Milestone for National EFTPOS Terminal Upgrade
Media Statement
30 January 2004
Major Milestone
for National EFTPOS Terminal Upgrade
Statement made by Darryl Roots, Business Development Manager, ETSL
From 2
February 2004 all new terminals connected to the Paymark
Eftpos network will be certified to the Paymark Eftpos 5.0
terminal specification which includes support for the global
EMV/3DES standards.
The new certified terminals represent the first major milestone in the EMV/3DES national EFTPOS terminal upgrade programme that has been planned for some years and is part of a global initiative promoted by the card schemes.
New merchants installing EFTPOS terminals on the Paymark network will be the first on the network to comply with the new global standard. Approximately 1000 new merchants connect terminals each month representing approximately one to two percent of all merchants. There will also be limited exceptions to the 2 February milestone.
Existing EFTPOS terminals will continue to be supported so there is no immediate requirement for merchants to change out their current terminal equipment.
Deadlines for the phasing out of old terminals have been set with a long lead to reduce the impact on merchants, retailers and banks. A minimal number of merchants will be affected this year with banks and terminal vendors working with merchants towards the phased introduction of equipment within the next four to five years.
ETSL has been working with vendors of terminal equipment for some years to ensure the right equipment is available and certified to the new standards.
In January 2003 ETSL officially set the new terminal standards for vendors and in August 2003 certified vendor’s equipment against the new standards.
Ends. Background follows.
For further information and background on the programme please visit the EMV/3DES centre at www.paymark.co.nz for further background, definitions, Q&A, participants and lists of approved equipment.
Or
Brief Background
One global standard - EMV
Because payments processing is a global activity, a common standard, or specification, called EMV (Europay, MasterCard, Visa) has been introduced to allow the global compatibility of chip cards and EFTPOS terminals.
These new cards carry a microchip (most have a magnetic stripe as well). This technology brings some important changes and benefits to cardholders, merchants, credit card companies (such as Visa and MasterCard) and banks.
For the cardholder there is better protection against misuse and fraud, plus, over the long-term, the possibility of new reward schemes and loyalty programmes.
For merchants and banks the major benefits come in the form of improved security features that cut down the potential for fraudulent transactions. The widespread adoption of this technology is likely to lead to a reduction in the number of disputes by providing a new way to check that the card is not counterfeit.
The EMV Advisory Group, was formed in November 2002 by Paymark EFTPOS to implement EMV standards in New Zealand. The primary role of the group is to develop and implement a programme for Paymark EFTPOS owner banks and industry participants. This ensures all participants use the same system and therefore chip cards can be accepted throughout New Zealand.
What is 3DES ?
While implementing the new EMV requirements, Paymark EFTPOS is also taking the opportunity to strengthen security by introducing 3DES to financial transactions made across the Paymark network.
3DES, also known as Triple DES, stands for Triple Data Encryption Standard, which is a strong form of encryption. This provides further protection for cardholder PINs when transmitted over the Paymark network.
DES is an algorithm (a mathematical equation) that is used to encrypt data. The data fed through DES encryption is encrypted once using a secret key. With 3DES, three stages of DES encryption are applied, with separate, secret keys for each stage.
With DES, the key length is 56 bits which means 72 quadrillion possible combinations. With 3DES, three stages of DES are applied, so the key length in 3DES is 168 bits, which means 374 octillion possible combinations, so it's significantly stronger.
Using 3DES will ensure consumers and merchants have the
most up-to-date security available to them when transactions
are made across the Paymark network, further reducing the
chance of fraud.
Further background
Visa and Mastercard’s global EMV mandate requires all of New Zealand’s EFTPOS terminals to be upgraded.
The upgrade will enhance card security for consumers, merchants, retailers, banks and card issuers. It will also assist in reducing credit card fraud, which is on the increase in New Zealand.
The new EMV/3DES standard terminals are safer, more reliable and more secure than ever before.
ETSL has been advising merchants to only purchase EMV standard terminals because terminals that do not meet the EMV standard are being phased out over the long-term.
The card scheme mandates mean that over time all new EFTPOS terminals must be able to support the global EMV standard.
Etsmr007