ATP Tamper-Proof TSE Flash Storage Certified Technical Security Solutions for German Fiscal Market

ATP Electronics, Inc. has announced its lineup of Technical Security Devices (TSE), also known as Certified Technical Security Solutions (CTSS), for the German fiscal market.

These solutions comply with the statutory requirements set by the German Federal Office for Information Security (BSI) that electronic cash registers and PC-based POS systems that are in or going into service in Germany should be equipped with a TSE to avoid manipulation of the transaction data for the purpose of tax fraud.

According to BSI regulation TR-03153, all electronic cash registers in Germany need to be equipped with a TSE approved and certified by the BSI by December 31, 2022. Cash registers that have been in service by the end of 2019 may be retrofitted any time before this deadline; however, new systems shipped from 2020 onwards are required to use a TSE from September 30, 2020 at the latest, thanks to a grace period that was recently given by German authorities to allow for a smoother transition.

TSE is security system that ensures tamper-proof recording to make sure that stored data cannot be manipulated.
It typically consists of two components:

• Security Module Application for Electronic Record-keeping Systems (SMAERS) – manages the transaction data flow from the cash register into the CSP and the NAND and prepares the data if requested by the tax authorities.

• Cryptographic Service Provider (CSP) – digitally signs transactions, which are then stored in the NAND media.

“Rock-solid security is a critical requirement of mission-critical applications and the Internet of Things (IoT). As more intelligent things become connected, we have greater opportunities, but we are also faced with more vulnerabilities to cyber threats and attacks,” said David Raquet, director, security enablement, ATP. “The ATP TSE devices are integral components of our wholistic solutions that intensively address security concerns in the industry. Under the SecurStor umbrella, ATP offers a suite of customizable features that protect mission-critical applications vs. unauthorized access to data or systems to prevent any form of manipulation.“

The TSE storage solutions leverage the long-term business relationships with suppliers of cash registers for the German market. They are compliant with the TR-03153 spec as defined by the BSI, and also integrate a number of additional features, tools and performance optimizations targeted for POS applications. Among other things, these include a set of drivers and operation tools for all major platforms and OSs, which can be integrated into the cash register software and ensures the reliable transmission of transaction data into the TSE.

They will be available in a variety of form factors and capacities, including microSD, SD and USB, and will be certified by the TÜV Informationstechnik GmbH to assure a quality standards and compliance with the certification requirements defined by the BSI.

Click to enlarge

The TSE storage solutions are part of the SecurStor Security Suite, the company’s answer to the growing security needs in the industry. SecurStor protects mission-critical applications vs. unauthorized access to data or systems. SecurStor-enabled products include features that include, but goes beyond, conventionally available data-at-rest protection mechanisms and can be customized to the individual requirements of an application or a system.

Click to enlarge