Re: Credit Card Processing and PCI compliancy on the Power i

We use BanCard, now we are working on "version 2".  The Version one, in
use redirects the client to the BanCard site where he enters the card
data.  We receive a token telling us if the transaction was successful
or not.  If successful, it gives the "operation number" otherwise gives
the reason for rejecting the transaction.  Version 2 will allow to put
BanCard's page in a iframe, and also register the client's card in
BanCard. We just get a token.  We do not get any card info.

On 12/5/18 12:06 AM, Steinmetz, Paul wrote:

Anyone from the group processing credit cards on the i?

Currently, we do NOT use any credit card terminal devices.
Currently, card data is entered either via green screen application, gui application, IVR, WEB.

We were informed by our processer today that going forward we need to consider having ALL card data entered via a wireless device connected to a separate network, (no longer from any PC device, or any device connected to the I, or the I network) that connects to a cloud based authorizer, and then returns a token back to the I, which in turn is then stored in the I application, to keep the I out of PCI scope and to remain PCI compliant.

Going forward, all current credit card touch points (green screen application, gui application, IVR, WEB) would need changes to stay compliant.

Have others in the group had to deal with this issue and what solutions have anyone implemented?

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/

-- Este e-mail fue enviado desde el Mail Server del diario ABC Color --
-- Verificado por Anti-Virus Corporativo Symantec --