Section 1: introduction and specifications, Product description, Design objectives – MagTek IPAD99875382 User Manual

Page 7: Securing personal cardholder data, Security and ease of integration by design

Advertising
background image

1

SECTION 1: INTRODUCTION AND SPECIFICATIONS

PRODUCT DESCRIPTION
The IPAD is a secure PIN entry device combined with MagTek’s 3-Track MagneSafe™ secure

card reader. IPAD provides the most comprehensive end-to-end security solution to prevent

personal cardholder data breaches while bringing convenience and speed to Retail and Financial

transactions.

DESIGN OBJECTIVES
Securing Personal Cardholder Data
The IPAD immediately encrypts data at the point of swipe to safeguard personal information

encoded on the magnetic stripe. The encryption takes place within an encapsulated magnetic

read head as the card is swiped, eliminating the chance of intercepting clear text data. The data

is not in the clear for even a few milliseconds. The IPAD’s data encryption scheme uses the

industry standard 3DES algorithm, which offers merchants, processors, issuers, and acquirers the

flexibility to manage decryption services themselves or to outsource, thereby avoiding the risk

imposed by unproven, proprietary encryption algorithms.
Protection for all Points within the Payment Infrastructure
In addition to meeting the requirements established by PCI PED v2.0, the IPAD has

MagnePrint®, a proven embedded security feature that authenticates the debit, credit, or gift card

and its encoded track data, rendering counterfeit or cloned cards useless. So even if cardholder

data is acquired for the purpose of manufacturing counterfeit cards, such cards can be detected,

the transaction can be declined, and the criminal can be prosecuted. This feature provides a

valuable defense to protect the merchant, the acquirer, the processor, the card issuer, and

ultimately the consumer.
Security and Ease of Integration by Design
In addition to securing clear text card data, the IPAD uses a 32-bit secure processor, and has

flexible data formatting and masking capabilities for compatibility with existing software and

payment applications, eliminating the need for recertification.

The IPAD supports Device Authentication so the retailer, processor, and acquirer have the

confidence of knowing that a rogue reader was not substituted and provides transparency to the

processor, acquirer, or ISO if the device is changed. Furthermore, it supports Mutual

Authentication through a secure challenge/response sequence, which eliminates both the

potential of being redirected to an illegitimate site and the ability to substitute a compromised

PINpad terminal.
Greater Flexibility Reduces Total Cost of Ownership
The IPAD supports secure remote key injection, eliminating the need to return the unit in the

event a new key is required.

Advertising