Futurex provides point-to-point encryption solutions to prevent card fraud, including their Excrypt SSP9000 hardware security module, Securus remote access device, and Guardian9000 secure management server. They have over 30 years of experience serving over 15,000 customers worldwide. Their hardware-based solutions provide the highest levels of security and compliance through encryption of sensitive cardholder data and centralized key management.

1. Point-to-Point Encryption
Solutions from Futurex
Proven Solutions for Preventing Card Fraud

2. Agenda
• About Futurex
• Unique Perspective of Futurex
• P2PE Solutions
– Excrypt SSP9000 HSM
– Securus Remote Access Device
– Guardian9000 Secure Management Server
• Futurex Enterprise Security Platform
– Futurex Hosted Certificate Authority
• Xceptional Support

3. Futurex. An Innovative Leader in
Encryption Solutions.
• For over 30 years, more than 15,000 customers worldwide
• Members of ANSI X9F and PCI Security standards bodies,
CTGA certified Solutions Architects
• Hardware-based solutions with integrated applications
provide the highest levels of compliance and security
• Entrepreneurial culture, fostering agility and innovation in
the development of hardware encryption solutions
• Results-oriented engineering team based in our U.S.
Technology Campus, with significant experience delivering
First-to-Market Customer Initiatives

4. Unique Perspective of Futurex
As a hardware security solution provider, Futurex has a
unique perspective
 Acquirers: transaction security (P2PE)
 Merchants: transaction security (P2PE), key management
 Device Manufacturers: certificate authority, key management
 Switches: transaction security
 Issuers: card security (EMV data preparation, personalization)
 Merchant Service Providers: key management
4

5. Sensitive Cardholder Data
Encrypted
Data
Acquirer
• Decrypt Cardholder Data
• Generate Secure Token
Point-of-Interaction (merchant)
%B4388547890123456^DOE/JOHN^1402547834?
Point-to-Point Encryption of Cardholder Data
Token
Token
Secure Cryptographic
Device (SCD)

6. Why A Secure Cryptographic Device?
• Meets PCI Requirements
• Dual Control
• Tamper Protection for Keys
• Prevents insider attack
• Split Knowledge
• Encryption Key Management
6
A secure, scalable hardware
security module solution

7. Host
Application
Hardware
Security Module
Futurex Hardware Security Module Technology
Robust Functionality
• Fastest HSMs in the world – up to 2,250 TPS or 8,000 TPS in Enterprise-class model
• Dual, redundant power supplies and Ethernet ports
• Support for wide-ranging functionality, including specialized features for:
healthcare, financial, manufacturing, utility, government, education, retail, and
corporate
Regulatory Compliance
• FIPS 140-2 Level 3, PCI HSM, ANS X9.24 Part 1 and Part 2, TR-39

8. Securus
Compliant Remote Access Device with Secure Key Loading
•FIPS 140-2 Level 3-validated tablet device for remote
configuration of Futurex solutions
•10.4-inch, full color
touch screen LCD
•PKI-secured remote
loading of Master Key
•Rugged design for field usage
•Portable, with Wi-Fi connectivity

9. Guardian9000
Secure Management Server for Core Cryptographic Infrastructure
Guardian9000
Primary Site Backup / Disaster Recovery Site
• Centralized Master Key loading and firmware updates
• Load balancing, Nth-degree scalability, and disaster recovery
• Eliminates single points of failure
• Customized alerting over SMTP, SMS, and SNMP
• Automatic synchronization of keys and settings
SMTP Server SNMP Server
Gateway Host
Guardian9000
Excrypt SSP9000
Hardware Security
Module
Excrypt SSP9000
Hardware Security
Module
Excrypt SSP9000
Hardware Security
Module
Excrypt SSP9000
Hardware Security
Module

10. Scalability, Redundancy, and Manageability
• Nth-degree scalability and load balancing, with no single point of failure
• Logical separation of Master Keys, with per-group function blocking
• Full remote management, including Master Key loading
• Monitoring and alerting via SMTP, SNMP, and SMS
Primary Site
HSM
#1
HSM
#N
Redundant Failover
HSM
#2
HSM
#N
Secondary Site
Direct Load Balancing
Automatic Synchronization
Remote
Access
Device
SMS
SNMP
SMTPSecure
Management
ServerSMS
SNMP
SMTP Secure
Management
Server

11. Futurex Enterprise Security Platform
• Remote Access
• Centralized
Administration
• High Availability
• Redundant
• Compliant
• Secured
• Customizable

12. Guardian9000
Backup / Disaster
Recovery HSM Site
Guardian9000
Primary HSM Site
Gateway Host
Securus
Connections TLS/SSL
encrypted
Firmware updates, settings, keys
P2PE Enabled Devices
Securus
Firmware updates, settings, keys
P2PE Secured
Transactions
Site Level Redundancy
Excrypt SSP9000 Excrypt SSP9000

13. Backup / Disaster
Recovery HSM Site
Guardian9000
Primary HSM Site
Gateway Host
Securus
Connections TLS/SSL
encrypted
Firmware updates, settings, keys
P2PE Enabled Devices
Firmware updates, settings, keys
P2PE Secured
Transactions
Two Sites Managed from One Site
Excrypt SSP9000 Excrypt SSP9000

14. Guardian9000
Primary HSM Site
Gateway Host
Securus
Connections TLS/SSL
encrypted
Firmware updates, settings, keys
P2PE Enabled Devices
P2PE Secured
Transactions
Single Site with Management
Excrypt SSP9000

15. Primary HSM Site
Gateway Host
Securus
Connections TLS/SSL
encrypted
P2PE Enabled Devices
P2PE Secured
Transactions
Single Site Basic
Excrypt SSP9000

16. Exceptional Support
• Extremely knowledgeable TR-39-certified subject matter experts
• 24x7x365 Business Critical support
• Level 1 to Level 3 support
• Xceptional Support Services
• Training (virtual or onsite)
• Customized consulting
• Hosted solutions
• Certificate authority
• PIN & key generation, printing and mailing
• Customized hardware and software solution development

17. People, Process & Technology
17
Compliance and
Fraud Prevention
People
CTGA Certified Solutions
Architects
Quality Assurance
Xceptional 24x7 Global
Support
Custom Engineering
Process
On-Site & Virtual Training
On-site Implementation
Process Consulting
Procedure Documentation
Technology
FIPS 140-2 Level 3 & PCI HSM
Key Lifecycle Management
EMV and P2PE
Tamper Resistant
Enterprise Platform