Skip to main content

Cubic payment application software achieves PCI-DSS certification

The latest version of Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website. CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactles
June 11, 2013 Read time: 2 mins
The latest version of 378 Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website.

CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactless cards, mobile and EMV payments.

Key features of CPA 3.0 include support for: account-based payments, as processed by Cubic’s NextAccount; European and North American adoption of global EMV payments standards; emerging transit-specific transaction authorisation and processing policies; and concurrent connections to multiple acquirers.

Previous versions of CPA, including CPA 2.0101, have also been certified as a validated payment application.

“Today, merchants accepting credit and debit cards are required by their acquiring banks to comply with PCI DSS,” said Janet Koenig, Cubic Transportation Systems’ director of Central Systems. “CPA 3.0, an integral component of our NextCity suite, provides a secure payment gateway directly to merchant acquiring banks or other financial institutions. PA-DSS certification of CPA helps transport operators and authorities to achieve PCI DSS certification by providing one less step for them to worry about.”

For more information on companies in this article

Related Content

  • Philippines bank combines banking and transport into one prepaid card
    August 31, 2016
    Dutch digital security specialist Gemalto is supplying the Bank of the Philippines Islands (BPI) with EMV prepaid banking and transport cards that support Manila Metro’s beep contactless ticketing system. BPI is one of the leading banks in the Philippines and the first to cater to both EMV and transport payment. The two-in-one card leverages Gemalto's Optelio technology and gives commuters greater security and convenience while increasing the transaction volume and user base for financial institutions.
  • New York’s MTA chooses Masabi’s mobile ticketing
    May 2, 2014
    Mobile ticketing and payments specialist Masabi has been selected by New York’s Metropolitan Transportation Authority (MTA) to provide mobile ticketing for both the Metro-North Railroad (MNR) and Long Island Rail Road (LIRR). Masabi’s mobile ticketing technology will allow passengers to quickly and securely buy and use electronic tickets for both railroads using a mobile ticketing application or website with payment being made via either debit or credit card. Tickets are sent to users’ phones in the form
  • Conscience versus convenience
    June 8, 2015
    David Crawford looks at new ways forward for public transport. By 2025, nearly 60% of the world’s population will be living in towns and cities, increasing their extent and density, and the journeys that people make within and between them. In response, the International Association of Public Transport (UITP) wants to see public transport’s global modal share doubling (PTx2) by the same date. “Success in 2025,” a spokesperson told ITS International, “will save 170 million tonnes of oil equivalent and 550
  • Opening the closed-loop to realise ITS benefits
    April 8, 2014
    Jim Leslie, manager of ITS applications engineering at the Econolite Group looks at practical steps in transitioning from closed-loop masters to a centralised ATMS. Not many years ago the standard method of coordinating signalised intersections in local areas was to install an on-street master – each of which monitored and controlled a limited number of signal controllers or intersections as a closed-loop system. And, to a certain extent, each closed-loop system was autonomous from others deployed by the ag