www.t halesesecurity.com
THALES HARDWARE ENABLES MARQETA TO DELIVER A UNIQUE AND
INNOVATIVE PAYMENT SOLUTION
How Thales payment HSMs provided the flexibility and
global payment network interoperability this fast-growing
company needed to develop a solution that would
revolutionize the industry.
THE CHALLENGE: FIND A CARD PAYMENT
SECURITY SOLUTION THAT COULD PROMOTE
INNOVATION AND CONFIDENCE.
The founders of Marqeta wanted to do something in the card
payment space that had never been done before: create a
card issuing and payment system that had multiple closed loop
and open loop accounts on a single card. This new model
would combine a nearly unlimited amount of prepaid, debit
and credit accounts into a single piece of plastic. When a
Marqeta-enabled card would be swiped at a Point of Sale
(POS) terminal anywhere in the world, within a split second
the company would be able to identify the cardholder and
merchant, and authorize a transaction based on sequestered
funds available or on restricted rules for the merchant.
But securing the system would be the challenge. Even as
Marqeta sought to revolutionize the payment network, a
tried and true payment security and information protection
technology was essential to widespread adoption. Marqeta’s
security technology had to be a strong, stable platform that
could enable real-time, dynamic processing of card information,
while also being able to operate with the standard payment
network used by all the other players in the space.
THE SOLUTION:THALES PAYMENT HARDWARE
SECURITY MODULES.
To secure its new payment system, Marqeta chose Thales
payShield 9000 hardware security modules (HSMs).
As the most widely deployed payment HSM in the world,
the payShield 9000 provides Marqeta with a solution that
communicates with merchants, issuers, and acquirers worldwide.
As an external peripheral supporting a wide range of hosts
including mainframes and servers, it provided the interoperability
and high assurance Marqeta required for POS credit and debit
card transactions.
KEY BENEFITS
chieve comprehensive, certified security specially
A
designed for card issuing and payment processing
Maximize business continuity with redundant hardware,
field serviceable components, and support for clustering
and failover
Streamline deployment and maintenance and reduce
the cost of compliance
Reduce costs by paying only for the capacity you
need, choosing from a range of scalable, highperformance models
Get off-the-shelf support for all major
payment applications
With cryptographic functionality and management features
that meet or exceed the card application and security audit
requirements of other major international card schemes,
payShield 9000 enables Marqeta to gain the trust of key
players throughout the payment industry.
With security provided by Thales HSMs, Marqeta today
is the platform for payment innovation. The company has
expanded the platform going beyond multi-merchant commerce
capabilities to enable a host of dynamic spend controls and
advanced processing capabilities. The platform is powering a
number of popular card solutions for some of the world’s largest
brands and retailers.
Why Thales?
Marqeta choose Thales and the payShield 9000 for
several significant reasons:
Ubiquity. The fact that Thales HSMs are so widespread
and used by the other major players in the payment
industry was an important decision factor for Marqeta
Compliance. The Thales payShield 9000 is certified
to FIPS 140-2 level 3 and is also available in
configurations certified to the PCI HSM specification as
published by the PCI Security Standards Council
Support. The Thales team provided the extraordinary
level of support Marqeta required as it worked to
launch this new and innovative solution
Development. Marqeta wanted a platform that was
robust enough to support developer access to its
technology through a publically available API, and
payShield 9000 delivered. Marqeta in fact became the
first vendor in the payment industry to open its API on its
website
ABOUT THALES E-SECURITY
Thales e-Security is the leader in advanced data security
solutions and services that deliver trust wherever information is
created, shared or stored. We ensure that the data belonging
to companies and government entities is both secure and trusted
in any environment – on-premise, in the cloud, in data centers
or big data environments – without sacrificing business agility.
Security doesn’t just reduce risk, it’s an enabler of the digital
initiatives that now permeate our daily lives – digital money,
e-identities, healthcare, connected cars and with the internet of
things (IoT) even household devices. Thales provides everything
an organization needs to protect and manage its data, identities
and intellectual property and meet regulatory compliance –
through encryption, advanced key management, tokenization,
privileged user control and high assurance solutions. Security
professionals around the globe rely on Thales to confidently
accelerate their organization’s digital transformation. Thales
e-Security is part of Thales Group.
Follow us on:
Americas – Thales e-Security Inc. 900 South Pine Island Road, Suite 710, Plantation, FL 33324 USA • Tel:+1 888 744 4976 or +1 954 888 6200 • Fax:+1 954 888 6211 • E-mail: [email protected]
Asia Pacific – Thales Transport & Security (HK) Lt, Unit 4101-3, 41/F, Sunlight Tower, 248 Queen’s Road East, Wanchai, Hong Kong • Tel:+852 2815 8633 • Fax:+852 2815 8141 • E-mail: [email protected]
Europe, Middle East, Africa – Meadow View House, Long Crendon, Aylesbury, Buckinghamshire HP18 9EQ • Tel:+44 (0)1844 201800 • Fax:+44 (0)1844 208550 • E-mail: [email protected]
© Thales - June 2017 • PLB6 749
ABOUT THE SOLUTION
Designed specifically for payments applications, payShield
9000 from Thales e-Security is a proven hardware security
module (HSM) that performs tasks such as PIN protection and
validation, transaction processing, payment card issuance,
and key management. payShield 9000 is the most widely
deployed payment HSM in the world, used in an estimated
80% of all payment card transactions. The payShield 9000
design benefits from over 25 years of Thales experience with
payment system security, giving organizations confidence in
a state-of-the-art solution that delivers an ideal combination
of security and operational ease. The payShield 9000 device
is deployed as an external peripheral for mainframes and
servers running card issuing and payment processing software
applications for the electronic payments industry—delivering
high assurance protection for Automated Teller Machine (ATM)
and Point of Sale (POS) credit and debit card transactions.
The cryptographic functionality and management features
of payShield 9000 meet or exceed the card application
and security audit requirements of the major international
card schemes, including American Express, Discover, JCB,
MasterCard, UnionPay, and Visa. payShield 9000 is certified
to FIPS 140-2 level 3 and is also available in configurations
certified to the PCI HSM specification as published by the PCI
Security Standards Council.