Thales, leader in information systems and communications security, will be showcasing and demonstrating a range of solutions from leading mPOS device manufacturers and newly announced members of its multi-partner ecosystem at Cartes 2013 in Paris, 19-21 November 2013.
By working with Thales and its partners, Payment Service Providers (PSPs) can now construct, configure and deliver an mPOS solution in a few easy steps, opening up significant new opportunities to increase revenue through additional transaction volume. For the first time, PSPs can provide valuable services to micro merchants, such as tradesmen and market stall traders and anyone else who has traditionally been excluded from the world of card payments and forced to rely on cash-based transactions. These merchants can now easily deploy a flexible, portable, low-cost card acceptance solution with strong end-to-end security that leverages their existing investment in smartphones, tablets and other mobile devices. Furthermore, merchants who have traditionally accepted cards, such as high street stores, can also take advantage of these systems to add mPOS capabilities to their existing payment systems as a way to create a better customer experience.
By working with leading mobile card reader providers such as Magtek, Miura Systems and Spire Payments, and mPOS application providers such as CreditCall, to integrate hardware-based encryption and key management technologies, Thales technology creates a secure infrastructure for mPOS. This allows untrusted devices such as mobile phones and tablets to conduct secure payment transactions across untrusted networks - cellular, Wi-Fi or internet. These integrations enable PSPs to offer a secure payment gateway that supports a wide variety of card readers.
Hardware-based security underpins the whole mPOS ecosystem. Secure card readers encrypt the card data at the point of capture for both magnetic stripe and EMV chip cards. Hardware-based point-to-point encryption keeps micro merchants out of scope for PCI DSS and does not add to the PCI DSS burden for larger merchants already accepting cards using traditional POS terminals. Thales payShield 9000 and nShield Connect hardware security modules (HSMs) improve s(HSMs) s(HSMs) improve security, simplify security audit compliance and limit liability for PSPs.
Benefits of the Thales mPOS ecosystem:
• Merchants can accept cards for payments any place, any time where there is internet or mobile connectivity - the network doesn't need to be secure because the data is secured at the time of capture
• Commercial-off-the-shelf smartphones or tablets provide a cost-effective alternative to traditional payments terminals and can offer a rich and flexible user interface that can be easily customized and modified without the need to re-certify the devices to the prevailing security schemes
• Compliance with payment system rules is focused solely on the card reader - everything else on the communication path between the merchant and the PSP is out of scope for security audits, enabling PSPs to on-board new merchants at minimal cost
• By supporting a range of mPOS card readers and a common gateway HSM, PSPs can offer their customers a choice of hand-held devices without driving up the cost of their transactional infrastructure
Jeremy Gumbley, Chief Technology Officer at CreditCall says:
"Thales was an obvious choice for CreditCall - best-in-class HSM solutions with wider support and recognition in the payments security arena than any other provider. Hardware solutions are pivotal in making security viable in mobile environments."
Steve Poulston, Managing Director, Europe at Magtek says:
"The payment industry is migrating towards P2PE and PSPs are busy defining their roadmaps. MagTek's next generation, Open Source P2PE hardware devices along with Thales payShield 9000, provides independent PSPs with a comprehensive proven P2PE solution."
Andrew Hodges, Chief Technology Officer at Miura Systems says:
"Miura has developed an innovative approach to delivering the highest levels of card payment security for its partners. By working with Thales, Miura has been able to simplify and remove the complexity of delivering leading P2PE and Remote Key Injection services for mPOS solutions."
Nigel Dean, International Product Marketing Manager, Spire Payments says:
"mPOS is a significant disruptor within the electronic payments space. Forward thinking, nimble businesses such as Thales and Spire Payments see this as a perfect opportunity to form strategic relationships to deliver secure, trusted and reliable mPOS solutions."
Ian Hermon, mobile payments specialist at Thales e-Security says:
"mPOS is revolutionizing the consumer's point-of sale experience. Micro merchants are now able to accept cards for the first time, removing their dependency on cash transactions, and all merchants can now more easily meet customer expectations and avoid lost sales opportunities. By creating a secure mPOS infrastructure, Thales and its numerous global partners are now able to help PSPs enter this exciting new world. The combination of these new payment technologies and the ubiquity of the smart phone and table are set to change the payments landscape for ever and the opportunity for PSPs is immense."