信用卡 - 卡存档服务？
有人有信用卡卡档案服务的经验吗？该服务可以处理持续购买的信用卡信息的存储？
我们正在寻找一种解决方案，可以通过 Web 服务或类似服务与自定义 ASP.NET 应用程序集成，但从我们这边删除信息存储，以降低风险并满足 PCI 合规性问题。
我们需要一个解决方案，允许我们对卡通行证系统进行不同金额的持续计费，而不是每月固定订阅计费。
Does anyone have any experience with card on file services for credit cards, that handle the storage of credit card information for ongoing purchases?
We are looking for a solution that can be integrated with a custom ASP.NET app via a web service or similar but removes the storage of the info from our side of the equation in order to reduce risk and meet PCI compliance issues.
We need a solution that allows for us to do ongoing billing at different varied amounts for a card pass system, not recurring monthly fixed subscription billings.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
我不想听起来像个骗子，但我会看看Cybersource，它有一个存储服务就像你建议的那样。 Cybersource 还购买了针对小型企业的 Authorize.net。
I don't mean to sound like a shill, but I would check out Cybersource, which has a storage service like you're suggesting. Cybersource also purchased Authorize.net, which is targeted towards smaller businesses.
我建议您与您的银行联系并询问他们的建议。 然后我还会直接致电维萨卡和万事达卡，看看谁是他们的首选。
我基本上需要来自将参与该交易过程的人的口碑推荐，因为他们对此有经济利益。 即：您的银行。
当然，仍然存在出现问题的可能性。 像 ChoicePoint 这样的大公司甚至存在安全问题。 尝试确保它是一家上市公司。 这样你就可以做一些尽职调查来检查他们的资产和合作伙伴，以确保它适合你。
I'd recommend talking to your bank and asking them for recommendations. Then I'd also call Visa and Mastercard directly to see who's at the top of their lists.
I'd basically require a word of mouth recommendation from someone who is going to be part of that transaction process because they have a financial interest in this. ie: your bank.
Of course, there is still the possibility of problems. Big names like ChoicePoint have even had security problems. Try to make sure it's a publicly traded company. That way you can do a little due diligence in checking out their assets and partners to make sure it works for you.
最好的办法是集成到支持“标记化”的支付网关。 基本上，当您进行初始交易时，网关会处理该卡，然后向您发送回该交易的令牌。 您可以将该令牌用于任何后续交易，例如重复销售和原始费用退款。 我个人曾使用过支持这些功能的 MerchantWARE 网关。 还有其他一些。 这些网关基本上充当卡号的保管库，但由于您只是来回发送令牌，因此 PCI 不适用。 请记住，初始交易仍将您置于 PCI 范围内，因为它包含信用卡数据，除非您使用也可以卸载第一笔交易的软件。
Best thing to do is integrate to a payment gateway that supports 'tokenization'. Basically, when you do the initial transaction, the gateway processes the card and then sends you back a token for that transaction. You can use that token for any subsequent transactions such as repeat sales and refunds of the original charge. I personally have worked with the MerchantWARE gateway which supports these features. There's also a few others out there. These gateways basically act as a vault for the card numbers but since you are just sending the token back and forth, PCI does not apply. Keep in mind that the initial transaction still puts you in scope of PCI since that has the credit card data unless you use a software that offloads that first transaction as well.