Creditcall's encryption solution attains PCI SSC certification

Cashless payment specialist Creditcall has received certification for a system that protects merchants from card skimming and data breaches.

The Payment Card Industry Security Standards Council (PCI SSC) has certified Creditcall’s ChipDNA Point-to-Point Encryption (P2PE) solution for use in conjunction with PINpads produced by companies such as Ingenico and Verifone.

Encrypted card holder data has no value if stolen, so with P2PE a card holder’s data is encrypted at the point of entry and remains unreadable until it reaches Creditcall’s payment gateway, which provides a secure decryption environment.

ChipDNA is an omni-channel, EMV-ready payment gateway solution for mobile, online, and in-store card payment acceptance. It is aimed at web and app developers and can be integrated into Android and iOS based mobile POS (mPOS) payment solutions as well as Windows and Linux semi-integrated environments. It incorporates a reporting and management tool as well as a terminal management system (TMS) for real-time PINpad updates.

Creditcall’s ChipDNA PCI P2PE certification covers multiple EMV chip card payment terminals including the Ingenico iPP350 and Verifone VX 820 for attended card payment processing, often used in retail and hospitality, and the Verifone UX for unattended applications such as parking, vending or transportation environments.

The ability to support a number of devices was made possible by collaborative working between Creditcall and the manufacturers’ distribution partners Hemisphere West Europe and Secure Retail. Both distributors participated in the qualification process.

“Since 2005, Creditcall has been a supporter of strong encryption technology to secure cardholder data in transit and has invested heavily in the decryption technology required to support P2PE to the level mandated by PCI SSC,” said Jeremey Gumbley, Creditcall’s chief technical officer.

“We already support a PCI-validated P2PE solution with Cubic Transportation Systems. To have our own PCI-validated P2PE solution is an accomplishment we are extremely proud of and we look forward to offering this to both new and existing customers where they can instantly benefit from the highest level of card holder protection available.”