PCI

What does PCI mean to fuel retailers?

PCI EPP standards require that fuel dispenser payment devices use the Triple Data Encryption Standard (TDES) algorithm to encrypt PIN data within the keypad.  Devices must also include tamper-responsive security components and data skimming resistance.

http://www.pcisecuritystandardscouncil.org/

Compliance Deadlines

January 2009 - New dispensers in the US must be TDES-capable and contain PCI certified encrypted PIN pads

July 1, 2010 - To maintain liability protection all dispensers globally, including legacy equipment, must actively use TDES encryption with PCI certified hardware

Security

Advanced security features

• Active tamper-response mechanisms adhere to PCI requirements and prevent unauthorized access and removal of the devices from the fuel dispenser
• Full-travel numeric keys prevent the use of data skimming keypad overlays
• TDES encryption from the moment data is entered into the keypad and throughout internal components

Benefits

Cost-effective, simple compliance

One flexible platform can be adapted to meet country-specific security mandates such as Canadian Interac and global EMV (European Mastercard and Visa) regulations
Available as an option for new Ovation iX, 4/Vista, HS/4 Vista, Global Ovation, Global Star, and Global Vista fuel dispensers or as an upgrade kit for legacy Dresser Wayne and selected third party dispensers
Compatible with a wide range of POS systems and provides a consistent POS interface
The only solution with a hybrid keypad that includes membrane keys that can be easily configured for re-branding purposes or to set specific site requirements

Configurability

Security level configurations

All iX Pay secure payment terminal configurations include a PCI 2.0 encrypting PIN Pad with TDES and DUKPT encryption support with a built-in keypad privacy shield.

EPP Series - Basic EPP Compliance (US only)

• Standard display prompt control
• Standard magnetic stripe card reader

UPT Series - Enhanced PCI UPT Compliance

• Secure card reader and display prompt control as required to meet UPT standards
• Enhanced secure POS interface that supports optional dispenser to POS data encryption
• Secure encrypting magnetic stripe card reader

EMV Series - Interac/EMV Compliance

• Enhanced secure POS interface that supports authenticated display prompt control
• Optional dispenser to POS data encryption
• Secure encrypting hybrid magnetic stripe and Chip and PIN card reader