Welcome Guest. | Log In | Register | Membership Benefits

Columbia Sportswear Leverages Tokenization And Encryption To Reduce PCI Scope

will be implementing an integrated point-to-point encryption payment solution from Merchant Link, Equinox and Voltage Security

Jan 11, 2012 | 01:12 PM | 


New York, NY, January 11, 2012, National Retail Federation’s Big Show (NRF 2012)- Leading payment processing and security vendors, Equinox Payments, Voltage Security and Merchant Link, have collaborated to create a cutting-edge, reliable, cloud-based payment solution to protect sensitive point-of-sale payment data.

The integration of these proven solutions was a direct response to Columbia Sportswear Company’s desire to reduce its PCI scope for its retail locations by minimizing or eliminating the need to store any payment data on its network environment, while allowing scalability to support future growth.

In a joint effort to meet Columbia’s challenge and push the envelope on payment data security, Equinox’s payment terminals were combined with Voltage SecureData Payments™ solutions and Merchant Link’s TransactionVault™ tokenization and Payment Gateway™.

• Data is captured using Equinox Payments’ next generation L5300 payment system, which is equipped with an integrated contactless reader and features Equinox’s remote key injection system that allows a retailer to initiate on-site, in-store terminal key injection quickly and securely for debit card transactions.

• For credit card transactions, Voltage Security’s encryption technology featuring stateless key management offers protection of payment data from swipe to processing and works alongside PIN debit encryption without any impact.

• Merchant Link’s card-based tokenization technology enhances security and marketing analytics, while its gateway service ensures successful settlement.

“Our customers have high expectations when it comes to the quality of our products and the security of the payment information they entrust us with,” said Susan Leafe, Retail Application Manager, Columbia Sportswear Company. “Equinox Payments, Voltage Security and Merchant Link have come together to enable a comprehensive, reliable payment solution that significantly reduces information security risk for us and for our customers while providing the scalability and ease of maintenance we desired.”

The initial pilot programs were completed prior to the holiday shopping season and implementation across Columbia Sportswear’s 54U.S.retail locations is expected to be completed by April 2012. By integrating the latest payment technologies and security into a single solution, Columbia Sportswear will not only be able to secure transactions today, but will also be able to adjust and scale the solution when future payment methods such as contactless, electronic wallets and EMV become more mainstream.

About Columbia Sportswear Columbia Sportswear Company is a leading innovator in the global outdoor apparel, footwear, accessories and equipment markets. Founded in 1938 in Portland, Oregon, Columbia products are sold in more than 100 countries and have earned an international reputation for innovation, quality and performance. Columbia products feature innovative technologies and designs that protect outdoor enthusiasts from the elements, increase comfort, and make outdoor activities more enjoyable. In addition to the Columbia' brand, Columbia Sportswear Company also owns outdoor brands Mountain Hardwear', Sorel',and Montrail'. To learn more, please visit the company's websites at www.columbia.com, www.mountainhardwear.com, www.sorel.com, and www.montrail.com.

About Equinox Payments, LLC

Equinox Payments, headquartered in Scottsdale, Arizona, a portfolio company of The Gores Group, LLC, is a leading payment terminal manufacturer and secure applications provider. Through its commercial offices in the United States, Latvia, Manila and Australia, and a service repair facility in Mexico, Equinox’s more than 200 employees deliver secure payment terminals, applications and services to hundreds of thousands of merchants throughout North America. Further information is available at www.equinoxpayments.com.

About Voltage Security

Voltage Security', Inc. is the world leader in providing data-centric encryption and key management solutions for combating new and emerging security threats. With innovative, powerful and easy-to-use encryption and tokenization solutions for protecting sensitive business data, Voltage customers are able to address privacy regulations and best practices from around the world. Voltage customers adopting data-centric encryption include some of the largest companies in the world across a wide variety of industries including payments, financial, insurance, medical, e-commerce and more. Voltage solutions are based on two groundbreaking encryption approaches: Identity-Based Encryption™ (IBE) and Format-Preserving Encryption™ (FPE). Voltage solutions have changed how enterprises protect their most valuable asset, their customer data. Offerings include Voltage SecureMail™, Voltage SecureData™, Voltage SecureData Payments™, Voltage SecureData Web™, Voltage SecureFile™ and Voltage Cloud Services™ which provides cloud scale encryption and key management for businesses, partners and their customers. The company has been issued several patents based upon breakthrough research in mathematics and cryptographic systems. To learn more about Voltage customers please visit voltage.com/customers.

About Merchant Link Merchant Link is a leading provider of cloud-based payment gateway and data security solutions, removing the risk and hassle from credit card acceptance for more than 150,000 retailers, hotels and restaurants. Founded in 1993 and headquartered in Silver Spring, Md., Merchant Link currently enables more than 3 billion transactions annually for some of the world's best-known merchants, providing connectivity to the major U.S. payment card processors. TransactionVaultTM, our tokenization solution, and TransactionShieldTM, our point-to-point encryption solution, mitigate the risk of a data compromise while lowering the cost and effort of PCI compliance. Further information is available at www.merchantlink.com. For our expert opinion on encryption, tokenization and PCI compliance, visit the Merchant Link blog at www.merchantlinksecuritycents.com.



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS



Compliance Reports

report How To Boost Security Via FFIEC Compliance
With just a smartphone, users can conduct nearly all their banking business at any time of the day or night. However, all this flexibility and convenience opens up new avenues for fraud and cybercrime. Guidelines laid out by the FFIEC several years ago predate many of the capabilities-and vulnerabilities-that are in place today. In this report, we examine the latest guidelines and provide advice on how you can extend the work done to comply with FFIEC guidelines to strengthen your organization's overall security posture and keep customers and their data safe.

report Keeping Compliance In Check
Configuration mistakes, access control gaffes, poor documentation--it doesn?t take much for a compliance audit to go all wrong. In this special retrospective of recent news coverage, Dark Reading takes a look at the costs, common missteps and best practices for compliance, as well as the day the Internet nearly went dark due to the threat of new regulations.

report FISMA Lifts All Compliance Boats
FISMA may not be on your radar now, but it likely will be at some point. Geared specifically toward the federal government and its affiliate agencies and third parties, FISMA is a very specific set of requirements aimed at establishing and maintaining at least a baseline level of computer and network security. FISMA requires unique categorization and classification of information assets, not to mention a boatload of documentation to prove compliance. But once your organization achieves FISMA compliance, it will likely be compliant with just about every security mandate out there.

Other reports from the Compliance Tech Center:

Related Content

Log Management in 2012 and Beyond
2012 brings interesting changes to the log management world. Now, more than ever, it is critical to understand the impact to your log infrastructure and the solutions that will better prepare you to manage your security posture.

SANS Log Management Survey Report
Organizations are increasingly dependent on log management to support core business functions, including cost management, service level and line-of-business application monitoring, as well as traditional IT- and security-focused activities.

Cut the Time and Effort of Troubleshooting and Reporting
Organizations generate millions of logs a day and struggle with centralized collection, storage and analysis of those logs. ArcSight Logger is a universal log management solution that unifies searching, reporting, alerting and analysis across any type of IT data. It consolidates silos of logs into a single indexed repository for fast detection and mitigation of operational issues.

Get Turnkey and Automated PCI Compliance
PCI compliance monitoring is seamless with the self-contained ArcSight PCI Logger solution for log collection, storage and analysis. No database administration expertise is required and a web-based interface simplifies deployment and ongoing management.

Swiss Bank Meets Compliance Requirements and Protects Customer Data
Due to long-term data retention requirements, Swiss bank EFG needed a cost-effective way to collect, secure and store audit-quality log data in an easily accessible log repository. ArcSight Logger helps EFG meet key requirements of Switzerland?s banking laws fast and cost-effectively.




Featured Webcasts
Featured Whitepapers
Featured Reports