Home > Support > Bloombase Knowledgebase
Overview
SupPortal
Knowledgebase

Bloombase Knowledgebase


Search:    
Browse by category:
Knowledgebase / Software / How Bloombase helps enterprises achieve Payment Card Industry Data Security Standard (PCI DSS)?

How Bloombase helps enterprises achieve Payment Card Industry Data Security Standard (PCI DSS)?
Rating: rating
Views: 3,082
Votes: 29
Payment Card Industry Data Security Standard (or PCI DSS in short) was developed by credit card companies including Visa, MasterCard, American Express, Discover and JCB, etc as a guideline to help merchants and transaction processing companies to prevent credit card fraud, cracking and various other security vulnerabilities and threats.

Any company which processes, stores, exchanges payment card data must be PCI DSS compliant, otherwise, they risk losing their ability to process credit card payments and being audited and fined.

Version 1.1 of PCI DSS describes 12 requirements that merchants and credit card processing companies need to comply to where Primary Account Number (PAN) has to be securely protected stored and transmitted.

Requirement 3 - Protect Stored Cardholder Data


3.4 Render PAN, at minimum, unreadable anywhere it is stored (including data on portable digital media, backup media, in logs, and data received from or stored by wireless networks) by using any of the following approaches:
• Strong one-way hash functions (hashed indexes)
• Truncation
• Index tokens and pads (pads must be securely stored)
• Strong cryptography with associated key management processes and procedures.
The MINIMUM account information that must be rendered unreadable is the PAN.

3.5 Protect encryption keys used for encryption of cardholder data against both disclosure and misuse.

Requirement 4 - Encrypt transmission of cardholder data across open, public networks


4.1 Use strong cryptography and security protocols such as secure sockets layer (SSL) / transport layer security (TLS) and Internet protocol security (IPSEC) to safeguard sensitive cardholder data during transmission over open, public networks.

Bloombase Solution


Bloombase created Bloombase security platform to address compliance requirements suggested by PCI DSS to ensure true privacy of credit cardholder information. Bloombase security servers protect encryption and digital signing keys inside hardware security module (HSM) from disclosure and duplication. Bloombase servers encrypt data with NIST certified AES, 3DES and DES cryptographic algorithms and create digital signatures to assure data integrity by international standards including Public Key Infrastructure (PKI), X.509 digital certificates and W3C XML digital signature.
Others in this Category
document What is the Internet Assigned Numbers Authority (IANA) enterprise ID assignment for Bloombase?
document What are the Apple Bundle IDs assigned to Bloombase?
document What are the Institute of Electrical and Electronics Engineers (IEEE) IDs assigned to Bloombase?
document What is the vendor ID assigned for Bloombase by Peripheral Component Interconnect Special Interest Group (PCI-SIG)?
document What Post-Quantum Cryptography (PQC) cipher algorithms are supported by the Bloombase products
document What are the list of certifications achieved by Bloombase Cryptographic Module?
document Why choose Bloombase Security Platform instead of peer solutions?
document How Bloombase Security Platform keeps up with ever-changing cryptographic and algorithmic advances?
document What is the InterNational Committee for Information Technology Standards (INCITS) T10 Vendor ID for Bloombase?
document Bloombase OS, CLI Console and Web Management Console Passwords
document The National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) 140-2 Security Policy and Certificate for Bloombase Cryptographic Module
document Bloombase Cryptographic Module SHA Validation
document Bloombase Cryptographic Module NIST RSA Validation
document Bloombase Cryptographic Module RNG Validation
document Bloombase Cryptographic Module Keyed-Hash Message Authentication Code (HMAC) Validation
document Bloombase Cryptographic Module Advanced Encryption Standard (AES) Validation
document How Bloombase audit trail logs are structured?
document How Bloombase helps enterprises achieve Sarbanes-Oxley (SOX)?
document How Bloombase helps to achieve Gramm-Leach-Bliley Act (GLBA)?
document How Bloombase helps customers achieve Personal Data Privacy Ordinance (PDPO) of Hong Kong?
document How Bloombase helps to achieve various IT security regulatory compliance requirements of Hong Kong Government?
document Bloombase KeyCastle Security Server Product Roadmap
document "Too low max_hw_sectors" on StoreSafe SAN
Privacy | Terms of Use | Contact Us | Sitemap
Copyright © Bloombase. All rights reserved.