YES-wallet.com launched its Pouch free Mobile and web Wallet Service, which will also support NFC based payments. With 71% currently exploring, evaluating and considering the idea of implementing wallet services in the upcoming years, YES-wallet.com took this opportunity to introduce its new Pouch mobile application, now downloadable on all major smartphones. Anyone can register and create a free personal wallet on the BlackBerry from BlackBerry App World, iPhone from iTunes and Android from Android Market.
Digital security provider Gemalto has partnered with mChek, a provider
of mobile security, banking and payment applications, to
bolster the range and choice of secured mobile banking solutions
available on Gemalto SIM cards to markets in South Asia. Since
September 2008, Gemalto and mChek have successfully deployed a
broad range of mobile banking services with telecom operators in India
and Sri Lanka on millions of SIM cards. This includes a mobile top-up
service where its customers can recharge anywhere, anytime for
themselves or others. mChek enables a broad range of services,
banking, two-factor authentication, secure message delivery,
cross-border and domestic money transfer and mobile payments using SVA
wallets, direct debit and credit/debit card support.
Reportlinker.com has released the “China Financial POS Machine Market Report 2008”. According to
China UnionPay, by the end of June 2008, China had 152
card-issuing institutions with the total issue of over 1.6 billion
cards; and 930,000 merchants accepted Unionpay cards, 1.45 million
financial POS machines and 140,000 ATMs and by the end of Sep 2008, China had over 1.6 million financial POS
machines, about 150,000 ATMs and over 1 million merchants accepted
Source code analysis Ounce Labs has appointed Jack Danahy, co-founder and CTO, to the board of directors of the Payment Card Industry Security Vendor Alliance. Board members of PCI SVA will collaborate with the retail and payment card industries to develop the most efficient, yet technically secure means
for merchants to meet Payment Card Industry Data Security Standard (PCI
DSS) requirements. Currently, there are no organizations assisting
merchants that are capable of meeting the solutions for PCI DSS 1.2
compliance. The board will work in concert with PCI SVA’s newly-formed
Technical and Validation committees to provide merchants with hands-on
tools to assist them in addressing the security aspects of PCI DSS version 1.2. Danahy is a frequent speaker and writer on information security topics and has been a contributor to the U.S. Army War College, the Center on Law, Ethics and National Security, and the House Subcommittee on Information Technology. He will play a pivotal role in promoting strategies and the business benefits of PCI DSS compliance.
Security solution provider Symark International has joined the PCI Security Vendor Alliance at the “Platinum” level. Symark is the developer of the “PowerSeries” information security solutions for managing privileged account access. Symark’s solutions help organizations meet the specific requirements laid out in several sections of the PCI standard, including: Section 2 (vendor-supplied system passwords and other security parameters cannot be used as defaults), Section 7 (access to data must be restricted based on role within the business) and Section 8 (a unique ID must be assigned to each employee with access to the network).
Event data warehouse solution provider SenSage has joined the PCI Security Vendor Alliance. SenSage’s EDW solution uses agent-less technology to collect data from any source where cardholder data exists or may be accessed. This includes network infrastructure devices, servers, applications, mainframes and the databases that store cardholder data. SenSage stores the data in a columnar database, and provides real-time alerts and transforms this data through built-in log data analysis. The SenSage for PCI DSS Compliance analytics package provides organizations with this actionable intelligence mapped to the specific PCI DSS requirements, addressing not only Requirement 10 but providing numerous reports aimed at addressing other PCI requirements. SenSage’s solution supports the breadth of log data sources where cardholder data exists and has the ability to store the data online for years.
The Payment Card Industry Security Vendor Alliance has added eleven new members; ArcSight, BOSaNOVA, CallCopy, Compliance Spectrum, GigaFin Networks, NetClarity, Princeton Softech, an IBM company, TELUS Security Solutions, United Security Providers, and Solidcore, and Ounce Labs.
SmartPay Jieyin has been granted National Information Security
Certification from China Information Technology Security Certification
Center (CNITSEC) after passing a systematic evaluation, test and
inspection conducted by the authority. The CNITSEC is the government
authority that oversees security management, security engineering, security
technology and IT security certification responsibilities to ensure service
quality and security management throughout China. SmartPay services are
extended to merchants of mobile top-up, e-ticketing, utility bills, mobile
lottery and digital products and has been refining its secure payment
New research shows that less than half of all affected businesses will be able to meet that PCI DSS deadline set for June 30th. The Payment Card Industry Security Vendor Alliance says fines of up to $500,000 and loss of the ability to accept credit cards — apparently haven’t been enough to get affected businesses to take security seriously. All organizations that store, process or transmit credit card payments are required to demonstrate compliance with the Payment Card Industry Data Security Standard by this weekend. PCI SVA noted that card companies have recently indicated that they’ll be willing to accept risk mitigation plans in lieu of full compliance, since so many businesses will fail to meet the deadline.
The Payment Card Industry Security Vendor Alliance has twelve new members that include ADTRAN, AirMagnet, Compliance Security Partners, Compuware, Control Path, Envision Inc., GSI Hosting, Ounce Labs, Patrick Townsend & Associates, Tripwire, Unified Compliance Framework, and Visonys AG. PCI SVA members, all with strong experience in delivering PCI compliance solutions to thousands of customers, will leverage their combined knowledge to support the objectives of the PCI Security Standards Council. PCI SVA’s founding members are ConfigureSoft, Inc., Cyber-Ark, Inc., Modulo Security, Proginet, Inc., Protegrity USA, Inc., Reflex Security and Safe-Net, Inc. The PCI SVA was formed in January 2007 to work with the retail and payment card industries to develop an efficient and cost-effective way to achieve compliance with the PCI Data Security Standards (PCI DSS).
NJ-based Princeton Softech is among the first 24 companies to have joined the Payment Card Industry “Strategic Vendor Alliance”. The PCI SVA was founded by a group of leading data security firms, including ConfigureSoft, Cyber-Ark, Modulo Security, Proginet, Protegrity, Reflex Security and Safe-Net to provide the best in technology solutions and services to retailers, e-commerce companies, financial institutions, payment processors, POS vendors and other organizations that must protect consumer privacy to achieve compliance with the PCI Data Security Standard (DSS). Initiated by MasterCard International and Visa in January 2005, the PCI DSS is a set of twelve multifaceted regulations that represent a unified industry standard for protecting cardholder data that is stored, transmitted or processed. The PCI DSS must be implemented by all members, merchants and service providers that store, process or transmit cardholder information. Fines for non-compliance can range up to 500,000 USD per incident. Princeton Softech provides enterprise data management solutions that address critical business issues.
SmartPay and Shanghai Net263 Ltd. have agreed to jointly promote
payment solutions in telecommunications to be introduced this month.
With this, Net 263 will accept payment solutions through mobile,
fixed line telephone, the Internet, and SVA (Stored-Value-Account)
means and provide Internet communication services. SmartPay offers
payment services using secure and stable payment products and has
centralized its mobile, telephone and internet-based payment services
with this new development by offering payment acceptance through