SafeNet ProtectHost EFT
Hardware Security Module

Overview

• Strong EMV support
• Increased PIN and key mailer security with PIN and custodian key data printed directly to the mailer stationary
• Ability to produce postscript PIN mailers on a laser printer
• Up to 1200 Visa PIN Verify (PVV) operations per second, which provides for faster and more efficient transactions
• Secure key transfer with existing SafeNet ProtectHost White device
• FIPS 140-2 Level 3 certification (in process)

The SafeNet ProtectHost EFT (PH EFT) is a stand alone Hardware Security Module (HSM) designed for retail Electronic Funds Transfer (EFT) payment system processing environments for credit, debit, chip card and internet applications. It offers general purpose cryptographic processing, key storage and generation, and PIN generation and verification.

Solutions

SafeNet ProtectHost EFT is designed for EFT and payment system processing environments, providing powerful end-to-end security for online banking transactions and applications for credit, debit, and chip cards. Unlike traditional online applications that use SSL, PH EFT encrypts data at the client browsers and decrypts at the host, so the transaction remains secure from point of entry thru processing and authentication.

Product Highlights

• Most Secure
  SafeNet ProtectHost EFT provides FIPS 140 (in process) certified physical and logical protection to cryptographic keys preventing unauthorized access to highly sensitive information. Tamper-resistant secure casing and tamper-responsive circuitry trigger automatic cryptographic key erasure upon tamper detection. In addition, SafeNet PH EFT ATM Key Management System provides key mailer security by allowing the custodian key data to print directly to secure key envelopes; it also allows for automatic ATM key distribution and initialization. Likewise, the PH EFT Pin Mailer System allows for printing of the Pins directly to secure PIN envelopes. SafeNet PH EFT also offers true end-to-end internet and mobile transaction security. All transactions are RSA encrypted from the client to the host, and Java applet at client browser or phone.
• Extensive APIs, Command Sets and Customization
  The SafeNet PH EFT provides command set support for a wide variety of clients. The Mark II command set provides the functionality required by the vast majority of Issuing and Acquiring banks, payment processors and ATM systems. The CI (Card Issuing) command set provides functionality for the Card Issuers especially those with Chip Card/EMV requirements. The AMB (Australian Major Bank) command set is designed to suit the Australian market and supports the APCA interface standards.
  
  SafeNet works closely with customers to extend its standard EFT and Payments products to incorporate customer-defined functionality. The PH EFT allows for custom functionality to be readily implemented in support of non-standard EFT systems including electronic purse, mobile banking, and gaming. The PH EFT uses proprietary cryptographic methods: Issuer PIN management.
• Easy Management
  The regular task of configuring and managing cryptographic and key component settings often executed through a command line interface is simplified in the PH EFT through the use of an easy to use Graphic User Interface (GUI). A well structured menu-based navigation system, coupled with intuitive dialog box interaction, reduces the risk of manual input errors and speeds up the administrative process.