Thales secures mobile point-of-sale solution for Kashing, UK-based payments provider
Blogs on 27th April 2019
PayShield hardware security modules help Kashing empower independent companies, meet PCI DSS compliance
San Jose, CALIF. – 08 December 2017 – Thales, a leader in critical information systems, cybersecurity and data security, announces Kashing Ltd., a provider of digital payment services for independent merchants, is deploying the Thales payShield 9000 hardware security module (HSM) to secure its online e-commerce and mPOS (mobile point of sale) card reader.
Using Thales HSMs to support end-to-end encryption of the payment data, Kashing developed a highly secure mPOS solution that allows merchants of all sizes to accept face-to-face, telephonic and (in the case of the popular tourist attraction King Arthur’s Labyrinth) online card payments. With the payShield 9000, Kashing also fulfills the Payment Card Industry Data Security Standard (PCI DSS) compliance requirements for the processing, storage, and transmission of account data.
Designed specifically for payment applications, payShield 9000 secures devices running card issuing and payment processing applications. Its hardened, tamper-resistant platform provides the cryptographic protection required for ATM, POS, credit and debit card issuance, and processing.
To safeguard the integrity of each transaction, Kashing created an architecture with payShield 9000 that utilizes point-to-point encryption of all sensitive information. The payer, payee and all transaction details remain protected from the original point-of-sale through to back-end processing.
In addition to its encryption capabilities, payShield 9000 also enabled Kashing to:
• Attain PCI DSS compliance and achieve a qualified security assessor (QSA) designation from the PCI Security Standards Council
• Pursue aggressive growth targets unhindered by security concerns
• Access comprehensive remote administration and development capaibilities
• Offer security transparency to a customer base possessing minimal technical knowledge
Gert Horne, CSO and co-founder, Kashing says:
“Thales has been extremely instrumental in Kashing attaining PCI DSS compliance. The ability to perform end-to-end encryption and key management across all in-motion and at-rest data addresses significant components of the standard. Throughout our evaluation period we were continually impressed by the performance of the payShield HSM and the excellent technical support we received. From many perspectives – especially any involving integrity, availability, scalability and quality of service – Thales inspires us in the design and creation of our own environment.”
Peter Galvin, VP of Strategy at Thales eSecurity says:
“As the payments industry continues to evolve to encompass innovative mobile commerce solutions, so must the security technologies protecting it. As a payment technology leader, Thales is working with innovators such as Kashing to deliver the same high levels of security to the mobile world as have become commonplace in the traditional in-store fixed terminal environment.”
Find out more about how Thales is helping Kashing by reading the case study [link to case study]
For industry insight and views on the latest data security trends check out our blog. You can follow Thales eSecurity on Twitter, LinkedIn, Facebook and YouTube.
About Thales eSecurity
Thales eSecurity is the leader in advanced data security solutions and services that deliver trust wherever information is created, shared or stored. We ensure that the data belonging to companies and government entities is both secure and trusted in any environment – on-premises, in the cloud, in data centres or big data environments – without sacrificing business agility. Security doesn’t just reduce risk, it’s an enabler of the digital initiatives that now permeate our daily lives – digital money, e-identities, healthcare, connected cars and, with the internet of things (IoT), even household devices. Thales provides everything an organisation needs to protect and manage its data, identities and intellectual property, and meet regulatory compliance – through encryption, advanced key management, tokenisation, and privileged-user control and high-assurance solutions. Security professionals around the globe rely on Thales to confidently accelerate their organisation’s digital transformation. Thales eSecurity is part of Thales Group.
Industry insight and views on the latest key management trends can be found on the Thales eSecurity blog at blog.thalesesecurity.com.
Follow Thales eSecurity on Twitter @Thalesesecurity, and on LinkedIn, Facebook and YouTube.
Thales is a global technology leader for the Aerospace, Transport, Defence and Security markets. With 64,000 employees in 56 countries, Thales reported sales of €14.9 billion in 2016. With over 25,000 engineers and researchers, Thales has a unique capability to design and deploy equipment, systems and services to meet the most complex security requirements. Its exceptional international footprint allows it to work closely with its customers all over the world.
Positioned as a value-added systems integrator, equipment supplier and service provider, Thales is one of Europe’s leading players in the security market. The Group’s security teams work with government agencies, local authorities and enterprise customers to develop and deploy integrated, resilient solutions to protect citizens, sensitive data and critical infrastructure.
Thales offers world-class cryptographic capabilities and is a global leader in cybersecurity solutions for defence, government, critical infrastructure providers, telecom companies, industry and the financial services sector. With a value proposition addressing the entire data security chain, Thales offers a comprehensive range of services and solutions ranging from security consulting, data protection, digital trust management and design, development, integration, certification and security maintenance of cybersecured systems, to cyberthreat management, intrusion detection and security supervision through cybersecurity Operation Centres in France, the United Kingdom, The Netherlands and Hong Kong.