Freely subscribe to our NEWSLETTER

Terminal vendor Secure Electrans participated in a pilot scheme developed by OSeC, who aims to provide a method to meet SEPA security requirements using Common Criteria. UL performed the security evaluation of Secure Electrans’ HomePay 100 Series product, a fully compliant EMV Chip & PIN terminal used in the Secure Electrans system to make payments to online merchants with a customer’s existing Chip & PIN bank card. UL is excited to be able to take part in this new initiative since they have been able to deliver the first fully compliant certification against the JTEMS CAS POI Protection Profile.

The OSeC initiative seeks to reduce the cost of multiple country approvals for payment terminals by just using a single evaluation. It is promoted by major governing European Approval Bodies. These include the British UK Cards Association, German GBIC, French GIE CB and Currence from the Netherlands. OSeC additionally includes the global card schemes who acknowledge the developing Common Criteria evaluation work through their PCI and security activities. The UK already mandates the use of Common Criteria and Germany accepts the use of it to assure security in their respective countries.

Regine Quentmeier of SRC in Bonn, representing GBIC and acting as the project coordinator in OSeC, assesses the OSeC project as a very promising initiative for all card schemes. It provides, for the first time, a complete and systematic security evaluation of POI. First feedback shows that this is especially appreciated by the vendors and, crucially, it contributes to reduce the risk taken by the Approval Bodies.