Skip to main content

Cubic payment application software achieves PCI-DSS certification

The latest version of Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website. CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactles
June 11, 2013 Read time: 2 mins
The latest version of 378 Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website.

CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactless cards, mobile and EMV payments.

Key features of CPA 3.0 include support for: account-based payments, as processed by Cubic’s NextAccount; European and North American adoption of global EMV payments standards; emerging transit-specific transaction authorisation and processing policies; and concurrent connections to multiple acquirers.

Previous versions of CPA, including CPA 2.0101, have also been certified as a validated payment application.

“Today, merchants accepting credit and debit cards are required by their acquiring banks to comply with PCI DSS,” said Janet Koenig, Cubic Transportation Systems’ director of Central Systems. “CPA 3.0, an integral component of our NextCity suite, provides a secure payment gateway directly to merchant acquiring banks or other financial institutions. PA-DSS certification of CPA helps transport operators and authorities to achieve PCI DSS certification by providing one less step for them to worry about.”

For more information on companies in this article

Related Content

  • Infrastructure funding and road user charging – debate continues
    February 1, 2012
    Jack Opiola provides an overview of the ongoing debate over US infrastructure funding and the progress – or lack of it – towards vehicles miles travelled road user charging. The future funding of transportation and mobility infrastructure is attracting increased attention. There has been sharp debate in the US, where landmark reports from the National Surface Transportation Infrastructure Financing Commission and the National Surface Transportation Policy and Revenue Study Commission both stated that the cu
  • Fujitsu and Ingenico join forces on Merseyrail ticketing
    April 16, 2014
    Fujitsu, in collaboration with Ingenico, has upgraded UK transport operator Merseyrail’s ticketing systems to enable contactless payment, enabling 63 Merseyrail stations across the UK to offer contactless payment in terminals and manned ticket outlets. Merseyrail will retain the Fujitsu Star point-of-sale ticketing system which it has operated for the past nine years and Fujitsu, in conjunction with Ingenico, will provide 92 iPP320 contactless PinPads and Axis, its proprietary centralised payment proces
  • Morpho, Transport for London and Zwipe in running for SESAMES Awards
    October 28, 2014
    The winners of the SESAMES Awards – often called the Oscars of the smart card, digital security, identification and secure transactions sectors – will be announced on Monday 3 November. The coveted trophies will be awarded in a gala ceremony in the heart of Paris, on the eve of CARTES. The finalists in the 11 categories covering the best technological innovations are:
  • Need for secure approach to connected vehicle technology
    January 7, 2013
    Accidental or malicious issue of false messages to connected vehicles could result in dire consequences, so secure systems of authentication and certification are likely to be necessary, write Paul Avery and Sandra Dykes. Connectivity among vehicles in urban traffic systems will provide opportunity for beneficial impacts such as congestion reduction and greater safety. However, it also creates security risks with the potential for targeted disruption. Security algorithms, protocols and procedures must take