MYHSM - Cryptography in the Payment Industry

Explaining encryption and key management within the payment industry, our CTO Andrew Hodges delivered this presentation to the PCI SSC North America Community Meeting. During the presentation, Andrew explores:
• What is a Payment HSM
• The different types of HSMs available to perform cryptographic functions
• The PCI standards which require the use of a Payment HSM
• A detailed description of transaction processing and key management - using an example of an online PIN transaction
• What is involved in managing a Payment HSM
• How Payment HSMs as a Service can help
For more information on MYHSM's Payment HSM as a Service, please visit our website: myhsm.com/

[@mohammedusman6510]

Thanks Andrew. Definitely it has improved my understanding of what role HSM plays in whole payment process.

[@ScouserBerny]

I really enjoyed this presentation Andrew. Thank you for sharing.

[@mjsanthosh1044]

Hi Andrew Hodges,
Thank you giving insight on the MyHSM services and process.
The presentation was very informative on the process MyHSM working and key management.
I have couple of queries list below to understand the process in more details-
1 - What is the process steps MyHSM follow to secure the MFK key, will each institution will get to define their own MFK?
2 - What all steps MyHSM includes in the process of managing the MFK to avoid key compromising.
3 - I saw MyHSM gives services in the line of ZMK/ZPK. Do MyHSM also gives services to keys used by a card management system, PVK, CVK, AC Key, SMI, SMC etc.

[@myhsm3137]

Hi MJ
,
Thank you for your comment.
Regarding MFKs on the LIVE MYHSM service, each customer has their own MFK allocated to them, which we manage on their behalf. Our customers are responsible for all key management which can be performed automatically by a software application over the host interface, and MYHSM are responsible for everything else. If you would like any further details, please visit our website: myhsm.com/

[@mjsanthosh1044]

@@myhsm3137 Thank you for the information. 👍

[@maximvelesco8450]

Hi Andrew, can i use payshield 9k in a different environment then payments? Thx!