MYHSM - Cryptography in the Payment Industry

Explaining encryption and key management within the payment industry, our CTO Andrew Hodges delivered this presentation to the PCI SSC North America Community Meeting. During the presentation, Andrew explores:
• What is a Payment HSM
• The different types of HSMs available to perform cryptographic functions
• The PCI standards which require the use of a Payment HSM
• A detailed description of transaction processing and key management – using an example of an online PIN transaction
• What is involved in managing a Payment HSM
• How Payment HSMs as a Service can help

[mohammedusman]

Thanks Andrew. Definitely it has improved my understanding of what role HSM plays in whole payment process.

[ScouserBerny]

I really enjoyed this presentation Andrew. Thank you for sharing.

[mjsanthosh]

Hi Andrew Hodges,
Thank you giving insight on the MyHSM services and process.
The presentation was very informative on the process MyHSM working and key management.
I have couple of queries list below to understand the process in more details-
1 - What is the process steps MyHSM follow to secure the MFK key, will each institution will get to define their own MFK?
2 - What all steps MyHSM includes in the process of managing the MFK to avoid key compromising.
3 - I saw MyHSM gives services in the line of ZMK/ZPK. Do MyHSM also gives services to keys used by a card management system, PVK, CVK, AC Key, SMI, SMC etc.

[maximvelesco]

Hi Andrew, can i use payshield 9k in a different environment then payments? Thx!