National Payment Card System (NPCS) (ViPNet HSM PS (Hardware Security Module))

"National Payment Card System" (NPCS) — operator of national payment system "Mir" which purpose is ensuring uninterrupted operation of efficiency and availability of rendering services in money transfer — in the development strategy announced one of priority tasks creation of the national operational and independent platform using competitive Russian technologies, including in the field of data protection.

Preparation of the standards regulating use of the Russian cryptographic algorithms and mechanisms in national payment system is supervised by technical committee on standardization "Cryptographic information protection" (shopping mall 26). Management of activity of technical committee is performed by FSB of Russia.

In 2015 the management of the Central Bank of the Russian Federation, FSB of Russia and NSCP approved "road map" on implementation and use of HSM of the Russian production within the National Payment Card System, and within shopping mall 26 subcommittee No. 3 (PC 3) "Cryptographic algorithms and mechanisms in the National Payment Card System of the Russian Federation" is organized.

"Within PC 3 in January, 2016 the working group for work on formation of drafts of methodical recommendations is created. The leading developers and CIPF producers, smart cards, payment terminals and ATMs were a part of the working group, – Elena Mareeva, the head of the working group at shopping mall subcommittee No. 3 26 comments. – Now the working group of PC 3 prepared eight drafts of methodical recommendations about application of domestic cryptoalgorithms in main engines of security of Mir payment system: formation of derivative keys of the payment application, the protected message exchange in the course of issue of payment cards, formation of applied cryptograms in payment systems, etc. In 2017 works on security mechanisms in the field of e-commerce and mobile application of the World cards, authentication of terminal equipment and the protected management of cryptographic keys and applications of payment terminals are planned.

The most active participation in development and justification of methodical recommendations is accepted by representatives of NSCP companies, Infotecs, Crypto Pro and SPB".