Skip to main content

Cubic payment application software achieves PCI-DSS certification

The latest version of Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website. CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactles
June 11, 2013 Read time: 2 mins
The latest version of 378 Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website.

CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactless cards, mobile and EMV payments.

Key features of CPA 3.0 include support for: account-based payments, as processed by Cubic’s NextAccount; European and North American adoption of global EMV payments standards; emerging transit-specific transaction authorisation and processing policies; and concurrent connections to multiple acquirers.

Previous versions of CPA, including CPA 2.0101, have also been certified as a validated payment application.

“Today, merchants accepting credit and debit cards are required by their acquiring banks to comply with PCI DSS,” said Janet Koenig, Cubic Transportation Systems’ director of Central Systems. “CPA 3.0, an integral component of our NextCity suite, provides a secure payment gateway directly to merchant acquiring banks or other financial institutions. PA-DSS certification of CPA helps transport operators and authorities to achieve PCI DSS certification by providing one less step for them to worry about.”

Related Content

  • April 2, 2014
    Plastic is fantastic for payment platform interoperability
    The Sino Visitor Pass aims to promote trade between Singapore and China by making travel easier, as Jon Masters finds out. Singapore has notched up another first in transportation innovation with announcement of a dual-currency payment card in partnership with the province of Guangdong in China. From the middle of 2014, visitors to Singapore and Guangdong will be able to use a ‘Sino Visitor Pass’ to pay for use of public transportation among other things.
  • December 16, 2014
    Chicago integrates regional transit fares
    Travellers in Chicago will soon be able to use a single app to plan their journey, pay and receive real-time alerts across all public transit services in the Chicago region. The Chicago Transit Authority (CTA), suburban bus operator Pace and commuter rail system Metra have awarded Cubic Transportation Systems a US$5.4 million contract to supply an integrated mobile application and system supporting a wide variety of mobile ticketing, mobile top up, contactless mobile payment using Near Field Communication (
  • December 14, 2012
    Contactless payments introduced on London's buses
    Bus passengers in London can now use their use their contactless debit, credit or charge card to touch in on the yellow Oyster card readers and pay the single Oyster fare on any of London's 8,500 buses. Introducing the scheme, Transport for London (TfL) says the new payment option will also be good news for the approximately 36,000 people per day who board a bus and find they have insufficient pay as you go balance on their Oyster to pay for their journey as they will be able to use the other card they may
  • January 31, 2012
    Interoperable electronic payment systems begin testing
    OmniAir's Tim McGuckin writes about progress with the Electronic Payment Services National Interoperability Specification, which aims to provide the US with payment capabilities at lane level using any ETC component protocol. The OmniAir Consortium was founded to advance US national deployment of open, effective and interoperable transportation technology systems. Through its member-defined programmes, companies and individuals join to work for open standards, interoperability, third-party certification and