real asset portfolio in Western European markets. The success lies in years of collaboration and long-lasting partnerships with fellow industry experts who can notably facilitate access to new growth opportunities

Fluence Expands EMEA Footprint with Horticulture Partners in Papenburg, Germany24.1.2020 14:00:00 EETPress release

Fluence by OSRAM (Fluence), a leading global provider of energy-efficient LED lighting solutions for commercial cannabis and agriculture production, announced today it is expanding its presence in the Emsland region of Germany through partnerships with growers and other horticulture specialists operating out of Papenburg. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20200124005109/en/ Friedrich Schulz’s 5.5 hectare farm—which grows herbs year-round in addition to lettuce, peppers and chives—utilizing VYPR 2p fixtures. (Photo: Business Wire) Given Papenburg’s decades-long history of attracting horticulture experts, Fluence’s innovative lighting solutions for horticulture are a natural fit for the region’s tomato, cucumber, leafy greens and herb growers. Forging connections with Papenburg’s horticultural leaders Elektro Evers, an engineering firm specializing in greenhouse technology, is Fluence’s exclusive systems integrator

In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.

Visit our pressroom