Key Injection Facility
UCP is a certified ESO (Encryption Service Organization) with extensive experience in the payments industry. As part of our configuration and deployment services, UCP provides PCI PIN and P2PE certified key injection for a wide range of POS terminals, mobile payment devices, and PIN pads. We support Point-of-Sale devices and peripherals from leading OEMs such as Ingenico, ID Tech, Pax, Nexgo and VeriFone.
UCP holds keys for numerous processors, gateways, and acquirers, including Chase, Elavon, First Data/Fiserv, Global, TSYS, and Worldpay. UCP delivers technology that is fully configured and operational right out of the box. Our key injection services vary based on the specific POS hardware:
-
Direct Key Injection: This method involves the physical injection of data encryption keys into each piece of POS hardware. UCP can customize this service according to customer needs, offering key injection with or without debit PIN keys. We employ state-of-the-art key injection equipment that ensures the process is both swift and secure, allowing for instant encryption of sensitive data at the point of capture.
UCP Security/Compliance
In the ever-evolving landscape of financial transactions, it's crucial for our team at UCP to remain actively engaged with esteemed organizations like ISO, PCI SSC, and ANSI. This involvement helps us to develop and comprehend standards pivotal to securing financial transactions. Our dedicated encryption services team, committed to industry proficiency for our reseller partners, regularly participates in Visa/MasterCard mandated training to ensure compliance with facility requirements.
Physical Security: UCP's state-of-the-art KIF (Key Injection Facility) adheres to stringent industry standards concerning security protocols, thorough audits, and continuous internal improvements. From the moment key components are received to the completion of the key injection process, our secure facility operates around the clock, protected by access-controlled doors, extensive camera surveillance, and restricted personnel entry.
Restricted Access: All members of the UCP team undergo comprehensive training and rigorous background checks before they can participate in key injection operations. Alongside video surveillance, our operational procedures mandate a dual login for the key loading application, ensuring that no single individual can control the entire system, thereby enhancing security measures.
Device Tracking: UCP maintains meticulous chain of custody documentation from the point of injection through to the device's end-of-life decommissioning. Our serial number tracking system reduces security vulnerabilities while keeping a detailed audit trail. This trail includes tracing and serial information, logs of user activities, and records of system access.