Payment Transaction Component Testing With Shadow PAN Mirroring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for testing new payment components in transaction systems are challenging due to the need to ensure compliance with PCI DSS standards while avoiding exposure of live transaction data, and silent mode testing may not accurately reflect real-world conditions.
Innovation Solution
A method involving the use of shadow primary account numbers (PANs) to create shadow transaction messages that mirror actual transactions, allowing testing within a production environment without exposing real data, by replacing the actual PAN with a shadow PAN that replicates its properties, and comparing processed messages for discrepancies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If silent mode testing is used with copied transaction data, then testing can be performed in production environment, but real transaction data may be exposed and customer payment card details compromised
Solution Approach 1:
The patent creates shadow transaction messages that are copies of real transaction messages but with modified PANs (payment card numbers). These shadow messages replicate the structure and flow of real transactions without containing actual sensitive data, enabling testing while preventing data exposure
Solution Approach 2:
The patent introduces shadow PANs as an intermediary between real PANs and the testing process. The shadow PAN acts as a placeholder that maintains the transaction flow and allows validation of payment component functionality without exposing real cardholder data
2Ease of manufacture
If silent mode transactions are used with transaction flags, then testing can be performed, but the test transactions vary from real transactions and may not accurately test payment component capabilities
Solution Approach 1:
The patent creates shadow transaction messages that are exact copies of real transaction messages in structure and content, except for the PAN field. This ensures that the payment component processes identical transaction types without the need for special test flags, maintaining testing accuracy
Solution Approach 2:
The patent modifies only the PAN parameter in transaction messages to create shadow versions. By changing only this specific parameter while keeping all other transaction parameters identical to real transactions, the system achieves accurate testing without introducing test flags that would alter transaction behavior
3Object-affected harmful factors
If testing is performed in development environment rather than production environment, then data security is maintained, but testing may not reflect real-world production conditions
Solution Approach 1:
The patent creates shadow transaction messages that replicate real transaction structures and flows in the production environment. This allows testing to occur in production-like conditions while using copied/modfied data instead of real sensitive data, combining the benefits of both development and production environments
Solution Approach 2:
The shadow PAN acts as an intermediary that enables production environment testing by allowing transaction messages to flow through the same infrastructure as real transactions, while preventing direct use of real sensitive data. This mediator maintains both security and representativeness
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer-implemented method of testing a transaction component within a production environment of a transaction system against a legacy transaction component, the transaction component being configured to route transaction messages between an issuer and an acquirer during a cardholder transaction using a transaction card having a primary account number (PAN), the method comprising: receiving a transaction message, the transaction message comprising a plurality of data fields, one of the plurality of data fields comprising the PAN of the transaction card; associating the PAN with a shadow primary account number (PAN), the shadow PAN replicating the format of the PAN; creating a shadow transaction message, the shadow transaction message comprising a plurality of data fields, one of the plurality of data fields comprising the shadow PAN; sending the received transaction message to the legacy transaction component for processing; sending the shadow transaction message to the transaction component for processing; receiving a processed transaction message from the legacy component; receiving a processed shadow transaction message from the transaction component; comparing the data fields of the processed transaction message and processed shadow transaction message for any discrepancies.