PCI PTS – security standard for PIN-enabled payment terminals
PCI PTS stands for Payment Card Industry PIN Transaction Security. This global security standard applies to payment terminals with PIN input. Certified payment terminals significantly reduce the risk of data theft.
SIX Payment Services only sells payment terminals that meet the PCI PTS security standard. Merchants, for their part, agree to use payment terminals that are certified in line with prevailing PCI PTS standards.
It is the responsibility of the manufacturer to ensure that the payment terminals are PCI PTS certified. The guidelines relate to:
Characteristics of the devices
- Physical security (protection against unauthorized manipulation of the payment terminal)
- Functional security (e.g. undetectable PIN encryption)
Management of the devices
- Security during production of the devices (during manufacture; during transportation of the devices, incl. issuing of encryption keys)