Case Study: YES BANK achieves secure, scalable UPI mobile payments with Thales Luna Network HSMs

YES BANK Secures Mobile Payment Transactions with Thales Luna HSMs

YES BANK, a frontrunner in deploying India’s Unified Payments Interface (UPI), needed strong, scalable security to protect sensitive user credentials and private keys used in smartphone payment transactions. To meet NPCI requirements while keeping the service simple and future‑proof, YES BANK selected Thales’ Luna Network HSM to encrypt sensitive data and provide a tamper‑resistant hardware vault for private keys.

Thales implemented the Luna Network HSM as the root of trust—securing RSA‑2048 private keys within a FIPS 140‑2 certified boundary and providing APIs for the required decryption/re‑encryption and multithreaded transaction processing. As a result, YES BANK achieved NPCI compliance, established a secure root of trust across the UPI payment flow, and enabled reuse of the HSM for SSL, digital signing, e‑KYC, PAN verification and other projects, expanding the bank’s encryption and key‑vaulting capabilities.

Yes Bank

Anup Purohit

Chief Information Officer