New UT-X20 Payment Terminal will Significantly Reduce Credit Card Information Leakage Risk

Transaction Media Networks, Inc. (TMN) has announced that its new payment terminal UT-X20 is authorized as a provider equipment of international information security standard PCI P2PE Solution^*1. UT-X20 can significantly reduce the burden of complying with the security requirements stipulated by Japan’s revised Installment Sales Act for retail stores that accepts credit card payments.

Shortening Merchants’ Certification Process by one-tenth from Previously

TMN, along with its payment gateway services (software), has experience and knowledge as a payment terminal manufacturer (hardware) as part of its strengths. This allows TMN to understand the various needs and issues of merchants from both software and hardware fields and reflect them in each service.

The new UT-X20 payment terminal, which began accepting orders in July 2023, not only supports multiple payments such as credit, e-cash, and QR/bar code payments, but also allows users to choose between integrated and non-integrated connections^*2, Strip, PIN and contactless credit card acceptance for effortless operation, and easy connection to POS. It is an omnidirectional payment terminal packed with functions presuming all installation environments.

Furthermore, TMN believes that it will be able to provide safe and convenient payment services by providing security measures that are highly sought after by merchants, thereby lowering the risk of credit card information leakage, and reducing the burden of obtaining certifications for about 400 items required by merchants to just 35 items.

TMN will continue to respond sincerely to customer requests, increase the lineup of certified devices, and continue to work to further strengthen its security.

Fifth Model to become PCI P2PE-certified Device

Japan’s revised Installment Sales Act enacted in 2018 requires businesses that conduct credit card transactions to not retain card information, or comply with PCI DSS^*3. However to comply with PCI DSS, a business entity is required to clear about 400 requirement items, which is a heavy burden for those that conduct credit card transactions.

PCI P2PE is an international information security standard established by PCI SSC^*4, which requires that credit card information must be encrypted and transmitted between the payment terminal and data center. By using PCI P2PE-certified devices, businesses can reduce the PCI DSS requirements to just 35 items.

TMN became one of the first in Japan to be certified as a provider of the PCI P2PE Solution in 2018. With the addition of the new UT-X20 payment terminal to the list of certified devices, the lineup of payment terminals compatible with TMN's PCI P2PE Solution has increased to the following five:

TMN's PCI P2PE Solution-compatible Equipment

• JT-R600CR mk1 (Made by Panasonic Connect Co., Ltd.)
• JT-R600CR mk2 (Made by Panasonic Connect Co., Ltd.)
• UT-X10 (TMN)
• ICM330 GEN5 (Made by Nidec Instruments Corporation)
• UT-X20 (TMN)　New

• PCI Point-to-Point Encryption
  P2PE is a security method that encrypts card information between the payment terminal and data center, and PCI P2PE is a P2PE security standard established by PCI SSC^*4.
• Integrated (pass-through type):
  A payment method in which credit card information is "stored," "processed," and "passed" through the company's own equipment and network.
  Non-integrated: A payment method in which credit card information is not "stored", "processed", or "passed" through the company's own equipment or network.
• Payment Card Industry Data Security Standard
  Security standard in the credit card industry designed for the purpose of safely handling credit card member data by merchants and service providers. Operated and managed by PCI SSC^*4
• PCI Security Standards Council:
  An organization jointly established by five international card brands to formulate, maintain, disseminate and manage PCI-related standards.