Information Technology Total Services, ITTS

Key Features

• Centralized management console
• Monitoring and reporting
• Data discovery and classification
  
  • Risk analysis with data visualization
• Data protection techniques
  
  • Transparent encryption for files, databases and containers
  • Application-layer data protection
  • Format preserving encryption
  • Tokenization with dynamic data masking
  • Static data masking
  • Privileged user access controls
• Centralized enterprise key management
  
  • FIPS 140-2 compliant
  • Unparalleled partner ecosystem of KMIP integrations
  • Multi-cloud key management
  • Database encryption key management (Oracle TDE, big data, MS SQL, SQL Server Always Encrypted, etc.)

• Simplifies deployment in dark data centers
• Delivers high resilience and availability
• Offers the broadest support of card and mobile applications in a timely manner
• Supports performance upgrades without hardware change
• Maintains backwards compatibility with all legacy Thales payment HSMs

Common use cases

• Payment credential issuing – cards, mobile secure elements, wearables, connected devices and host card emulation (HCE) applications
• PIN routing
• Point to point encryption (P2PE)
• Security tokenization (for PCI DSS compliance)
• EMV payment tokenisation
• Card and mobile payment authorization
• POS, mPOS and SPoC key management
• PIN and EMV cryptogram validation
• Remote key loading

Card/mobile payment support

payShield 10K has a comprehensive range of functions that supports the needs of the leading payment brands (American Express, Discover, JCB, Mastercard, UnionPay and Visa) in a number of areas including:

• PIN and card verification functions for all major payment brands
• EMV transaction authorization and messaging 
• Mobile payment transaction authorization and key management
• Remote Key Loading for ATM and POS devices
• Regional/National key management (including Australia, Belgium, Germany and Italy)
• Mastercard On-behalf key management (OBKM) support
• Magnetic stripe and EMV-based data preparation and personalization including mobile provisioning
• PIN generation and printing

• ISO: 9564、10118、11568、13491、16609
• ANSI: X3.92、X9.8、X9.9、X9.17、X9.19、X9.24、X9.31、X9.52、X9.97
• ASC X9 TR-31、X9 TG-3/TR-39
• APACS 40 & 70

What you need to know

Superior Performance

• Meet your high throughput requirements with over 20,000 ECC and 10,000 RSA operations per second for high performance use cases
• Lower latency for improved efficiency

Highest Security & Compliance：

• Keys always remain in FIPS-validated, tamper-evident hardware
• Meet compliance needs for GDPR, eIDAS, HIPAA, PCI-DSS, and more
• De facto standard for the cloud
• Multiple roles for strong separation of duties
• Multi-person MofN with multi-factor authentication for increased security
• Secure audit logging
• High-assurance delivery with secure transport mode
• High quality keys through external Quantum RNG seeding
• Securely backup and duplicate keys in hardware with Luna Backup HSM or to the cloud with Data Protection on Demand for redundancy, reliability and disaster recovery

ITTS offers Thales Digital Identity & Security (DIS) solutions for Banking and payment providing secure documents, robust identity solutions and services that address bank ing programs for ID management and eBanking infrastructures for trusted eServices.

With Thales Gemalto IdCloud you will meet critical security and compliance requirements since it is certified with SOC2 and ISO27001. With a single platform approach the audit and compliance process is simplified with support for the latest privacy and security regulations such as GDPR, CCPA, PSD2 and FFIEC.

Thales Gemalto IdCloud is a suite of cloud-based managed services that enable FIs to combine identity proofing, strong customer authentication (SCA), and risk management to secure onboarding and access to digital banking services and enhance the customer journey - with one single platform.