CARTES considers questions of security

Ensuring the security of payment systems is essential to maintain consumer confidence. The conference track ‘EMV: Challenges and benefits’, looks at ways of improving that security. When a customer uses his payment card in a store, he expects that the system will be secure. The interaction between EMV payment cards and POS terminals is strictly controlled.
November 4, 2014 Read time: 2 mins

Ensuring the security of payment systems is essential to maintain consumer confidence.

The conference track ‘EMV: Challenges and benefits’, looks at ways of improving that security. When a customer uses his payment card in a store, he expects that the system will be secure. The interaction between EMV payment cards and POS terminals is strictly controlled.

However, despite the existence of many systems that encrypt the PAN moving between the card reader and the processing infrastructure, part of the PAN’s journey is still ‘en clair’ – unencrypted. Over the years, the industry has spent a great deal of time and money on enforcing compliance with PCI DSS across the payment industry. However, data breaches still happen.

Milos Dunjic, CTO, Cardis International, will present a new solution that implements PAN with format preserving encryption (FPE) inside the card’s EMV payment application and is fully under the card issuer’s control. The new system is said to be radically different from previous methods. The solution is said to be fully resistant to replay attacks, as it ensures that the PAN reference is valid for only a single transaction. Since POS terminals, merchant acquirer and payment network systems handle only a unique per transaction format preserving PAN references, this eliminates the danger of criminals stealing real PAN data and then using it in CNP payments. Following on from this presentation, Andreas Strobel, board member with the Smart Payment Association, will give a presentation that analyses the advantages and disadvantages of different implementations, reflecting different business models. He will assess the standardisation efforts for online payment using tokens.


‘End-to-end tokenisation of PAN between EMV-application/digital-wallet and issuer host’, 14:40-15:00, Room 3

‘A Secure Profile for Tokenization in E and M-Commerce’, 16:30-17:00, Room 3

Related Content

  • Use of ITS technology grows more prevalent in safety applications
    January 30, 2012
    Transportation agencies and governments are using ITS technology to protect critical infrastructure from terrorist attack and other threats to economic security and public safety. Andrew Bardin Williams reports. It is no secret that we live in a potentially dangerous world. Terrorism as seen on 9/11 in the United States, subsequent attacks in London, Moscow and Madrid and other acts of violence across the developing world have made vigilance the watchword for ensuring security. Key infrastructure is now bei
    Read More
  • Cloud computing technology benefits GIS
    July 17, 2012
    Geographic Information Systems are a relatively late adopter of cloud computing,but the benefits of host services for geospatial data and analysis are becoming clear. Jason Barnes reports Both the concept and the reality of cloud computing have been around for some time. More and more industry sectors are entrusting external service providers with the provision of their computing services via the internet. However, the Geographic Information System (GIS) industry has been slow to embrace the trend. This is
    Read More
  • Study reveals major concerns over the security of connected cars
    March 2, 2016
    New research has revealed that half of British drivers (49 per cent) are concerned about the safety of the connected car, with automotive manufacturers also admitting there could be a security lag of up to three years before systems catch up with cyber threats. The report, commissioned by Veracode and carried out by the International Data Corporation (IDC), revealed half of drivers are concerned about the security of driver-aid applications, such as adaptive cruise control, self-parking, and collision av
    Read More
  • Q-Free sees logic in video tolling
    September 15, 2014
    Q-Free’s Frank Kjelsli talks to Colin Sowman about why video tolling could be the boost to efficiency and interoperability the industry is seeking. Like it or not, the principal of one person, one tolling account is likely to become a reality: be that in America with the 2016 interoperability deadline or the European EETS requirement. Multi-tag readers are being introduced and alliances are being formed to meet legislative requirements but as the debate continues about which systems and protocols to adopt,
    Read More

Highlighted Content