在 iPhone 应用程序中存储信用卡详细信息
我们开发iPhone应用程序来销售一些东西 我们希望帮助用户快速购买（“一键式”） 我发现了类似的问题，但它们都与网站有关，
您可以回答 - 在设备上的应用程序内保存 CC 详细信息（号码、姓名、到期日期 - 没有 CVC 代码，用户必须在支付页面上输入）是否合法？ 所有数据仅存储在应用程序内部
从我们这边来看，它看起来像： 用户将数据保存在他的个人资料中，并使用此信息在我们的应用程序内快速填写付款表格。 如果用户丢失了他的设备 - 这是他的错:) 还是我错了？
We develop iPhone App for sale some things
We want to help users buy quickly ("in 1 touch")
I found similar questions but they are all about websites
May you answer - Is this legal to save details of CC (number, name, exp date - without CVC code, which user have to enter on the payment page) inside the App on the device ?
All data stored only inside App
From our side it looks like:
user save data in his profile and use this info for quick filling of payment form inside our App.
If user loses his device - it's his fault :) or am I wrong?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
在您的应用程序中存储信用卡数据是合法的。但是，您的应用程序需要符合 PCI 标准。请在此处阅读：https://www.pcisecuritystandards.org/。如果由于您的软件而发生欺诈违规行为，VISA/Mastercard 可以处以巨额罚款，每次违规最高可达数十万美元。这可不是一件可以轻易惹事的事情。
It is legal to store credit card data in your application. However, your application needs to be PCI compliant. Read up on this here: https://www.pcisecuritystandards.org/. There are hefty fines that VISA/Mastercard can leverage if a fraud breach occurs due to your software, up to hundereds of thousands of dollars per transgression. This isn't the kind of thing to mess with lightly.
DJ Quimby 说得对（他的答案就在这个提要中）。一旦您完成了允许信用卡支付的移动应用程序的开发，您将需要第三方来执行安全评估并确定您是否已令人满意地满足支付卡行业 (PCI) 支付应用程序数据安全标准 (PA-DSS) 1.2 版涉及持卡人数据保护。如果您在应用程序中存储完整的信用卡号和/或到期日期，则它将无法通过此 PCI 评估。如果没有通过评估，您的应用程序将被 iTunes 应用商店拒绝。
DJ Quimby has it right (his answer is in this feed). Once you complete the development of a mobile app that allows for credit card payments you'll need a third party to perform security assessment and determine whether you have satisfactorily met the Payment Card Industry (PCI) payment Application Data Security Standard (PA-DSS) version 1.2 related to the protection of cardholder data. If you're storing the full credit card number and/or expiration date in your app, it will not pass this PCI assessment. Without passing the assessment your app will be rejected by the iTunes app store.
是的，这是合法的。
不，您的商业银行可能不喜欢这种方式。
不，这根本不是一个好主意。
不，Apple 不会批准您的应用。
Yes, it's legal.
No, it's probably not something your merchant bank will be a fan of.
No, it's not a good idea at all.
No, Apple won't approve your app.
我猜您计划开发自己的应用程序支付系统。这是苹果公司禁止的。您必须使用 storeKit 框架。苹果已经将信用卡信息存储在他们这边，这样你就少了一个需要考虑的问题:)
I am guessing that you plan on developing your own in App payment system. This is forbidden by Apple. You must use the storeKit framework. Apple already stores the credit card info on their side so you have one less problem to think about :)