Ten Commandments of Web Payments

Posted by John B. Frank Monday, March 9, 2009

The Ten Commandments of the Web Payment Card Industry

I   Thou shalt assume that the operating system software environment is compromised by all sorts of malware.

II   All cards shall be secured with a PIN number.

III No user will ever be asked to provide their PIN to anyone.

IV All PIN numbers shall be entered via a secure I/O method, either an encryptedPED or controlled keyboard input.

V    All credit card PIN’s must differ from your bank issued PIN.

VI   All card, personal, and key information shall be encrypted in volatile siliconand/or memory prior to transmission.

VII At no time will any sensitive data be transmitted in the clear.

VIII No card or account data will be stored in user accessible storage.

IX   All silicon will be secured to a circuit board with a Tamper ProofModule or Trusted Platform Module.

X      On any wPCI certified web portal, no two parties will directly transmitaccount information to one another.

0 comments

Post a Comment

Learn More About Us

Find out how our patented technology can empower your financial institution.

Our secure two-factor online banking authentication eliminates dangerous passwords and usernames and replicates the same trusted process used to access cash at ATM's. (Insert Bank Issued Card, Enter Bank Issued PIN)

There is an R.O.I. as FI's also earn recurring revenue from each transaction conducted using our PCI 2.0 Certified PIN Entry Device. Our technology also provides a unique real-time P2P "Instant-Transfer" which allows your online banking customer to transfer cash from ANY of their bankcards to ANY other bankcard...with the Swipe of a card.

Help your bank eliminate phishing and your customers avoid identity theft by providing them with the ability to stop typing and start swiping. There is no safer way to conduct financial transactions online than by 3DES DUKPT encrypting the cardholder details, which we do at the mag-head "inside the box/outside the browser."

All Top Banking