Why DTMF masking is critical to payment security. (November 2015)

• Record Type: Journal Article
• Authors: Critchley, Tim
• Is Part Of: Computer fraud & security. Number 11(2015)
• Page Start: 8
• Page End: 10
• Publication Date: 2015-11
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(15)30101-9
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : Ten years since the launch of version 1.0 of the Payment Card Industry Data Security Standard (PCI DSS), technology has advanced to help merchants worldwide comply with the standard. Three approaches have become mainstream – tokenisation, point-to-point encryption (P2PE) and EMV (Europay, MasterCard and Visa). Both tokenisation and P2PE have proved to be powerful ways of securing data, while EMV has established an essential global standard for the interoperability of chip cards. However in one sector these advances in security are not effective; for many, the challenge of how to secure card payments made over the phone to a contact centre still exists. That's why one payment protection method, DTMF masking, has come to take a pivotal role in the protection of customer card data when taking payments made over the phone. It has been 10 years since the launch of the Payment Card Industry Data Security Standard (PCI DSS) and many advances have been made to help merchants comply. But one area remains vulnerable. For many, the challenge of how to secure 'card not present' (CNP) payments made over the phone to a contact centre still exists. Allowing customers to provide sensitive information such as card numbers on calls that may be recorded presents serious challenges. That's why one payment protection method, DTMF masking, has come to take a pivotal role, as Tim Critchley of Semafone explains.