PCI PIN Transaction Security (PTS) Requirements

All devices used for Visa, Mastercard, American Express, JCB or Discover payments must meet PCI PTS requirements and be approved by the PCI Security Standards Council (PCI SSC). The requirements serve to protect against fraud and ensure secure entry and transmission of PIN and account data. SRC is a PCI Security Standards Council (PCI SSC) accredited testing laboratory that performs the evaluation required for approval.

Since PCI PTS version 3.0, all previous security requirements have been incorporated into just two catalogs of requirements. A modular set of requirements is defined for Point of Interaction (POI) devices. It incorporates the three previously separate requirements for POS PIN Entry Devices (PED), Encrypting PIN PEDs (EPP), and Unattended Payment Terminals (UPT). This set can also be used to evaluate OEM components that will be installed in other devices. These include Encrypting PIN PEDs (EPP), POS PIN Entry Devices (PED), IC Card Readers (ICCR), and Magnetic Stripe Readers (MSR). The ability to certify OEM components leads to cost savings because they do not have to be looked at again when an assembled device relies on them.

Another set of security requirements are provided for the Hardware Security Modules (HSM) that perform cryptographic operation on PIN and transaction data.

SRC services

SRC offers pre-evaluation consulting and provides assistance in meeting PCI PTS requirements. As a PCI accredited test laboratory, SRC performs evaluations of all devices listed in the previous section.

Synergy effects are particularly advantageous for you if you have your payment system components evaluated by SRC at the same time in accordance with the requirements of the Deutsche Kreditwirtschaft (DK) or in accordance with Open Standards for Security and Certification (OSeC)/Joint Interpretation Library Terminal Evaluation Methodology Subgroup (JTEMS). The tests are then conducted in such a way that the results can be used for all certification schemes. You will thus benefit from SRC’s broad experience as well as from the long-term cooperation with the various schemes.