{"id":95279,"date":"2026-08-14T08:05:28","date_gmt":"2026-08-14T01:05:28","guid":{"rendered":"https:\/\/impress.vn\/?p=95279"},"modified":"2026-08-14T08:05:28","modified_gmt":"2026-08-14T01:05:28","slug":"epp-atm-dau-hieu-hong-pci-pts-thay-the","status":"publish","type":"post","link":"https:\/\/impress.vn\/en\/tin-tuc\/epp-atm-dau-hieu-hong-pci-pts-thay-the\/","title":{"rendered":"EPP ATM: 5 D\u1ea5u Hi\u1ec7u H\u1ecfng, H\u1ea1n PCI PTS V\u00e0 Quy Tr\u00ecnh Thay Th\u1ebf Chu\u1ea9n"},"content":{"rendered":"

EPP ATM<\/strong> (Encrypting PIN Pad \u2013 b\u00e0n ph\u00edm m\u00e3 h\u00f3a) l\u00e0 linh ki\u1ec7n duy nh\u1ea5t tr\u00ean m\u00e1y ATM m\u00e0 khi h\u1ecfng, k\u1ef9 thu\u1eadt vi\u00ean kh\u00f4ng th\u1ec3 “s\u1eeda t\u1ea1m” \u0111\u1ec3 ch\u1ea1y ti\u1ebfp. Kh\u00e1c v\u1edbi card reader hay cash dispenser, m\u1ed9t EPP \u0111\u00e3 k\u00edch ho\u1ea1t c\u01a1 ch\u1ebf tamper s\u1ebd t\u1ef1 xo\u00e1 to\u00e0n b\u1ed9 kho\u00e1 m\u00e3 ho\u00e1 b\u00ean trong (zeroize) v\u00e0 v\u0129nh vi\u1ec5n kh\u00f4ng x\u1eed l\u00fd \u0111\u01b0\u1ee3c PIN, d\u00f9 ph\u1ea7n c\u1ee9ng v\u1eabn nguy\u00ean v\u1eb9n. Trong b\u1ed1i c\u1ea3nh th\u1ecb tr\u01b0\u1eddng Vi\u1ec7t Nam c\u00f2n 20.699 m\u00e1y ATM t\u00ednh \u0111\u1ebfn cu\u1ed1i th\u00e1ng 3\/2026 (gi\u1ea3m 3,01% so v\u1edbi c\u00f9ng k\u1ef3), m\u1ed7i ca thay EPP sai quy tr\u00ecnh \u0111\u1ec1u \u0111\u1ea9y m\u00e1y v\u00e0o t\u00ecnh tr\u1ea1ng out-of-service nhi\u1ec1u ng\u00e0y. B\u00e0i vi\u1ebft li\u1ec7t k\u00ea 5 d\u1ea5u hi\u1ec7u nh\u1eadn bi\u1ebft EPP h\u1ecfng, c\u00e1c m\u1ed1c h\u1ebft h\u1ea1n PCI PTS ph\u1ea3i l\u00ean k\u1ebf ho\u1ea1ch t\u1eeb b\u00e2y gi\u1edd, v\u00e0 quy tr\u00ecnh thay th\u1ebf 7 b\u01b0\u1edbc k\u00e8m checklist b\u00e0n giao.<\/p>\n

EPP ATM l\u00e0 g\u00ec v\u00e0 v\u00ec sao kh\u00f4ng s\u1eeda \u0111\u01b0\u1ee3c nh\u01b0 linh ki\u1ec7n ATM th\u00f4ng th\u01b0\u1eddng<\/h2>\n

EPP l\u00e0 m\u1ed9t module b\u1ea3o m\u1eadt kh\u00e9p k\u00edn: m\u00e3 PIN \u0111\u01b0\u1ee3c m\u00e3 ho\u00e1 ngay b\u00ean trong b\u00e0n ph\u00edm, kho\u00e1 m\u00e3 ho\u00e1 kh\u00f4ng bao gi\u1edd r\u1eddi kh\u1ecfi v\u1ecf thi\u1ebft b\u1ecb. \u0110\u1ed5i l\u1ea1i, EPP \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf tamper-responsive<\/em> \u2014 c\u1ea1y v\u1ecf, khoan, th\u00e1o kh\u1ecfi bracket ho\u1eb7c thay \u0111\u1ed5i nhi\u1ec7t \u0111\u1ed9 b\u1ea5t th\u01b0\u1eddng \u0111\u1ec1u k\u00edch ho\u1ea1t c\u01a1 ch\u1ebf t\u1ef1 hu\u1ef7 kho\u00e1.<\/p>\n

H\u1ec7 qu\u1ea3 v\u1eadn h\u00e0nh r\u1ea5t r\u00f5 r\u00e0ng: sau khi zeroize, EPP b\u00e1o l\u1ed7i tamper\/security v\u00e0 kh\u00f4ng x\u1eed l\u00fd PIN n\u1eefa, k\u1ec3 c\u1ea3 khi b\u00e0n ph\u00edm c\u00f2n t\u1ed1t v\u1ec1 c\u01a1 kh\u00ed. Kh\u00f4ng c\u00f3 ph\u01b0\u01a1ng \u00e1n s\u1eeda ch\u1eefa \u2014 ch\u1ec9 c\u00f3 thay th\u1ebf k\u00e8m n\u1ea1p kho\u00e1 l\u1ea1i (key injection) b\u1edfi \u0111\u01a1n v\u1ecb \u0111\u01b0\u1ee3c u\u1ef7 quy\u1ec1n. \u0110\u00e2y l\u00e0 \u0111i\u1ec3m kh\u00e1c bi\u1ec7t l\u1edbn so v\u1edbi s\u1ef1 c\u1ed1 l\u1ed7i nu\u1ed1t th\u1ebb ATM t\u1eeb card reader<\/a>, v\u1ed1n th\u01b0\u1eddng x\u1eed l\u00fd t\u1ea1i ch\u1ed7 trong 15\u201330 ph\u00fat.<\/p>\n

5 d\u1ea5u hi\u1ec7u EPP ATM \u0111ang h\u1ecfng \u2014 nh\u1eadn di\u1ec7n tr\u01b0\u1edbc khi m\u00e1y d\u1eebng<\/h2>\n\n\n\n\n\n\n\n\n\n
#<\/th>\nD\u1ea5u hi\u1ec7u<\/th>\nBi\u1ec3u hi\u1ec7n k\u1ef9 thu\u1eadt<\/th>\nM\u1ee9c \u0111\u1ed9 \/ H\u00e0nh \u0111\u1ed9ng<\/th>\n<\/tr>\n<\/thead>\n
1<\/td>\nL\u1ed7i tamper khi kh\u1edfi \u0111\u1ed9ng<\/td>\nM\u00e1y b\u00e1o l\u1ed7i b\u1ea3o m\u1eadt, d\u1eebng \u1edf supervisor mode, kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c m\u00e0n h\u00ecnh giao d\u1ecbch<\/td>\nNghi\u00eam tr\u1ecdng \u2013 thay ngay<\/td>\n<\/tr>\n
2<\/td>\nPIN sai h\u00e0ng lo\u1ea1t<\/td>\nTr\u00ean 5 giao d\u1ecbch li\u00ean ti\u1ebfp c\u00f9ng m\u1ed9t m\u00e1y b\u00e1o sai PIN, trong khi th\u1ebb d\u00f9ng b\u00ecnh th\u01b0\u1eddng \u1edf ATM kh\u00e1c<\/td>\nCao \u2013 ki\u1ec3m tra kho\u00e1\/DUKPT<\/td>\n<\/tr>\n
3<\/td>\nPh\u00edm ch\u1ebft ho\u1eb7c nh\u1ea5n k\u00e9p<\/td>\nM\u00f2n m\u00e0ng ph\u00edm sau kho\u1ea3ng 500.000\u20131.000.000 l\u01b0\u1ee3t nh\u1ea5n<\/td>\nTrung b\u00ecnh \u2013 l\u00ean l\u1ecbch thay<\/td>\n<\/tr>\n
4<\/td>\nTimeout khi m\u1edf phi\u00ean PIN<\/td>\nCore kh\u00f4ng nh\u1eadn ph\u1ea3n h\u1ed3i t\u1eeb EPP trong 30 gi\u00e2y; th\u01b0\u1eddng do c\u00e1p ho\u1eb7c bo giao ti\u1ebfp<\/td>\nCao \u2013 ki\u1ec3m tra trong 24h<\/td>\n<\/tr>\n
5<\/td>\nV\u1ebft c\u1ea1y, keo l\u1ea1, l\u1ec7ch khung<\/td>\nD\u1ea5u hi\u1ec7u skimming ho\u1eb7c t\u1ea5n c\u00f4ng v\u1eadt l\u00fd quanh m\u1eb7t b\u00e0n ph\u00edm<\/td>\nNghi\u00eam tr\u1ecdng \u2013 d\u1eebng m\u00e1y, b\u00e1o an ninh<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

L\u01b0u \u00fd v\u1ec1 m\u00e3 l\u1ed7i:<\/strong> m\u1ed7i h\u00e3ng d\u00f9ng b\u1ed9 m\u00e3 ri\u00eang \u2014 NCR s\u1eed d\u1ee5ng d\u1ea3i m\u00e3 trong kho\u1ea3ng 002\u2013998 cho c\u00e1c module t\u1ef1 ph\u1ee5c v\u1ee5, trong khi Diebold Nixdorf, Wincor Nixdorf v\u00e0 Hyosung c\u00f3 b\u1ea3ng m\u00e3 ho\u00e0n to\u00e0n kh\u00e1c. Tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng tra c\u1ee9u ch\u00e9o m\u00e3 l\u1ed7i gi\u1eefa c\u00e1c h\u00e3ng; h\u00e3y \u0111\u1ed1i chi\u1ebfu \u0111\u00fang t\u00e0i li\u1ec7u k\u1ef9 thu\u1eadt c\u1ee7a d\u00f2ng m\u00e1y \u0111ang v\u1eadn h\u00e0nh tr\u01b0\u1edbc khi k\u1ebft lu\u1eadn nguy\u00ean nh\u00e2n.<\/p>\n

H\u1ea1n PCI PTS: l\u1ecbch thay EPP ATM c\u1ea7n \u0111\u01b0a v\u00e0o ng\u00e2n s\u00e1ch t\u1eeb 2026<\/h2>\n

Ngay c\u1ea3 khi b\u00e0n ph\u00edm c\u00f2n ch\u1ea1y t\u1ed1t, ph\u00ea duy\u1ec7t b\u1ea3o m\u1eadt c\u1ee7a n\u00f3 v\u1eabn h\u1ebft h\u1ea1n theo l\u1ed9 tr\u00ecnh c\u1ee7a PCI Security Standards Council. \u0110\u00e2y l\u00e0 r\u00e0ng bu\u1ed9c tu\u00e2n th\u1ee7, kh\u00f4ng ph\u1ea3i khuy\u1ebfn ngh\u1ecb k\u1ef9 thu\u1eadt.<\/p>\n\n\n\n\n\n\n\n\n
Phi\u00ean b\u1ea3n<\/th>\nM\u1ed1c th\u1eddi gian<\/th>\nH\u00e0nh \u0111\u1ed9ng c\u1ea7n l\u00e0m<\/th>\n<\/tr>\n<\/thead>\n
PTS POI v3<\/td>\nThi\u1ebft b\u1ecb h\u1ebft h\u1ea1n ph\u1ea3i thay b\u1eb1ng v4.x tr\u1edf l\u00ean ch\u1eadm nh\u1ea5t 30\/04\/2026<\/td>\n\u0110\u00e3 qu\u00e1 h\u1ea1n \u2013 ki\u1ec3m k\u00ea v\u00e0 thay ngay<\/td>\n<\/tr>\n
PTS POI v4<\/td>\nH\u1ebft h\u1ea1n ph\u00ea duy\u1ec7t 30\/04\/2024 (\u0111\u00e3 gia h\u1ea1n t\u1eeb 30\/04\/2023)<\/td>\nKh\u00f4ng mua m\u1edbi; l\u1eadp k\u1ebf ho\u1ea1ch thay th\u1ebf<\/td>\n<\/tr>\n
PTS POI v5<\/td>\nH\u1ebft h\u1ea1n 30\/04\/2027 (gia h\u1ea1n t\u1eeb 30\/04\/2026)<\/td>\nC\u00f2n kho\u1ea3ng 20 th\u00e1ng \u0111\u1ec3 b\u1ed1 tr\u00ed ng\u00e2n s\u00e1ch<\/td>\n<\/tr>\n
PTS POI v6<\/td>\nD\u00f9ng cho ph\u00ea duy\u1ec7t thi\u1ebft b\u1ecb m\u1edbi \u0111\u1ebfn 30\/06\/2026<\/td>\n\u01afu ti\u00ean ch\u1ecdn khi mua linh ki\u1ec7n ATM m\u1edbi<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

M\u1ed9t \u0111i\u1ec3m d\u1ec5 b\u1ecb b\u1ecf s\u00f3t: EPP t\u1eebng \u0111\u01b0\u1ee3c ph\u00ea duy\u1ec7t theo chu\u1ea9n EPP v4.x ph\u1ea3i tr\u1ea3i qua \u0111\u00e1nh gi\u00e1 l\u1ea1i to\u00e0n b\u1ed9 theo y\u00eau c\u1ea7u POI v6 \u2014 kh\u00f4ng c\u00f3 c\u01a1 ch\u1ebf “gia h\u1ea1n m\u1ec1m”. V\u1edbi m\u1ea1ng l\u01b0\u1edbi 300 m\u00e1y, thay kho\u1ea3ng 1\/3 s\u1ed1 EPP m\u1ed7i n\u0103m ng\u00e2n s\u00e1ch l\u00e0 m\u1ee9c kh\u1ea3 thi; d\u1ed3n to\u00e0n b\u1ed9 v\u00e0o qu\u00fd cu\u1ed1i tr\u01b0\u1edbc h\u1ea1n th\u01b0\u1eddng d\u1eabn t\u1edbi thi\u1ebfu h\u00e0ng v\u00e0 gi\u00e1 t\u0103ng 15\u201330%. Chi ti\u1ebft m\u1ed1c gia h\u1ea1n \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 trong bulletin ch\u00ednh th\u1ee9c c\u1ee7a PCI SSC<\/a>.<\/p>\n

Quy tr\u00ecnh thay th\u1ebf EPP ATM: 7 b\u01b0\u1edbc b\u1eaft bu\u1ed9c<\/h2>\n
    \n
  1. Ki\u1ec3m k\u00ea tr\u01b0\u1edbc khi \u0111\u1eb7t h\u00e0ng.<\/strong> Ghi model EPP, part number, phi\u00ean b\u1ea3n PTS v\u00e0 ng\u00e0y s\u1ea3n xu\u1ea5t c\u1ee7a t\u1eebng m\u00e1y.<\/li>\n
  2. \u0110\u1eb7t \u0111\u00fang part number.<\/strong> EPP kh\u00f4ng t\u01b0\u01a1ng th\u00edch ch\u00e9o gi\u1eefa c\u00e1c d\u00f2ng m\u00e1y, th\u1eadm ch\u00ed gi\u1eefa c\u00e1c \u0111\u1eddi c\u00f9ng h\u00e3ng; sai firmware l\u00e0 nguy\u00ean nh\u00e2n tr\u1ea3 h\u00e0ng ph\u1ed5 bi\u1ebfn nh\u1ea5t.<\/li>\n
  3. M\u1edf phi\u00ean b\u1ea3o tr\u00ec c\u00f3 ki\u1ec3m so\u00e1t.<\/strong> T\u1ed1i thi\u1ec3u 2 ng\u01b0\u1eddi, c\u00f3 ghi h\u00ecnh v\u00e0 log m\u1edf k\u00e9t.<\/li>\n
  4. Th\u00e1o EPP c\u0169, ni\u00eam phong ngay.<\/strong> Ghi serial v\u00e0o bi\u00ean b\u1ea3n; d\u00f9 kho\u00e1 \u0111\u00e3 zeroize, thi\u1ebft b\u1ecb v\u1eabn ph\u1ea3i qu\u1ea3n l\u00fd nh\u01b0 t\u00e0i s\u1ea3n b\u1ea3o m\u1eadt.<\/li>\n
  5. L\u1eafp EPP m\u1edbi.<\/strong> Thi\u1ebft b\u1ecb xu\u1ea5t x\u01b0\u1edfng kh\u00f4ng c\u00f3 kho\u00e1 s\u1ed1ng n\u00ean ch\u01b0a x\u1eed l\u00fd \u0111\u01b0\u1ee3c PIN \u2014 \u0111\u00e2y l\u00e0 tr\u1ea1ng th\u00e1i b\u00ecnh th\u01b0\u1eddng, kh\u00f4ng ph\u1ea3i l\u1ed7i.<\/li>\n
  6. Key injection.<\/strong> Th\u1ef1c hi\u1ec7n b\u1edfi b\u00ean \u0111\u01b0\u1ee3c u\u1ef7 quy\u1ec1n (TDES\/DUKPT ho\u1eb7c remote key loading). N\u1ebfu n\u1ea1p sai kho\u00e1, thi\u1ebft b\u1ecb ph\u1ea3i g\u1eedi l\u1ea1i c\u01a1 s\u1edf injection \u2014 m\u1ea5t th\u00eam 3\u20137 ng\u00e0y.<\/li>\n
  7. Test end-to-end.<\/strong> T\u1ed1i thi\u1ec3u 3 giao d\u1ecbch th\u1eed v\u1edbi th\u1ebb test tr\u00ean 2 acquirer kh\u00e1c nhau, \u0111\u1ed1i chi\u1ebfu electronic journal.<\/li>\n<\/ol>\n

    Checklist b\u00e0n giao sau khi thay EPP<\/h3>\n