Cloud Payment Processing without Ritualistic Sacrifices
The Payment Card Industry Data Security Standard (PCI-DSS, or simply PCI) governs the many security standards associated with payment card payment interactions. Point of sale systems in today’s brick-and-mortar storefronts fall woefully short of these standards at every step of the transaction work flow. They commonly use outdated desktop computers and store card data locally in plaintext. Backups of these systems, if kept at all, are often stored on unsecured removable media. If we can move some of the payment infrastructure away from the merchant to a central web service, then we can reduce the responsibility of the merchant.
ecommerce, point of sale, Payment Card Industry Data Security Standard