Pin Entry Device is another name for the PIN pad device that we all know and use in daily life.
These are security-enhanced devices that make it easier for users to enter their card PIN in transactions carried out via POS using a credit card or debit card, and that, in contactless transactions, transfer the card information to the POS device by tapping the card on the PIN pad (Pin Entry Device).
The Encrypted PIN Pad (EPP) is used in many areas where financial transactions take place (ATMs, POS, etc.).
For a device to qualify as a PIN entry device, it must basically meet the following requirements:
- Physical Security Requirements
- Logical Security Requirements
- Additional Online Requirements
- Additional Offline Requirements
You can access the document prepared by PCI regarding Pin Entry Devices via the link below.
https://www.pcisecuritystandards.org/documents/pos_ped_security_requirements.pdf
Security features of the PED
PEDs are protected against physical tampering; if the device is opened, the keys are erased. The PIN is encrypted inside the device and never leaves it in the clear.
These devices are certified according to standards such as PCI PTS. Taking a PIN with an uncertified device is risky both in terms of security and compliance.
When using the device, merchants should check that no additional parts have been attached to the screen or keypad.
