PCI PIN Trans­action Security (PTS) Requirements

All devices used for Visa, Mastercard, American Express, JCB or Discover payments must meet PCI PTS require­ments and be approved by the PCI Security Standards Council (PCI SSC). The require­ments serve to protect against fraud and ensure the secure entry and trans­mission of PIN and account data. SRC is a PCI Security Standards Council (PCI SSC) accredited evalu­ation laboratory that performs the evalu­ation required for approval.

With PCI PTS version 3.0, all previous security require­ments have been integrated into only two requirement catalogs. A modular set of require­ments is defined for Point of Inter­action (POI) devices. It contains the three previ­ously separate require­ments for POS PIN Entry Devices (PED), Encrypting PIN PEDs (EPP) and Unattended Payment Terminals (UPT). This can also be used to evaluate OEM compo­nents that are built into other devices. These include Encrypting PIN PEDs (EPP), POS PIN Entry Devices (PED), IC Card Readers (ICCR) and Magnetic Stripe Readers (MSR). The ability to certify OEM compo­nents leads to cost savings because they do not have to be recon­sidered when a compound device uses them.

Another set of security require­ments are provided for the Hardware Security Modules (HSM), which perform crypto­graphic opera­tions on PIN and trans­action data.

Services of SRC

SRC offers you advice in the run-up to an evalu­ation and assists you in fulfilling PCI PTS require­ments. As a PCI-accredited evalu­ation laboratory, SRC performs evalu­a­tions of all devices listed in the previous section.

Synergy effects are of particular advantage to you when your payment system compo­nents are simul­ta­ne­ously evaluated by SRC in accor­dance with the require­ments of the German Banking Industry (DK) or the Open Standards for Security and Certi­fi­cation (OSeC)/ Joint Inter­pre­tation Library Terminal Evalu­ation Method­ology Subgroup (JTEMS). The tests are then carried out in such a way that the results can be used for all certi­fi­cation schemes. You benefit from the broad experience of SRC and the long-term cooper­ation with the various schemes.