February 24, 2009
Shift4’s listed on PA-DSS list of Validated Payment Applications
Las Vegas, Nevada (February 24, 2009) – Shift4 Corporation, a supplier of secure payment processing services, has received validation from the Payment Card Industry Security Standards Council™ for compliance of 4Go with SafeSwipe™ and Enhanced Micros Drivers with the Payment Application Data Security Standard (PA-DSS).
PA-DSS is a PCI Council-managed program that can help software vendors develop secure payment applications and ensure their payment applications are compliant with Payment Card Industry Data Security Standards (PCI DSS). Shift4’s 4Go™ and enhanced interface drivers for Micros 3700, 8700 and 9700 Point-of-Sale (POS) systems are Payment Application Best Practices (PABP) validated and grandfathered under the PA-DSS.
Shift4’s DOLLARS ON THE NET® payment gateway is fully integrated with Card Information Replacement Technologysm (CIRT), which includes Tokenization and 4Go. 4Go never allows real Cardholder Data (CHD) to enter the merchant’s POS/PMS system. Therefore, it is never processed, stored, or transmitted by the merchant’s system.
Shift4’s enhanced Micros drivers use Tokenization technology to protect stored data by replacing real CHD in the files and logs of the POS with a random alphanumeric “Token.” This means that if a Shift4 driver is installed on an older, non-compliant legacy system, the Shift4 driver makes that system secure and brings it into compliance without the cost of replacing or upgrading the system. If the Shift4 driver is installed on a newer, compliant version, the system will be even more secure because all usable CHD is removed.
Through the use of Shift4’s solutions, sensitive CHD, such as full magnetic stripe, CVV2 or PIN data, is prevented from ever even entering the merchant’s system. CHD is instead intercepted before entering the system and transported through secured data channels to Shift4’s PCI compliant data centers for secure storage. False CHD is then returned to the underlying POS/PMS and used in place of the actual CHD for the transaction.
“Merchants using DOLLARS ON THE NET with Tokenization and 4Go can rest assured they are in fact using a validated payment application that provides Real Security. We are proud to offer our customers a cost-effective, enterprise-wide solution for current and legacy applications that complies with PA-DSS and help simplify PCI compliance,” stated Dave Oder, President and CEO, Shift4 Corporation.