Home
 
 
Apply Online Now
Retrieve Application
ECI-PAY Login
 
 
Services
  ECI-PAY
Security
Fraud Trak2
Equipment


...the US continues to have the largest Internet population, with 30 percent of the global audience attributed to that one market.
Nielsen NetRatings

 
 ECI-PAY Secure E-Commerce Gateway

The ECI-PAY gateway has security measures in place to protect the loss, misuse and alteration of the information under our control. Security of information in transit to and from our web site is encrypted using SSL encryption protocols. We store all user information in secure databases protected via a variety of access controls as well as using encryption of sensitive information. ECI has been providing credit card processing services over the Internet for over 6 years. Currently we process credit card transactions for over 16,000 merchants worldwide.

Security systems are designed and upgraded in concert with Sun Microsystems and RSA Security and are Eyes Only. Our policy is to report and aggressively pursue, apprehend and prosecute any attempts to breach our systems. To date there have been no successful attempts.

This is a brief overview:

Redundant Sun Microsystems Enterprise 3500 payment-dedicated network servers with four Ultra SparcÔ processors with at least 1 gigabyte of RAM per unit, running UNIX and the most recent version of Solaris. Our system also features symmetrical failover using Veritas FirstwatchÔ and HA for Oracle, and sits behind a Cisco PIX Firewall which also has redundant failover.

Our payment servers are housed at Level (3) facilities in New York City, a state-of-the-art global network that sets new standards for the industry (http://www.level3.com): Physical access protected with biometric (palm scan) identification; Uninterruptible Power Source (UPS) with generator back-up; 24 x 7 worldwide network monitoring. Access to servers is protected via cardkey, palm print and key lock.

All credit card numbers are stored on our Oracle-dedicated Sun E3500 database server.

All credit card numbers are encrypted in real-time within the database using 512 bit RSA Crypto-C technology. RSA Security submits its Crypto-C products for FIPS 140 testing and certification. FIPS 140-1 and the forthcoming FIPS 140-2 are the US Government's standards that specify the security requirements to be satisfied by a cryptographic module. RSA Security supports PNP Security with over 20 years of experience in the security industry.

ECI-PAY Give your customers the feeling of security with our new "powered by" image that you can put directly on your payment pages. Follow these simple instructions to place this image on your site:
  • Copy the following HTML code.
  • Paste the code into your HTML document.
<a href="http://www.eci-corp.com/PHP3/Security.php"><img src="http://www.eci-corp.com/Images/ECIPAYpoweredby.jpg" border="0" width="126" height="35" alt="Powered by ECI-PAY"></a>
 


All credit card numbers are encrypted in real-time within the database...


 
Electronic Commerce International is a registered ISO/MSP of HSBC Bank, New York, New York