Skip to main content

Cubic payment application software achieves PCI-DSS certification

The latest version of Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website. CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactles
June 11, 2013 Read time: 2 mins
The latest version of 378 Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website.

CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactless cards, mobile and EMV payments.

Key features of CPA 3.0 include support for: account-based payments, as processed by Cubic’s NextAccount; European and North American adoption of global EMV payments standards; emerging transit-specific transaction authorisation and processing policies; and concurrent connections to multiple acquirers.

Previous versions of CPA, including CPA 2.0101, have also been certified as a validated payment application.

“Today, merchants accepting credit and debit cards are required by their acquiring banks to comply with PCI DSS,” said Janet Koenig, Cubic Transportation Systems’ director of Central Systems. “CPA 3.0, an integral component of our NextCity suite, provides a secure payment gateway directly to merchant acquiring banks or other financial institutions. PA-DSS certification of CPA helps transport operators and authorities to achieve PCI DSS certification by providing one less step for them to worry about.”

For more information on companies in this article

Related Content

  • Asecap prepares for ‘interoperability on steroids’
    March 31, 2023
    The gathering of Europe’s toll professionals offers a chance for views to be exchanged by senior people on a number of big issues: and there’s currently an awful lot to think about, reports Geoff Hadwick
  • Nantes and Lyon to upgrade ticketing
    May 23, 2014
    Xerox is to begin upgrading the bank card payment modules in devices on the public transport networks of Nantes in north-west France and Lyon in south-east France, to ensure they conform to the latest banking standards. Ticket vending machines in both Nantes and Lyon and ticket booking office terminals in Lyon, installed between 2000 and 2005, will be upgraded.
  • G&D puts Guest of Honour country Brazil in the CIPURSE smartcard spotlight at CARTES 2013
    November 19, 2013
    Giesecke & Devrient and Infineon have joined forces to provide “contactless smartcards compliant with the CIPURSE Open Standard in Volume Quantities” and will be able to discuss here at CARTES 2013 how these new cards “are being used today in Brazil”.
  • Strike action prompts commuters to try something different
    June 2, 2014
    David Crawford highlights responses to transit disruption on both sides of the Atlantic. Shortly before workers at San Francisco Bay Area Rapid Transit (BART) began a lengthy round of pay and conditions-related strikes in summer 2013, impacting on the daily lives of 400,000 communities, online ridesharing group Avego publicised a new web address: bartstrike.com. By the start of the following week, Avego was encouraging stranded commuters to download its smartphone app by offering them the chance in a raffle