Frequently asked questions about PCI 3DS
Frequently asked questions about PCI 3DS
What's PCI 3DS certification?
Europay, Mastercard, and Visa (EMV) 3-D Secure (3DS) is a messaging protocol that enables cardholders to authenticate themselves with their issuing institutions during card-not-present (CNP) online transactions, preventing unauthorized transactions and reducing the risk of fraud for users.
PCI 3DS is a core security standard established by the global payments industry for the 3DS protocol. It is designed to regulate the security controls of the 3DS operating environment and ensure the integrity of the 3DS transaction process as well as the confidentiality of data. This standard applies to entities and environments that implement the core functions of 3DS, including the Access Control Server (ACS), Directory Server (DS), 3DS Server (3DSS), as well as the infrastructure, system components, management processes, and personnel security protocols that support these functions.
Huawei Cloud has obtained PCI 3DS certification, demonstrating that it meets the requirements of the authoritative standards set by the global mainstream financial industry, providing you with a cloud infrastructure that complies with these standards on a global scale.
In addition, to address the ever-changing cloud environment and services, Huawei Cloud regularly invites third-party organizations to conduct reviews in accordance with certification requirements, ensuring that the security of Huawei Cloud services remains at the forefront of the industry.
What's the relationship between PCI 3DS certification and PDC DSS certification?
PCI 3DS and PCI DSS are independent standards designed for specific types of entities. The former primarily applies to environments that perform 3DS functions, such as Access Control Servers (ACS), Directory Servers (DS), and 3DS Servers (3DSS), while the latter applies to any entity that stores, processes, or transmits payment card account data.
Which data centers are covered by Huawei Cloud's PCI 3DS certification?
The PCI 3DS certification covers Huawei Cloud's more than 70 data centers across China, Singapore, Thailand, Chile, Mexico, and Brazil. You can download Huawei Cloud's PCI 3DS certificate from Compliance Certificates.
Which Huawei Cloud services are covered by PCI 3DS certification?
The PCI 3DS certification covers many Huawei Cloud services, from network, compute, and storage, to security, enterprise applications, and business intelligence services. For more information, see Huawei Cloud's PCI DSS certificate, which you can download from Compliance Certificates.
If you would like to learn more about our products, please contact us.
Can my organization become PCI 3DS-certified automatically by using Huawei Cloud?
Although Huawei Cloud has earned PCI 3DS certification and provides you with secure and reliable cloud services on this basis, using services provided by Huawei Cloud does not certify your organization's compliance with PCI 3DS. PCI 3DS certification requires us to establish, implement, maintain, and continuously improve information security controls within our organizations based on the PCI 3DS standards and best practices released. To have your organization certified by PCI 3DS, you can invite an independent third-party certifying body.