Author
Jevgenijs Smirnovs
Document name
Point VxPC F02.01.xxx
Implementation Guide
E-mail
jevgenijs.smirnovs@verifone.com
Date
12-Jun-2015
Phone
+371 67844726
Page number
13
Version
1.0
© 2015 VeriFone. All rights reserved. VeriFone, the VeriFone logo, Vx, Mx, VeriCentre, VeriShield, Verix V, Verix and PAYware are either
trademarks or registered trademarks of VeriFone in the United States and/or other countries. All other trademarks or brand names are the
properties of their respective holders. All features and specifications are subject to change without notice.
The information contained in this document is confidential and property of VeriFone, Inc. This material may not be copied or published, or
divulged in part or in totality without written permission form VeriFone, Inc.
er data unless absolutely necessary, truncating cardholder data if full PAN is not needed, and not
sending unprotected PANs using end-user messaging technologies, such as e-mail and instant mes-
saging.
Please refer to the PCI DSS and PA-DSS Glossary of Terms, Abbreviations, and Acronyms for defini-
tions of “strong cryptography” and other PCI DSS terms.”, reference 2.
b. How your Point Vx helps you meet this requirement
Point Vx never stores full magnetic stripe data from the card. For offline transactions PAN and expiry
date are stored encrypted using a unique key per transaction or (in case of ISO8583) generated 3DES
double-length key, which is retained until file exists in terminal. The file is deleted once all content is
sent and confirmed by host.
Point Vx never displays full PAN of the card on the screen (except manual PAN entry dialogue). Full
list of instances where PAN could be output to store outside of the application control represented
in “Appendix C”.
At transaction time PAN is truncated before it is stored, only the first 6 and last 4 digits are stored, or
encrypted in case of ISO8583. For printout of receipts and reports the truncated PAN is sent to the
ECR.
Point Vx never uses end-user messaging technologies for cardholder data sending.
c. What this means to you
For cards read by the Point Vx magnetic stripe reader or chip card reader you do not have to take
any action.
For manually entered PAN and for voice referrals it is never allowed to write down or otherwise
store PAN, expiration date or CVV2.
To Next Page
Loading...
Need help?
General
