Prime Factors Introduces Tokenization Module

July 26, 2011

Tools

EncryptRIGHT ® tokenization reduces scope and cost of PCI audits

EUGENE, Ore.--(BUSINESS WIRE)-- Prime Factors, Inc., announces the addition of tokenization to the EncryptRIGHT® product suite. Tokenization is a novel way to protect sensitive data that businesses rely upon. It works by substituting a surrogate value for sensitive payment information without changing existing applications. If systems are breached, the attacker cannot use the payment data for fraudulent transactions.

“When combined with data encryption and key management features, EncryptRIGHT now offers a superior way to achieve compliance with the Payment Card Industry Data Security Standard (PCI DSS or PCI),” said Prime Factors president Patrick Riley. “EncryptRIGHT tokenization offers excellent security while reducing audit requirements and cutting the cost of a PCI audit.”

Adrian Lane is a tokenization expert with Securosis, an information security research and advisory firm. “Hackers can’t steal what’s not there,” Lane said. “Tokenization is great for payment data security because you remove credit card numbers in tokenized systems, thus reduce the scope of a PCI audit, which helps reduce compliance costs.”

EncryptRIGHT follows industry best practices for token generation and secure storage. It supports two methods of token generation: random tokenization and tokenization by encryption. Token generation uses a FIPS 140-2 compliant random number generator. Tokenization by encryption uses EncryptRIGHT’s key management and encryption to generate tokens.

Tokenization is easily added to existing EncryptRIGHT deployments, supported by a secure token database. Enterprise customers can use a JDBC driver to integrate with existing Oracle and Microsoft SQL Server databases. In either case, tokenization is fully integrated with encryption, key management and logging features.

Tokenization is an increasingly popular choice for data security. Tokens can be used for all types of system processing, and are suitable for a wide range of personally identifiable information (PII), such as social security numbers, passport numbers and health records. Here’s why tokenization has become popular:

PCI Compliance. For merchants around the world, substituting tokens for credit cards numbers meets compliance requirements and reduces the threat of a data breach.
No System Impact. Tokens have the same format and data type as the original values, so you don’t need to change applications to support tokenization.
Reduced Audit Costs. By removing sensitive information from data processing systems, security audits are simpler and easier to perform.

EncryptRIGHT tokenization is available immediately on Windows.

About Prime Factors

Prime Factors has developed data security software since 1981. More than 1,000 companies have used offerings that include EncryptRIGHT®, the Bank Card Security System™ (BCSS) and Psypher Security Suite™. EncryptRIGHT was released in September, 2010 and now includes tokenization. It provides a better way to achieve PCI data encryption compliance by simplifying key management and reducing the cost of deployment. EncryptRIGHT runs on all major operating systems, provides broad application development support and can be implemented by programmers and non-programmers alike. For more information go to http://www.primefactors.com/products/EncryptRight/index.html.