FAQ #1249 Diff
In P2PE Hardware/Hybrid solutions, what is a Host System?
Earlier Version
Later Version
Removed
Added
Host systems are used in hybrid decryption environments to decrypt account data for the purpose of processing payments. A Host system is a computer or other device that is not considered a secure cryptographic device (SCD). In the context of the P2PE standard, the Host system is defined as a combination of software and hardware components used for the purpose of decrypting account data. Host systems may also be used for transaction processing.processing.Characteristics of a Host system include:
Host systems are not secure cryptographic devices (SCDs)
Characteristics of a HostHost systems perform decryption of account data
Host systems temporarily retain data decryption keys (DDKs) in volatile memory.
Host systems do not perform key generation, key loading, key injection or key distribution functions — these must be performed by an HSM or other SCD
Host systems do not share, output or transmit any cryptographic key (either encrypted or in clear text) to any process, application or systeminclude:
Host systems are notsecure cryptographic devices (SCDs)
Host systems perform decryption of account data
Host systems temporarily retain data decryption keys (DDKs) in volatile memory.
Host systems do not perform key generation, key loading, key injection or key distribution functions ? these must be performed by an HSM or other SCD
Host systems do not share, output or transmit any cryptographic key (either encrypted or in clear text) to any process, application or systemoutside of the transaction processing function
Host systems are not secure cryptographic devices (SCDs)
Host systems temporarily retain data decryption keys (DDKs) in volatile memory.
Host systems do not perform key generation, key loading, key injection or key distribution functions — these must be performed by an HSM or other SCD
Host systems do not share, output or transmit any cryptographic key (either encrypted or in clear text) to any process, application or system
Host systems are notsecure cryptographic devices (SCDs)
Host systems perform decryption of account data
Host systems temporarily retain data decryption keys (DDKs) in volatile memory.
Host systems do not perform key generation, key loading, key injection or key distribution functions ? these must be performed by an HSM or other SCD
Host systems do not share, output or transmit any cryptographic key (either encrypted or in clear text) to any process, application or system
Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.