Mobile phone service provider heightens PCI compliance

IBM WebSphere technology delivers rapid time to value

Published on 05-Mar-2012

"In spite of the fact that we had an existing Oracle upper level architecture, the IBM team showed us the strong value proposition of the IBM WebSphere solution." - Project lead, Oracle SOA team, prepaid mobile phone service provider

Customer:
Mobile phone service provider

Industry:
Telecommunications

Deployment country:
United States

Solution:
Service Oriented Architecture

Overview

This company is a large, no-contract, prepaid mobile phone service provider in the United States. A rapidly growing communications enterprise, it has a customer base of more than 19 million subscribers.

Business need:
To avoid fines and minimize liability, the company needed to satisfy an urgent mandate to comply with Payment Card Industry (PCI) standards.

Solution:
The company augmented its existing investment in IBM WebSphere DataPower Integration Appliance XI50 software with additional WebSphere DataPower Integration Appliance XI50 devices.

Benefits:
The solution delivered rapid time to value for achieving PCI compliance and helped bolster edge security for the company’s SOA and security architecture.

Case Study

This company is a large, no-contract, prepaid mobile phone service provider in the United States. A rapidly growing communications enterprise, it has a customer base of more than 19 million subscribers.

Challenge
Like most organizations that accept payment card transactions, this company needed to ensure that all applications used to store, process or transmit cardholder data comply with a broad set of security requirements. The company needed a solution to satisfy an urgent Payment Card Industry (PCI) compliance mandate. Noncompliance would potentially subject the company to surcharges, fines and increased liability in the event of a security breach.

Solution
After IBM provided a two-day on-site demonstration, the company augmented its existing investment in IBM WebSphere® technology with additional WebSphere DataPower Integration Appliance XI50 devices. In spite of the fact that the company had a service-oriented architecture (SOA) based on Oracle software, the Oracle SOA project lead decided that the IBM solution offered the quickest route to PCI compliance.

The WebSphere DataPower Integration Appliance XI50 software will help bolster edge security for the company’s SOA and security architecture and will also help the company comply with PCI mandates. Further, the WebSphere DataPower Integration Appliance XI50 application optimization provides a simple way to accomplish load balancing in the company’s network topology.

The company plans to migrate components of its existing architecture from its Oracle enterprise service bus (ESB) software to the WebSphere DataPower Integration Appliance XI50 platform. The company is also making application changes to position the WebSphere DataPower Integration Appliance XI50 technology as the core of its infrastructure.

Benefits
• Delivers rapid time to value for achieving PCI compliance
• Bolsters edge security for the SOA and security architecture
• Improves load balancing within the network topology

For more information
To learn more about IBM WebSphere software, contact your IBM sales representative or IBM Business Partner, or visit:
ibm.com/integration

Products and services used

IBM products and services that were used in this case study.

Software:
WebSphere DataPower Integration Appliance XI50

Legal Information

© Copyright IBM Corporation 2012 IBM Global Services Route 100 Somers, NY 10589 U.S.A. Produced in the United States of America February 2012 IBM, the IBM logo, ibm.com, and WebSphere are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current listof IBM trademarks is available on the Web at “Copyright and trademark information” at: ibm.com/legal/copytrade.shtml This document is current as of the initial date of publication and may be changed by IBM at any time. Not all offerings are available in every country in which IBM operates. The performance data and client examples cited are presented for illustrative purposes only. Actual performance results may vary depending on specific configurations and operating conditions. THE INFORMATION IN THIS DOCUMENT IS PROVIDED “AS IS” WITHOUT ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDING WITHOUT ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OR CONDITION OF NON-INFRINGEMENT. IBM products are warranted according to the terms and conditions of the agreements under which they are provided.