Skip to main content

Cubic payment application software achieves PCI-DSS certification

The latest version of Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website. CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactles
June 11, 2013 Read time: 2 mins
The latest version of 378 Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website.

CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactless cards, mobile and EMV payments.

Key features of CPA 3.0 include support for: account-based payments, as processed by Cubic’s NextAccount; European and North American adoption of global EMV payments standards; emerging transit-specific transaction authorisation and processing policies; and concurrent connections to multiple acquirers.

Previous versions of CPA, including CPA 2.0101, have also been certified as a validated payment application.

“Today, merchants accepting credit and debit cards are required by their acquiring banks to comply with PCI DSS,” said Janet Koenig, Cubic Transportation Systems’ director of Central Systems. “CPA 3.0, an integral component of our NextCity suite, provides a secure payment gateway directly to merchant acquiring banks or other financial institutions. PA-DSS certification of CPA helps transport operators and authorities to achieve PCI DSS certification by providing one less step for them to worry about.”

For more information on companies in this article

Related Content

  • Entrust Datacard merger helps secure digital future in IoT era
    November 5, 2014
    s smart devices and e-transactions proliferate in the Internet of Things (IoT) era, newly-merged business Entrust Datacard is uniquely placed to secure the connections between them, says its CEO Todd Wilkinson. The company, formed from Datacard Group and Entrust and formally united at CARTES SECURE CONNEXIONS this week, combines broad and deep expertise in hardware and software together with the know-how to combine them.
  • Visa tap-to-ride passes one billion
    September 27, 2022
    Payment group says it processed that number of transactions in 10 months on public transport
  • Keeping an eye on cyberattacks
    March 24, 2022
    Hackers love an open door and ransomware attacks on transit agencies are rising. Ben Spencer examines a report by Mineta Transportation Institute on keeping personal data safe
  • London transport to get contactless payment
    July 28, 2014
    Millions of customers are set for easier and more convenient journeys from 16 September, when Transport for London (TfL) will introduce contactless payments for all pay as you go customers on the Tube, London Overground, DLR and trams in addition to the capital's buses. The new option means that passengers will no longer be any need to top up Oyster card balances because fares are charged directly to payment card accounts. Contactless payments - credit, debit, charge or pre-paid cards or devices - work i