个案研究

Square 部署 Entrust nShield HSM 以自己的方式对抗网络攻击者

Read this case study to learn how Square used Entrust nShield Solo XC HSMs as cryptographic anchors to secure its mobile payment card readers and streamline PCI DSS compliance.

联系我们

hand holding tablet and card being scanned on the tablet

The subsidiary of Block Inc. chose Entrust nShield Solo XC hardware security modules to serve as cryptographic anchors for Square’s mobile payment card readers, enabling secure transactions, data integrity, and compliance with data security standards, including the Payment Card Industry Data Security Standard (PCI DSS).

The San Francisco-based Square was founded in 2009 with a mission to build tools that make commerce easier and more accessible to all. The company’s point-of-sale (POS) software and mobile payment card readers for smartphones and tablets enable merchants to accept card payments in a secure manner without the complexity and cost of managing traditional fixed POS systems. The origin of the now substantial global mobile POS (mPOS) card acceptance market can legitimately be traced back to Square.

As with all companies, data integrity and the security of transactions are mission-critical factors. However, Square has a rather unique philosophy in the way it approaches its security architecture. Most attackers try to exfiltrate data so that they can work in the seclusion of their own systems. Square’s environment was architected from the very outset to prevent that from happening, incorporating hardware security modules (HSMs) as a required element.

Business Challenge

The numerous regulatory bodies in Square’s sector dictated the need for the selected HSM to be compliant with a wide range of government and payment industry mandates that meet stringent security requirements. Square conforms to multiple standards, including the Payment Card Industry Data Security Standard (PCI DSS).

In addition to making reliability a primary objective, the Square team closely focused on the selection of any component in its architecture capable of compromising data integrity, performance, or the seller experience.

Technical Challenge

The uniqueness and value proposition of Square’s offerings have made the company a resounding success and this has influenced the design criteria for the infrastructure. Square opted to handle scalability at the application layer and this created the need to be able to conveniently move keys between HSMs.

A key factor for selecting the optimal HSM for the Square implementation was a module’s ability to process vast amounts of data. Square profiled its software to understand how many authentication code operations and how many encryption calls were taking place, and replicated this to test HSM performance.

我们有着悠久的合作历史，并且我们非常乐意继续依靠我们核心业务的 Entrust 解决方案。

Neal Harris
Security Engineering Manager, Square

解决方案

Square’s technical team performed a rigorous evaluation of multiple vendors and selected the Entrust nShield® Solo HSM because of its compelling performance across the full suite of tests. The Entrust solution’s inherent ability to scale – enabled by the seamless sharing of cryptographic keys across HSMs without user intervention or complex key cloning activities – was another of the many standout features.

The success of the Entrust nShield Solo HSM in the cryptographic anchor role has since paved the way for their use in injecting keys into Square’s readers to authenticate the devices. Entrust HSMs are a critical part of the process that provides every Square product with its own unique key.

Results

The fundamental value of the HSM-centric crypto-anchor approach has remained sound over an extended period of time. Several years since Square decided to use Entrust nShield HSMs, the choice of Entrust as a partner continues to hold valid.

The requirement to regularly conduct both internal and external audits can frequently be very labor-intensive and time-consuming. However, the presence of the FIPS-certified Entrust nShield HSM can contribute to streamlining the process.

For example, during its Payment Card Industry Data Security Standard (PCI DSS) audit, Square specifically highlighted that its data is protected by an encryption key, located in the Entrust nShield HSM. The inclusion adds to the volume of evidence provided to the auditors to demonstrate that any potential issues are being handled in a robust and compliant manner.

We have used Entrust nShield HSMs for five years and they have always been exceptionally reliable. 我们已经在 HSM 之上铺设了大量代码；它提供了我们所需的性能，是经得起考验的坚实基础。

Neal Harris
Security Engineering Manager, Square

Related Products & Services

联系 Entrust 销售客服

Fill out the form to have one of our experts contact you to discuss how nShield HSMs can enable your digital security use cases.

名字

姓氏

公司电子邮件

公司名称

电话号码

工作职能

职务级别

国家/地区

州

省

图像中的验证码是什么？

输入图像中显示的字符。

营销许可

电话营销许可

摘要

Business Need

Contribute to the overall ease of attaining multi-agency compliance
Absolute reliability
Comply with the Payment Card Industry Data Security Standard (PCI DSS)

Technology Need

Ability to handle throughput and scale to support business objectives
Make crypto-anchor architecture a reality

解决方案

Entrust nShield Solo XC hardware security module

Result

High cryptography throughput rates
Elevated protection through crypto-anchor deployment
Streamlined compliance process
Rock-solid foundation for layered code

Download the Square HSM Case Study

下载

Square 部署 Entrust nShield HSM 以自己的方式对抗网络攻击者

Business Challenge

Technical Challenge

我们有着悠久的合作历史，并且我们非常乐意继续依靠我们核心业务的 Entrust 解决方案。

解决方案

Results

We have used Entrust nShield HSMs for five years and they have always been exceptionally reliable. 我们已经在 HSM 之上铺设了大量代码；它提供了我们所需的性能，是经得起考验的坚实基础。

Related Products & Services

Entrust nShield HSM

nShield Solo HSMs

Entrust 专业服务

摘要

Download the Square HSM Case Study

联系信息

公司

新闻中心

产品资源