我应该如何将信用卡信息从 iPhone 应用程序发布到 Windows 服务器？
将信用卡信息从 iPhone 应用程序发布到 Windows 服务器的最安全方法是什么？
我的 iOS 应用程序销售一些商品，例如裙子。
What is the most secure way to post credit card information from my iPhone application to a Windows server?
My iOS app sells some goods, like dresses.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
（IANA 信用卡商家，在阅读其他 SO 问题后，我在这里只玩一个）
如果您正在处理显式信用卡数据，那么您应该整个系统都符合 PCI 标准。查看以下内容：
pci 安全标准
和
pci 合规指南
如果您要自动化此操作（即从您的 iPhone 购买一件衣服），则与您打交道的 CC 商家应该具有明确定义的信用卡处理协议。您应该询问他们希望如何发送数据。我的一般理解是，您不保留任何内容，只需将其传递给为您处理所有财务事务的公司，然后仅传回交易验证。
(IANA Credit card merchant, I only play one here after reading other SO questions)
If you are dealing with explicit credit card data then you should be PCI compliant across your whole system. See things like:
pci security standards
and
pci compliance guide
If you are automating this (IE buy a dress from your iPhone) the CC Merchant that you are dealing with should have well defined protocols for handling credit cards. You should be asking them how they want the data sent. My general understanding is that you do not retain anything and just pass it through to the company who does all the financial stuff for you and the just passes back a validation for the transaction.
看看迈克尔。您可以通过以下方法将信用卡信息从 iPhone 应用程序发布到 Windows 服务器。首先，您在发布信用卡信息时可以使用“https//”，因为您的所有信息都会通过安全通道。
将信用卡信息从 iPhone 应用程序发布到 Windows 服务器的第二个选项是使用 VPN 连接进行连接。当我想保护敏感数据时，我通常使用 VPN 连接。目前我正在使用 PureVPN 连接，它对我的所有敏感信息进行加密，并且所有信息都通过安全的加密隧道传递，未经授权的人无法访问我的敏感信息。
Look Michael. There are following ways through which you can post your credit card information from your iPhone application to a windows server. First you can use a "https//" when you are posting your credit card information because all of your information go through a secured channel.
The second option to post your credit card information from you iPhone app to windows server is to connect yourself with a VPN connection. I usually use VPN connection when I want to secure my sensitive data. Currently I am using PureVPN connection, that encrypt all of my sensitive information and all the information passes through secured encrypted tunnel and no unauthorized person can access to my sensitive information.
我完全同意 Shivam 和 Simons 的观点。大多数情况下，我们的所有电子商务网站都托管在“https”上，允许用户自由地放置他们的 CC 详细信息并在他们想要的任何地方购物。如果您愿意在 IOS 手机上浏览并购买应用程序，那么我认为您应该在 google 上搜索 VPN。它是当今最好、最可靠的工具之一，不仅使用户能够通过安全通道进行电子商务交易，而且还从各个方面保护用户数据。我认为获得证书不是一个好的选择，因为它涉及某些程序和准则。
I completely agreed with Shivam and Simons. Mostly we have all e-commerce sites hosted on "https" which allow users to freely put their CC details and shop wherever they want to. a part from this if you are willing to surf around and shop through an application on your IOS phone then i think you should considerably google for VPN. It is one of the best and most reliable tool these days which enable users not only to make e-commerce transaction through secure channel but also protects users data through all aspects. I think going for Certificates won't be a good option as it involves certain procedures and guidelines.
如果您连接到 Windows 服务器上的 Web 服务，您可以启用服务器 ssl，让客户端（iPhone 应用程序）使用 https 链接发布您的数据。
如果这是使用某些专有协议的某些专有服务，您可以考虑使用公钥加密。使用一次性 AES 密钥加密数据。发送加密数据。使用您的公钥加密 AES 密钥并将其发送。服务器用您的私钥解密对称 AES 密钥，然后解密数据！
我个人更喜欢第一个选项（SSL）而不是第二个！
If it is a webservice that you connect to on your Windows server, you can make the server ssl enabled have the client (iphone app) POST your data using the https link.
If this is some proprietary service using some proprietary protocol, you can consider using public key cryptography. Encrypt data with a one time AES key. Send the encrypted data. Encrypt the AES key with your public key and send it along. The server decrypts the symmetric AES key with your private key and thereafter decrypts the data !
I'd personally prefer the first option (SSL) over the second anytime !