Utimaco Safeware on April 23 plans to launch new security technology that uses open development techniques to protect parts of payment transactions.
Utimaco, a German-based division of the security software company Sophos, will offer the Public Payment Program, a freely available payment hardware security module (HSM) system with an application programming interface (API). Hardware security modules manage digital keys and are an important part of authentication and data encryption. The API is designed to enable deployment with less upfront work and more flexible costs. It's also designed to be scalable as volume and security needs change. Utimaco is selling an alternative to fixed HSMs, which the company says require more work to update.
"We've realized that an open interface for payment HSM is necessary for being able to perform precise adaptations quickly. At the same time, planning security, in terms of total cost of ownership, is emphasized, from the very first test to ongoing operation. After all, users also expect integration support on-site from payment specialists," said Andreas Philipp, head of sales for SafeGuard CryptoServer at Utimaco, in a release.
As part of the service, Utimaco will also refer payment specialists that have experience with the API and security tech.
Utimaco is hoping to reach payments companies that are anxious to enhance authentication to keep up with PCI data security guidance changes and improve protection of card data. Recent Aite research also suggests growing adoption of data protection methods such as 3D Secure.