零售销售点信用卡处理-卡存在.最小化PCI合规性要求 [英] Retail point of sale credit card processing - card present. Minimizing PCI compliance requirements

问题描述

我正在为有一些非常特定需求的客户编写销售点应用程序.客户是一家零售商店，因此当他们处理信用卡时，他们会看到一张实物卡并可以刷卡.现在的方式是，在结帐时向收银员提供总计，然后收银员将总计密钥输入信用卡终端(手动-未连接到计算机)，在以下位置刷卡终端，然后在处理付款时，出纳员按信用卡付款"，然后打印收据.

I am writing a point of sale application for a client who has some very specific needs. The client is a retail store, so when they process credit cards, they have a physical card present and can swipe it. The way it is now, at the end of check out, it presents the cashier with a total, and the cashier keys the total into a credit card terminal (by hand--it is not connected to the computer), swipes the card at the terminal and then when the payment is processed, the cashier presses the "Paid by Credit Card" and it prints a receipt.

问题在于合计中的手动键输入非常耗时并且容易出错.我宁愿让我的程序将金额传输到信用卡终端，然后在交易完成后收到一条消息.我不想触摸任何持卡人信息(卡号等)，因为我想离开PCI.我要做的就是汇款并取回已接受"或已拒绝".您可能认为这很普遍，但是我似乎找不到信息. (例如，authorize.net的卡存在API需要我收集并发送卡号.我不想收集并发送卡号.我要发送一定数量并让其他人收集并发送卡号，该过程完成后通知我.)

The problem is that hand keying in totals is time consuming and prone to errors. I'd much rather have my program transmit the amount to a credit card terminal and then get a message when the transaction has been processed. I don't want to touch any card holder information (card number, etc) because I want to stay outside of PCI. All I want to do is send an amount and get back an "accepted" or "declined". You'd think this would be common, but I seem to have failed to find information. (For example, authorize.net's card present API requires me to collect and transmit the card number. I don't want to collect and transmit the card number. I want to transmit an amount and have someone else collect and transmit the card number and notify me when the process is complete.)

有人对此有解决方案吗?是否有人使用Verifone或Ingenico的硬件?我不在乎是否要发送通过USB连接的物理终端或虚拟软件终端的编号.我只是不想自己成为终端机，所以我不在卡数据链中的任何地方.

Does anyone have a solution for this? Has anyone worked with Verifone or Ingenico's hardware? I don't care if I'm sending the number of a physical terminal connected via USB or to a virtual software terminal. I just don't want to be the terminal myself, so that I'm not anywhere in the chain of card data.

推荐答案

您应该查看 payworks .他们提供了一个iOS/Android SDK，以集成一个信用卡读取器.您永远不会触摸信用卡数据.

You should take a look at payworks. They provide a iOS / Android SDK to integrate a credit card reader. You never touch credit card data.

披露:我是payworks的一名软件工程师.

Disclosure: I am a software engineer at payworks.

这篇关于零售销售点信用卡处理-卡存在.最小化PCI合规性要求的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！