Secure Payments, PCI DSS, Regulatory Compliance Blog

Council announces Pin Entry Device (PED) approval listings

February 13th, 2008 by admin Posted in PCI PIN, PCI SSC

pcissc.gifOn February 11th, the PCI Security Standards Council announced the availability of the Pin Entry Device (PED) approval listing.

The PED Security Requirements are designed to ensure the security of personal identification number (PIN)-based transactions globally and apply to devices that accept PIN
entry for all PIN-based transactions.  The Council has not only taken over responsibility of the PED Security Requirements, but also now maintains the listing of all approved devices and
supporting documents for device makers seeking to ensure their equipment meets this key standard.  It also provides merchants and service providers with a single source of information
on PED equipment that can be used immediately.

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
  1. 2 Responses to “Council announces Pin Entry Device (PED) approval listings”

  2. By Bruce Sussman on Feb 16, 2008

    It remains to be seen whether the other large debit networks - Star, Pulse, NYCE - will adopt the PED standards in lieu of proprietary, ANSI based standards. This would help achieve uniformity for acquirers, ISOs, and ESOs who need to concern themselves with overlapping standards. Since these networks retain a sizeable piece of the debit marketplace, I hope the PCI Security Council will engage them.

  3. By Pinsecurity on Feb 22, 2008

    The PCI PED standard has gained significant traction in Europe and Asia over the last 3 years or so, and I expect that this will continue. PCI (as in Visa and Mastercard, not the PCI SSC) have actively engaged SEPA in the past to promote the PED stnadards. I do not expect this such promotion to lessen now that the PCI SSC has taken over (especially considering the increased revenue PCI SSC is making from this program).

    Many European and Asian countries now either accept PCI prema-facie or have a ‘PCI+’ system, where they require PCI approval in addition to some small incremental additions relevant to their specific market.

Sorry, comments for this entry are closed at this time.