Kiosk Solutions Apr-May 2016 | Page 50

unattended payment and PIN + Contactless set up and bring the benefit of small size. With a reduced footprint, valuable space on a payment kiosk can be released, especially useful as a contactless device is now required. We can expect these type of devices to be ready for market within 2016 once certifications and acquirer accreditions have been completed. Another positive with the new chip and contactless devices is cost. Rather than having to purchase a modular 2 or 3 piece set up with individual prices, the all-in-one device will be less expensive compared to devices used today. These readers will offer a practical and lower cost way to accept contact and contactless cards if your transaction values never exceed £30, it’s possible that in certain markets the £30 limit could be rasied in the future increasing the amount of transactions these devices can process. Point-to-Point Encryption To put it simply, P2PE is the most secure payment process to-date and is the recommended way to protect cardholders from being compromised. Sensitive data is encrypted at the point where the card is read, and is only decrypted once inside the payment 50 KIOSK solutions gateway’s data centre. P2PE card payment uses the same hardware devices as now, but has a special P2PE key injected onto the terminal at a secure key loading facility. At no point in the process is cardholder data available to the host operating system or network. The encryption key that is loaded onto the PIN Entry Device (PED) is a highly sensitive piece of information and it is therefore essential that a ‘Chain of Custody’ is put in place to ensure that throughout the life cycle of the PED it is under the care and responsibility of authorised personnel at every stage, and there is no opportunity