CRE Secure Makes Tokenization a Reality for Online Commerce

First tokenization deployment integrates into Authorize.Net payment gateway vault

ATLANTA--(BUSINESS WIRE)--CRE Secure, the industry’s first cloud-based, elegantly designed, secure payment solution for online merchants, announced today its new, encrypted tokenization service that enables online merchants to facilitate recurring billing and faster online payment transactions for repeat customers.

“Now merchants have the ability to process recurring transactions or provide customers stored credit card profiles without the cost or compliance risk of handling the data themselves.”

“A secure tokenization solution combined with a compliant outsourced payment service provides online merchants the best path to meeting PCI compliance while serving their customer’s needs,” said Kennet Westby, COO and Co-Founder of Coalfire, a leading IT audit and compliance firm. “Now merchants have the ability to process recurring transactions or provide customers stored credit card profiles without the cost or compliance risk of handling the data themselves.”

CRE Secure’s tokenization service securely encrypts and translates customer data collected from live transactions on CRE Secure’s patented hosted payment pages or hosted payment forms and provides a single common integration with payment gateways. In addition, the service enables merchants to:

• Send a token to CRE Secure for future authorization via a new token authorization web service;
• Convert entire existing databases of authorized credit cards into CRE tokens that can be stored in gateway vaults;
• Utilize more rapid tokenization processing because each token is algorithmically unique to the merchant’s gateway account and designed to exceed Visa’s recently published Global Best Practices for card data tokenization;
• Enable tokenization during a secure, hosted transaction in a way that is seamless to the consumer.

The first deployment of CRE Secure’s tokenization service is currently integrated into the Customer Information Manager (CIM) payment card vault of Authorize.Net, a division of CyberSource, a Visa company. Through this interface, users of Authorize.Net’s Advanced Integration Method (AIM) gateway connection can more quickly and easily add Authorize.Net’s CIM payment card storage and bring vault and tokenization capability into their existing merchant accounts.

“Our intent is to develop and bring to market the most intelligently designed, easy to implement payment security services for online retailers,” said Greg McGraw, CEO of CRE Secure Payments, LLC. “Through our patented secure payment solution, merchants have the ability to better control the branding and customer experience of the payment process, which they can now enhance with our tokenization service that will continue to provide even greater flexibility as its gateway vault integrations increase.”

Merchants utilizing CRE Secure’s service achieve full PCI DSS (Payment Card Industry Data Security Standards) compliance relative to their processing of card payments online. These standards were enacted by the world's major credit card companies in response to the growing number of expensive data breaches. Beginning Oct. 1, 2010, new online retailers will no longer be allowed to host credit card transactions in non PCI-approved environments, and those that are not compliant can be fined, have their transaction fees raised, or have their merchant accounts frozen.

About CRE Secure

CRE Secure Payments is a cloud-based Internet payment security company. CRE Secure enables leading ecommerce software solutions and payment software systems distributed worldwide with secure PCI compliant hosted, payment processing solutions using patent pending technology and through its partnerships with top global payment gateways. CRE Secure is a level one PCI DSS certified service provider and a contributing member of the PCI Security Standards Council. For more info, visit www.cresecure.com or call [phone].