存储信用卡详细信息 [英] Storing credit card details

问题描述

我有一项业务需求，迫使我在短时间内存储客户的完整信用卡详细信息(号码、姓名、到期日期、CVV2).

I have a business requirement that forces me to store a customer's full credit card details (number, name, expiry date, CVV2) for a short period of time.

理由:如果客户打电话订购产品，而他们的信用卡当场被拒绝，您很可能会失去这笔交易.如果你拿了他们的详细信息，感谢他们的交易，然后发现卡被拒绝了，你可以给他们回电话，他们更有可能找到另一种支付产品的方式.如果接受信用卡，您将从订单中清除详细信息.

Rationale: If a customer calls to order a product and their credit card is declined on the spot you are likely to lose the sale. If you take their details, thank them for the transaction and then find that the card is declined, you can phone them back and they are more likely to find another way of paying for the product. If the credit card is accepted you clear the details from the order.

我无法改变这一点.现有系统以明文形式存储信用卡详细信息，而在我正在构建以替换它的新系统中，我显然不会复制它！

I cannot change this. The existing system stores the credit card details in clear text, and in the new system I am building to replace this I am clearly not going to replicate this!

那么，我的问题是如何在短时间内安全地存储信用卡.我显然想要某种加密，但最好的方法是什么?

My question, then, is how I can securely store a credit card for a short period of time. I obviously want some kind of encryption, but what's the best way to do this?

环境:C#、WinForms、SQL-Server.

Environment: C#, WinForms, SQL-Server.

推荐答案

基本上避免承担将 CC 详细信息保存在您身边的责任，但是我可以假设您正在使用第三方服务进行交易，例如PayPal/Verisign 或其他任何东西，它们中的大多数都有 API，可让您将 CC 凭据保存在他们身边，并且他们会给您一个密钥，您可以稍后使用该密钥来完成或启动交易，因此他们会处理困难的部分，而您所要做的就是将此字符串键存储在您的数据库中.

Basically avoid by all means taking the responsiblity to save the CC details on your side, however I can assume you are using a thirdparty service to do your transaction such as PayPal/Verisign or whatever, most of them have API's that enables you to save CC credentials at their side, and they give you back a key that you can then use later to complete or initiate transactions, so they take care of the hard part, while all what you have to do is store this string key in your DB.

这篇关于存储信用卡详细信息的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！