Skip to main content

Cubic payment application software achieves PCI-DSS certification

The latest version of Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website. CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactles
June 11, 2013 Read time: 2 mins
The latest version of 378 Cubic Transportation’s Cubic Payment Application (CPA 3.0) has been successfully validated according to PA-DSS v2.0 by the PCI Security Standards Council, and is listed as acceptable for new deployments on the Payment Card Industry Data Security Standards (PCI-DSS) website.

CPA 3.0 is designed to provide optimum performance for securely processing legacy closed-loop payments, such as agency issued transit smartcards, as well as emerging forms of payment including bank-issued contactless cards, mobile and EMV payments.

Key features of CPA 3.0 include support for: account-based payments, as processed by Cubic’s NextAccount; European and North American adoption of global EMV payments standards; emerging transit-specific transaction authorisation and processing policies; and concurrent connections to multiple acquirers.

Previous versions of CPA, including CPA 2.0101, have also been certified as a validated payment application.

“Today, merchants accepting credit and debit cards are required by their acquiring banks to comply with PCI DSS,” said Janet Koenig, Cubic Transportation Systems’ director of Central Systems. “CPA 3.0, an integral component of our NextCity suite, provides a secure payment gateway directly to merchant acquiring banks or other financial institutions. PA-DSS certification of CPA helps transport operators and authorities to achieve PCI DSS certification by providing one less step for them to worry about.”

For more information on companies in this article

Related Content

  • Smart Card Alliance white paper explores possibilities for NFC in transit industry
    March 14, 2012
    With near field communication (NFC)-enabled handsets poised to exceed 100 million in 2012, the Smart Card Alliance Transportation Council has announced a new white paper examining how the transit industry can best make use of this popular new technology.
  • Tech advances create MaaS without compromise
    August 29, 2019
    Advances in technology make it possible for authorities to compile and maintain MaaS platforms cheaply - and without relinquishing control to third parties. Colin Sowman finds out more… It is increasingly clear that local authorities’ reluctance to implement Mobility as a Service (MaaS) is based on politics and finance. However, the technology underpinning MaaS is evolving rapidly and is presenting new solutions. At its heart, the political resistance comes down to the divide between the ethos of public
  • Geotoll’s payment app could be the smart answer to tolling interoperability
    July 30, 2013
    Jon Masters looks at a smartphone app which could be the ‘disruptive technology’ that eases the way to interoperability in tolling systems. Consumer demand may soon drive the biggest step change yet in tolling. In the United States a new start-up company, Geotoll, has launched a smartphone app for electronic toll payment. It is not beyond possibility that rapid growth of the market for smartphones will continue – an estimated 50% of US citizens and 80% of Europeans now have one – and that the Geotoll brand
  • OmniAir to design certification program for non-Kapsch readers and tags
    December 4, 2013
    The E-ZPass Group is to work with OmniAir Certification Services (OCS) to specify a testing program for ensuring full compliance of competitive equipment with E-ZPass readers and tags. OCS was hired by the E-ZPass Group for fees of around US$50,000 to detail the testing needed. The documents are due to be completed by the end of the year. Actual testing for certification will be negotiated by manufacturers with OCS-accredited testing firms. The move to certify additional suppliers’ equipment follows K