andrewj
07-01-2008, 01:37 PM
In a press release on the 30th June (https://www.pcisecuritystandards.org/pdfs/06-30-08.pdf), the PCI SSC has announced the UPT and HSM approval programs.
These programs will cover the security of Unattended Payment Terminals (UPTs) such as ticketing/vending machines, pay-at-pump terminals, and any other such device that accepts a PIN without an attendant present.
The HSM requirements cover the security of Hardware Security Modules that perform cryptographic operations in Acquirer, Issuer, and switch environments.
The evaluation process for either standard can be performed by any of the existing PCI PED labs, and the drafts of the standards themselves will be released to Participating Organisations within the next 3-4 months.
These programs will cover the security of Unattended Payment Terminals (UPTs) such as ticketing/vending machines, pay-at-pump terminals, and any other such device that accepts a PIN without an attendant present.
The HSM requirements cover the security of Hardware Security Modules that perform cryptographic operations in Acquirer, Issuer, and switch environments.
The evaluation process for either standard can be performed by any of the existing PCI PED labs, and the drafts of the standards themselves will be released to Participating Organisations within the next 3-4 months.