Case Study: Quadrac Co. achieves secure, PCI‑DSS compliant contactless MaaS payments with Thales (payShield HSM & CipherTrust Tokenization)

Quadrac Co. - Customer Case Study

Quadrac Co. needed a secure, low-cost cloud payment infrastructure to enable contactless credit-card fares for MaaS in Japan while meeting PCI DSS and supporting DUKPT key management. To build its Q-move SaaS platform, Quadrac Co. selected Thales’s payShield HSM to protect DUKPT keys and Thales’s CipherTrust Tokenization to tokenize card data.

Thales implemented payShield HSM and vaultless CipherTrust Tokenization, enabling Quadrac Co. to obtain PCI DSS certification and launch Q-move commercially in 2020. Tokenization removed card data from the audit scope (reducing operational and audit costs) and the HSM ensured secure, high-speed DUKPT transactions, allowing Q-move to lower initial investment, support multiple rail and bus operators, and scale as an infrastructure for MaaS.

Quadrac Co.

Hirotaka Ito

Cloud Instructure Manager