Company News • 20.01.2016

How secure is your mobile POS?

The preferred approach is semi-integrated

Photo: How secure is your mobile POS?
Source: APG Cash Drawer

One of the most common questions regarding the use of tablets and smartphones in mobile POS systems is, “How secure are they?” The answer depends on the installation.

The PCI (Payment Card Industry) list of validated applications so far does not include Apple’s iOS or Google’s Android mobile systems, but that doesn’t mean securing these systems is impossible. Participants in a panel discussion moderated by Stephen Bergeron, APG’s Vice President of Global Marketing, at RetailNOW in early August discussed the various approaches to protecting POS data in smartphones and tablets.

One of the biggest sticking points is the potential for hacking when transaction data first enters the smartphone or tablet. Anytime data is added to a mobile device in a POS system, just about any app on the device potentially can access the data, said Adam Perella, Manager with 403 Labs, the Security & Compliance division of Sikich LLP. Even if the device itself automatically encrypts the data, there’s a moment when the data is in clear text and, as such, at risk.

How secure that data is depends on the lengths to which the POS system’s developers went to prevent prolonged exposure of transaction data once it enters the device. Perella urged VARs to research a solution’s security before recommending it to customers. If the solution hasn’t been validated against the Payment Application Data Security Standard (PA-DSS) by a Payment Application Qualified Security Assessor (PA-QSA), it’s best to stay clear of it.

Supplier
Logo: APG Cash Drawer

APG Cash Drawer

4 The Drove
BN9 0LA Newhaven
UK
Photo: How secure is your mobile POS?
Source: APG Cash Drawer

Eric Lecesne, Vice President of Product Management at identification products maker ID Tech, said the best way to secure transaction data is to encrypt it before it gets to the mobile device. To strengthen protection, he said, you can add a layer of what he called “active security” – a mechanism to erase any data in the device should someone ever try to break into it.

David Gosman, Senior Vice President at payment card processor Heartland Payment Systems, pointed out the need for securing the point-of-sale system with tools such as antivirus and only using POS software that is PA-DSS validated. Beyond that, Gosman said how you set up the POS system also has an effect on security. He listed three basic approaches – integrated, non-integrated, and semi-integrated.

The most popular approach is integrated, which routes the data into the POS system, regardless of whether it’s encrypted, and the system processes card payments. Non-integrated systems separate the POS from the card payment processing device. “It’s not really a great customer experience, because you ring it up here, and then you’ve got to type in the dollar amount there on the second terminal. That’s not so good.”

The preferred approach is semi-integrated, “which means that the POS is driving the actual transaction, but all the transaction data is going directly from your payment device right up to your processor,” Gosman said. “What that means is that your POS software never gets access or visibility to the credit card data, encrypted or not.” Encryption is recommended in all cases, but all things being equal, the semi-integrated approach is the most secure method to process integrated payments.

Perella endorsed the idea of network segmentation to prevent breaches. “We encourage resellers, or anybody who’s going to be installing these devices, to look at how the devices are connected and to segment them, if possible, so that a POS system talking to the back of house server can’t talk to the computer employees use to surf the Internet.”

There was a lot of good food for thought during the panel discussion. Anyone installing mobile POS systems should heed the advice of these experts to ensure their customers’ POS systems are safe.

Source: APG Cash Drawer

related articles:

popular articles:

Thumbnail-Photo: APG announces the hiring of Mr. Paul Griffiths as its new president and...
09.08.2019   #cash management #cash drawers

APG announces the hiring of Mr. Paul Griffiths as its new president and CEO

Global cash management solution manufacturer welcomes its new president & CEO Paul Griffiths

APG Cash Drawer, a global manufacturer of cash management solutions announces the hiring of Mr. Paul Griffiths as its President and CEO. Most recently, Mr. Griffiths was the CEO of Birchwood Casey, a sporting goods company working with large ...

Thumbnail-Photo: Online inventory management system
06.05.2019   #online trading #e-commerce

Online inventory management system

5 things e-commerce retailers should look for

In order to perform online efficiently as an Internet retailer, one needs to choose the most effective inventory management system. Its main features should include centralised user interface, full automation, automated stock checking and ...

Thumbnail-Photo: Improving performance with video training
19.06.2019   #personnel management #video

Improving performance with video training

Video tutorials for inventory management or customer service excellence

Smart Retail Solutions (SRS) has announced their ProfitTrax Platform is now including Best Practice Video Training in its Advanced Analytics Suite. Their team has successfully implemented the update because they believe the key to profit improvement ...

Thumbnail-Photo: When the product becomes the POS
19.08.2019   #mobile payment #pos systems

When the product becomes the POS

“Mobile-first” or the future of the Point of Sale

The classic Point of Sale means physical sales areas including a terminal, cash systems and queues. But this traditional image is changing. Nowadays many customers in brick-and-mortar retail outlets expect the same experience as online and require ...

Thumbnail-Photo: Silver Surfers: Older adults ride the wave of mobile technology and shop...
01.08.2019   #online trading #e-commerce

Silver Surfers: Older adults ride the wave of mobile technology and shop online

The increasing importance of e-commerce for senior citizens

You are wrong if you think it’s mostly young people who spend time online. Older adults are also increasingly embracing online shopping with enthusiasm.In this interview, Spencer Hinzen, Director of Sales, Central Region, Ruckus Networks, ...

Thumbnail-Photo: Innovative ICA store triples revenue
22.08.2019   #electronic shelf labels (ESL) #price labelling

Innovative ICA store triples revenue

Automatic price updates and product information at the shelf

Since ICA merchant, Jan Sikström, took over the ICA Ettan store in Sundsvall (Sweden) in 2016, he has almost tripled the turnover from SEK 15 million to SEK 40 million. Today, the store has 15 employees and approximately 5,000 different items ...

Thumbnail-Photo: New innovative hybrid POS solution for small businesses...
20.05.2019   #pos systems #cashpoints

New innovative hybrid POS solution for small businesses

Posiflex presents a new innovative Hybrid POS solution for small businesses

The Retail market is always evolving, and so is Posiflex. Posiflex continually stays attached to the market and identifies ahead what the market really needs. Posiflex is honored to present its latest innovative Hybrid POS solution, WT-3007A, to the ...

Thumbnail-Photo: Well cooled shopping entertainment, please!
15.07.2019   #refrigeration cabinets #refrigerated counters

Well cooled shopping entertainment, please!

What about modern refrigeration technology?

Pierluigi Schiesaro and Gian Paolo Di Marco from Arneg, a company focusing on food service equipments, talk about refrigeration systems as "shopping entertainment".They also tell us what sustainable refrigeration could look like and why ...

Thumbnail-Photo: Digital Signage Summit Europe - 30 % discount...
07.06.2019   #customer analysis #marketing

Digital Signage Summit Europe - 30 % discount

Many of the world’s foremost digital signage experts, thought leaders and leading technology and service suppliers will come together to present a unique mix of keynotes, conference channels, awards and exhibition showcase.

Now in its 14th year, DSS Europe is the leading European strategy event exploring the business and technology of Digital Signage and DooH - here is a 30% code for our readers – 415839The theme of this year’s conference is ‘Customer ...

Thumbnail-Photo: Changing markets: embracing disruption to harvest opportunity...
18.06.2019   #digitization #event

Changing markets: embracing disruption to harvest opportunity

Reporting from the first annual Retail & Brand Experience World Congress in Barcelona

More than 200 industry insiders highlighted the many challenges facing the retail sector today in interesting talks and lectures.Topics included the customer experience, the use of technologies, digital media, omnichannel strategies, personalization ...

Supplier

Delfi Technologies GmbH
Delfi Technologies GmbH
Landgraben 75
24232 Schönkirchen
APG Cash Drawer
APG Cash Drawer
4 The Drove
BN9 0LA Newhaven