Global | Change

Verifone Extends End-to-End Encryption Across Product Lines

Card Data Encryption Now Reaches Even Level 4 Retailers as VeriShield Protect Encompasses V<sup>x</sup> Solutions, Managed Services and PAYware Server Software April 20, 2009 San Jose, CA

(ETA Booth #219) - Verifone Holdings, Inc. (NYSE: PAY), today announced it has extended its VeriShield Protect solution to provide end-to-end encryption capabilities across multiple product lines, including Vx Solutions, PAYware Transact, and as a managed service. Verifone also announced a new secure magstripe reader that connects to electronic cash registers (ECRs) and PCs.

Initially introduced for retail chains utilizing the MX800 Series line of multilane customer-facing systems, VeriShield Protect can now be deployed to virtually any environment, from small merchant countertops to mobile use. Also, to enable quick and effective deployment, backend decryption and device security monitoring is now available as a managed service from Verifone.

VeriShield Protect is an advanced end-to-end encryption solution that eliminates usable cardholder data from POS applications, networks and servers, using AES-level encryption that preserves existing card track data formats so it works transparently with retailers’ and acquirers’ existing payment infrastructure.

“Verifone was first to introduce true hardware-fortified end-to-end encryption of cardholder information and is now first to provide it across multiple product lines, serving virtually all merchant segments,” said Paul Rasori, Verifone senior vice president, marketing. “Our exclusive format-preserving encryption makes it possible for retailers and acquirers of all sizes to deploy the highest possible security in a seamless manner.”

VeriShield Protect now enables acquirers and ISOs to readily monitor and verify compliance within their base of Level 4 retailers, which have been the target of 80 percent of identified card data compromises in recent years. In addition to encrypting card data, VeriShield Protect monitors all systems in real time at the device level via VeriShield Secure Device Management Service (VSDMS), so if a breach occurred the retailer or acquirer would be immediately alerted. In addition, data encryption keys can be managed remotely as part of the device management service.

With end-to-end encryption, retailers are more easily able to ensure their systems do not store usable cardholder data, therefore protecting the integrity of card data even in the event of a breach. Because the format of the card data is preserved following encryption there is no need to decrypt the data as it flows through a retailer’s systems, or to redesign the POS applications to deal with a new data format. Should someone breach the retailer’s system, any stolen data would be unusable.

VeriShield Protect can now be made available across a multitude of vertical markets and retailer environments that utilize the Vx Solutions line. In addition, with Verifone’s managed service, resellers and retailers can bring VeriShield Protect to market quickly via an easy-to-use payment gateway that is certified by the major processing networks. Supporting dial, IP and wireless transactions, the payment gateway provides resellers and merchants with added benefits of transaction consolidation, reporting and monitoring.

The new secure magstripe reader provides yet another option for retailers, integrating VeriShield Protect in a slim form factor that can be connected to PC or ECR POS environments via USB port. Using the new reader, retailers can ensure immediate card encryption as the card is swiped, eliminating the potential for PCs and ECRs to store any usable data.

VeriShield Protect will also be available by midsummer on PAYware Transact, Verifone’s customizable and highly scalable and customer-hosted payment solution that supports high-volume, enterprise level transaction processing for merchants and card not present businesses of any size.

“Recently publicized incidents have demonstrated that PCI DSS compliance is very difficult to maintain on an ongoing basis,” said Rasori. “True end-to-end data encryption is the only sure way to protect the integrity of the card processing system. With VeriShield Protect, retailers can be assured that the data is protected from the instant it enters their system, until it exits at a secure point of decryption.”

Additional Resources:

About Verifone Holdings, Inc. (
Verifone Holdings, Inc. (“Verifone”) (NYSE: PAY) is the global leader in secure electronic payment solutions. Verifone provides expertise, solutions and services that add value to the point of sale with merchant-operated, consumer-facing and self-service payment systems for the financial, retail, hospitality, petroleum, government and healthcare vertical markets. Verifone solutions are designed to meet the needs of merchants, processors and acquirers in developed and emerging economies worldwide.

Safe Harbor Statement under the Private Securities Litigation Reform Act of 1995 for Verifone Holdings, Inc.:
This press release includes certain forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. These statements are based on management's current expectations or beliefs and are subject to uncertainty and changes in circumstances. Actual results may vary materially from those expressed or implied by the forward-looking statements herein due to changes in economic, business, competitive, technological and/or regulatory factors, and other risks and uncertainties affecting the operation of the business of Verifone Holdings, Inc. These risks and uncertainties include: our ability to successfully manufacture, distribute, market and sell the MX880 and related software applications, our customers' acceptance and adoption of our newly released products and applications, our ability to protect against fraud, the status of our relationship with and condition of third parties upon whom we rely in the conduct of our business, our dependence on a limited number of customers, uncertainties related to the conduct of our business internationally, our dependence on a limited number of key employees, short product cycles, rapidly changing technologies and maintaining competitive leadership position with respect to our payment solution offerings. For a further list and description of such risks and uncertainties, see our filings with the Securities and Exchange Commission, including our annual report on Form 10-K and our quarterly reports on Form 10-Q. Verifone is under no obligation to, and expressly disclaims any obligation to, update or alter its forward-looking statements, whether as a result of new information, future events, changes in assumptions or otherwise.

Editorial Contact:
Pete Bartolik
Verifone Media Relations
Tel: 508-283-4112