Invalid PAN Transformation for Secure Payment Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure transmission and storage of personal account numbers (PANs) are inadequate, as they do not effectively prevent unauthorized access and use of PANs for fraudulent transactions, particularly in compliance with the Payment Card Industry Data Security Standard (PCI DSS).
Innovation Solution
A method and system that transform PANs into invalid PANs by applying conversion rules and tokenization techniques, ensuring the original PAN is hidden and unusable if accessed by unauthorized parties, involving the transformation of a first portion of the PAN according to a conversion rule and the second portion using tokenization, with verification to ensure the transformed PAN is invalid, and subsequent recovery for legitimate transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If PANs are stored and transmitted in original form for transaction processing, then transaction processing efficiency is improved, but security against fraudulent transactions deteriorates
Solution Approach 1:
The PAN is divided into two portions: a first portion that is transformed using conversion rules and a second portion that is tokenized. This segmentation allows the system to maintain transaction processing capability while securing the account number against fraudulent use.
Solution Approach 2:
A transformed PAN is introduced as an intermediary representation that can be stored and transmitted securely. The transformed PAN acts as a mediator between the need for secure storage and the requirement for transaction processing, enabling both objectives to be achieved.
2Object-affected harmful factors
If PANs are transformed into invalid PANs for secure storage, then security against fraudulent transactions is improved, but transaction processing capability deteriorates
Solution Approach 1:
The system performs preliminary transformation of the PAN into an invalid form before storage. When transaction processing is needed, the original PAN is recovered through inverse transformation. This preliminary action ensures security while maintaining operational capability when needed.
Solution Approach 2:
The PAN undergoes parameter changes through conversion rules and tokenization that render it invalid for fraudulent transactions. These parameter changes are reversible through inverse operations, allowing the system to switch between secure storage state and transaction-processing state as needed.
3Reliability
If conversion rules and tokenization are applied to transform PANs, then security compliance with PCI DSS is improved, but system complexity deteriorates
Solution Approach 1:
The transformation process is segmented into distinct operations: conversion rule application on the first portion and tokenization on the second portion. This segmentation makes the complex transformation process more manageable and easier to implement while maintaining PCI DSS compliance.
Data Source
AI summary
A computer-implemented method includes: obtaining, by a computing device, an original Personal Account Number (PAN) to be transformed; transforming, by the computing device, the original PAN to form a transformed PAN; performing, by the computing device, a verification on the transformed PAN; determining, by the computing device, whether the transformed PAN passes verification; and storing or outputting, by the computing device, the transformed PAN based on determining that the transformed PAN does not pass verification, wherein the original PAN is later recovered from the transformed PAN to process a transaction.