| 摘要 |
<p>The invention relates to a gateway for providing point to point encryption (P2PEG) for the communication of sensitive data for card-present transactions from a card reading device to a transaction processing system using a communication network. The sensitive data for a transaction is encrypted at the card reading device such that said encrypted transaction data is transmitted from the card reading device through a merchant environment towards said transaction processing system. The encrypted transaction data is redirected via said P2PEG 3.9, wherein the P2PEG comprises a secure decryption module (SDM) for accessing a decryption key for decrypting the encrypted transaction data. Responsive to the receipt of the encrypted transaction data at the P2PEG, the SDM is configured to decrypt the encrypted transaction data such that the decrypted transaction with the sensitive data is transmitted to the transaction processing system via the communication network. A subsystem is also provided which further utilises a secure interface device and tokens to avoid encrypted data passing through a merchant environment. The gateway of the present invention is capable of providing P2PE for a payment transaction system without requiring any significant changes to be made to an existing transaction processing system, such as an existing Payment Service Provider (PSP) system.</p> |
