SafeNet, a global leader in data protection solutions, announced it is working with The Logic Group to deliver a Point-to-Point Encryption (P2PE) solution to help its customers reduce the risk of fraud and increase payment security.
With a P2PE solution, merchants can completely remove themselves from the scope of the Payment Card Industry Security Standards Council (PCI SSC).
Under PCI DSS regulation, merchants have faced heightened pressure to comply with data security standards, investing millions to bring all their stores into compliance.
As a provider of multichannel payments to large corporate organisations in Europe, The Logic Group needed to deploy a PCI P2PE-compliant solution that could provide its customers with robust encryption, decryption, and key management. By leveraging SafeNet's robust hardware security modules (HSMs), The Logic Group has been able to pass several benefits on to customers, including:
• Increased security and reduced risk: By leveraging the Solve DataShield offering, customers are able to eliminate the holding of credit card data in store, which strengthens security and reduces the risk of data theft or compromise.
• Enhanced consumer trust: By reducing the risk of a data breach with a robust security platform, organisations can foster increased trust among their customers.
• Reduced audit costs: With the Solve DataShield solution, merchants can completely remove their stores from the scope of PCI DSS audits, significantly reducing the associated efforts and costs.
• Streamlined administration: Customers can dramatically reduce the time and effort internal teams have to dedicate to security administration by adopting a complete solution.
The P2PE standard provides detailed requirements that outline how to protect data as soon as it is collected from a chip-and-PIN device until the payment settlement process is complete and includes a number of requirements relating to the hardware used for encryption, decryption, and key management.
The Logic Group implemented SafeNet's Luna EFT HSMs as part of its P2PE solution. The deployment aids the necessary encryption of the company's payment services and enabled The Logic Group's P2PE solution, Solve Datashield, to comply with the PCI SSC and receive validation.
Nick Stacey, Director of Business and Market Operations at The Logic Group, commented, "Delivering P2PE-compliant offerings in this market provides a huge business opportunity for us as demand for this service continues to grow. So when developing the Solve DataShield offering, it was vital that we complied with all the relevant PCI P2PE standards, including robust key management policies."
"SafeNet's Luna EFT HSMs delivered all the security capabilities that we required, while providing a platform that we could deploy quickly and manage efficiently. As a result, we were able to speed up our time to market, and deliver solutions that provide customers with maximum security and value," Stacey continued.
Paul Hampton, Crypto Management Product Manager at SafeNet concluded, "With the rise in security threats across the payments ecosystem, combined with heightened pressure to comply with payment security standards, point-to-point encryption has never been more important. By deploying The Logic Group's P2PE-compliant solution, merchants can effectively remove themselves from the scope of PCI DSS compliance, whilst also improving customer confidence and loyalty."
SafeNet's Luna EFT HSMs are certified to both the Federal Information Processing Standards (FIPS) and PCI HSM standards, which are mandated by the PCI council for P2PE transactions. The HSMs provide integration support for encryption algorithms, as well as fast implementation, with The Logic Group completing the initial installation of the HSMs in less than a day.