Case Study
Alex Lee, Inc., solves PCI performance problem with encryption software from Prime Factors
Encrypting cardholder data from more than 100 grocery stores had become a challenge for the Information Technology (IT) staff at Alex Lee, Inc., the parent company of Lowes Foods.
Alex Lee's IT staff needed to encrypt a large amount of historical cardholder data, and attempted to do it with hardware devices. But the Host Security Modules (HSMs) couldn't encrypt data fast enough. Alex Lee's mainframes are only available for three hours each day to send cardholder data to the HSMs for encryption.
Performance Problem
"It was going to take us several weeks just to encrypt historical cardholder data," said Janice Sakkal, Programmer/Analyst. Alex Lee also is required to encrypt cardholder data on a daily basis to comply with the Payment Card Industry (PCI) Data Security Standard (DSS).
The short, three-hour window for encrypting cardholder data, and a deadline to get it done by December 31, 2007, forced Alex Lee to look for an alternative data security solution. Alex Lee contacted another grocery store chain, which recommended the STK Toolkit, high-performance, flexible encryption software from Prime Factors, Inc.
After contacting Prime Factors to confirm that the STK Toolkit would meet their needs in an IBM mainframe environment, Alex Lee took advantage of the company's standard, free 30-day trial. With help from Prime Factors' support team, Alex Lee developed a test environment in less than two weeks.
STK Toolkit Faster Than Hardware Encryption
"Using the STK Toolkit, Alex Lee processed between 2,900 and 18,000 transactions per minute during testing," said Janice Sakkal, Programmer/Analyst. This compared to 495 transactions per minute processed by the HSMs.
"We really like the performance," Sakkal said. "It has significantly reduced the time to encrypt the data."
The STK Toolkit is faster because it runs on the mainframe using high-speed assembly instructions. The HSMs encrypt data by communicating with the mainframe over a network. They can't encrypt data any faster than the network speed, which is much slower than mainframe processing power.
Sakkal said that a week of accounts took just over an hour to process online using the STK Toolkit. In batch, four weeks of historical cardholder data took a little more than an hour to encrypt. She estimates that it would have taken a week or more to do the encryption using the hardware devices. And that was an undesirable option because the hardware devices process transactions on-line and would have created a competition for scarce computer resource.
STK Toolkit Worth The Investment
"I am truly delighted with the STK Toolkit," Sakkal said. "It does everything as advertised."
The STK Toolkit has ready-to-use utilities that reduced programming time and sped up the Alex Lee encryption project. It meets many security requirements by encrypting data in batch or real-time and by encrypting and authenticating fields, records or whole files on disk or tape. Use the Toolkit to encrypt individual data items such as names, salary amounts, accounts numbers, SSNs, PINs, imagine files and passwords.
The STK Toolkit has a wide range of capabilities to protect and authenticate data including the Triple DES algorithm used by Alex Lee. It also provides various methods of generating and protecting passwords.
In addition to a significant performance advantage over hardware encryption, the STK Toolkit frees up computer resources for other transaction processing. Alex Lee can get all its encryption done during the three-hour window when there is no computer activity from the grocery store operation.
"The STK Toolkit was definitely worth the investment," said Randy Miller, Director of Computer Operations.
FREE 30-Day Trial
Download a fully-functional version of the STK Toolkit. During your 30-day free trial, experience personalized support and advice that separates Prime Factors from the competition. More information about the STK Toolkit.
