存储信用卡信息
可能的重复：
存储信用卡详细信息
有许多网站可以存储信用卡信息。我也需要在我的一个应用程序中将信用卡信息存储在数据库中。但我不知道如何存储它们。我发现我们可以将信用卡号分成几部分并在将其存储到数据库之前对其进行加密。虽然这看起来是个好主意，但我很好奇 Paypal 和 amazon.com 等知名网站是如何做到的。有谁知道他们如何存储信用卡信息？
Possible Duplicate:
Storing credit card details
There are many sites that stores the Credit card information. I too, in one of my application , need to store the credit card information in database. But I don't have any idea how to store them. I found somewhere that we can split the credit card numbers in parts and the encrypt them before storing it to database. Although it seems that a good idea, I am curious how the renowned sites like Paypal and amazon.com are doing it. Does anyone know how they are storing the credit card information?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
如果您必须问此类问题，那么您几乎肯定不应该存储信用卡信息。要做到正确是很困难的，如果你犯了哪怕一个小错误，你可能会给很多人带来很多问题。
我建议将其外包给较大的支付处理商之一，这样您就不必处理它。
如果您想开始了解所面临的挑战，请查看以下网站的数据安全标准：支付卡行业。
If you have to ask this kind of question, you almost certainly shouldn't be storing credit card information. It's tricky to get right, and if you make even one small mistake you could cause a lot of problems for a lot of people.
I'd suggest outsourcing it to one of the larger payment processors, so that you don't have to deal with it.
If you want to start learning about the challenges you face, take a look at the Data Security Standards from the payment card industry.
为了确保卡数据的安全，需要做很多事情。你提到的PayPal、亚马逊和其他PaymentsGateway等公司所经历的过程既昂贵又耗时。他们必须根据支付卡行业标准 (PCI) 进行年度审核。如果您选择走这条路，请记住，获得合规性的成本很高，而保持合规性的成本也很高。
另一种选择是将信用卡数据的存储外包给符合卡存储规则的公司。有些公司会存储数据并为您提供一个令牌，您可以使用它来调用支付数据来更新或收费。
我更喜欢的一个是：www. paymentsgateway.com
There are many things that need to be done to ensure the card data is secure. What companies you mentioned, PayPal, Amazon and other PaymentsGateway, have gone through is expensive and time consuming. They have to go through annual audits based upon Payment Card Industry standards (PCI). If you choose to go this route, keep in mind that it is expensive to get compliant and espensive to stay compliant.
Another option would be to outsouce the storage of the credit card data to a company that is in compliance with the card storage rules. There are companies out there that store the data and provide you back a token you can use to call the payment data to update or charge.
One that I prefer is: www.paymentsgateway.com