Chip-enabled Credit Cards Not the Answer to Security Vulnerabilities

Chip-enabled Credit Cards Not the Answer to Security Vulnerabilities

Set by credit card companies, the deadline is October 2015. At this time, U.S. consumers will be required to carry a new type of credit card if they plan on using it at retailers across the nation that will have upgraded payment terminals to accommodate the cards. This change costs $8.65 billion, while only addressing a narrow range of security issues.

These new credit cards will be chip-enabled, which means they will come with embedded computer chips, making them harder to counterfeit; however, credit card counterfeiting is only about 37% of all credit card fraud combined. The embedded computer chips will still be vulnerable to hacking and to the same cyber attacks that current swipe-card systems already deal with.

PINs will no longer be issued, requiring just a signature to complete a transaction. PINs work as an additional layer of security that helps make lost or stolen cards useless when attempting to make in-person purchases at retail stores. But, cost and complexity are reasons for not issuing these secret numbers. It would require a larger investment from credit card companies, and PIN management systems require additional customer support.

Chip technology has been used in Europe for about two decades in addition to requiring PINs, but even with these security layers, data is still unprotected at three key points:

  • Entering the terminal;
  • Transmission through a processor; and
  • Storage on the retailer’s systems.

While security experts argue that it would make more sense for the United States to use point-to-point encryption, which scrambles data to make it unreadable from the instant the transaction starts, higher cost and limited track record as proof of success stands in the way.

About the Author

Ginger Hill is Group Social Media Manager.

  • Securing Entertainment Venues Securing Entertainment Venues

    One thing entertainment venues, sports stadiums and theme park officials want to accomplish is getting people back into their seats. That is happening today—but not without understanding and technology. In this episode, AJ DeRosa shares his insight on how COVID-impacted businesses are able to face safety and security issues with confidence and technology. We also discuss visitor expectations and how venue officials can ensure their space is secure as they welcome visitors back.

Digital Edition

  • Environmental Protection
  • Occupational Health & Safety
  • Infrastructure Solutions Group
  • Spaces4Learning
  • Campus Security & Life Safety