ISTech Support Forum - Credit Card Encryption Reverse / Warning

jhepola

Browser

Is this corn
hand-shucked? -- Bob
Wiley

Posts: 26
Gender: male

Credit Card Encryption Reverse / Warning
04/03/06 at 11:40:12

Situation where a company uses a Crystal Report to read it's Credit Card numbers. Obviously the encryption has altered this ability.

1) It would be nice if AR-T asked for a confirmation to proceed with this encryption process--it wasn't clear that running this program would do this.

2) Now that the data is encrypted is there a tool to reverse this?

3) Or, is there a report/query in DBA/EVO where I can list current SO's and the CC info. regarding these?

Thanks,

Back to top

John Hepola
TechnoResources Inc.

IP Logged

JNAPIER Active Member Evil-Evo Bad Dog! Posts: 533 Gender:	Re: Credit Card Encryption Reverse / Warning Reply #1 - 04/03/06 at 12:39:56 It is a matter of privacy and security to have that data encrypted. It is in violation of your Merchant Account to store ANY CC info other than encrypted. John
Back to top	EVO-ERP, ISTS 3.27.08 , 2000I 10 user IP Logged

Lynn_Pantic Administrator evolution (n) - gradual change to a different form Posts: 5681	Re: Credit Card Encryption Reverse / Warning Reply #2 - 04/03/06 at 17:40:50 True enough, John, that's why we did it. But that said, there obviously needs to be a way to get it back out so that charges can actually be run. AR-T can see them one at a time, but what other options are both desirable and meet the merchant agreements?
Back to top	Lynn Pantic IS Tech Support lynn@istechsupport.com IP Logged

David Waldmann

Active Member

Live to work, or
work to live?

Posts: 1924
Gender: male

Re: Credit Card Encryption Reverse / Warning
Reply #3 - 04/04/06 at 03:30:10

I'm not sure how the encryption works.

I currently print the credit card info on what DBA thinks is an Invoice (heavily modified SOF form that has only the pertinent info needed to process a charge). I also print the last 4 (or 5, in the case of AMEX) digits of the card number on the real invoice that we send so the customer knows what card they used. Will this still work with the encryption, or can you only read the numbers in the new AR-T? Also, is that the only place you enter them now, as opposed to in CM-A?

Back to top

David N Waldmann
President
Vermont Hardwoods
Chester, VT

Evo-ERP, 5 user
IST Build: 3/4/19, patched 04/30/19
Pervasive v11.31
Server 2012 / Win10 x64
Crystal Reports v11

IP Logged

Lynn_Pantic

Administrator

evolution (n) -
gradual change to a
different form

Posts: 5681

Re: Credit Card Encryption Reverse / Warning
Reply #4 - 04/04/06 at 06:41:08

SD-Q controls whether they can be seen in AR-A, CM-A, Neither or Both. If the viewing in AR-A and/or CM-A is disabled, then you can see that a card is on file (************1234) and the expiration date.

If access in AR-A or CM-A is disabled, then you can't save them either. We could change that, what do you think?

Back to top

Lynn Pantic
IS Tech Support
lynn@istechsupport.com

IP Logged

David Waldmann

Active Member

Live to work, or
work to live?

Posts: 1924
Gender: male

Re: Credit Card Encryption Reverse / Warning
Reply #5 - 04/05/06 at 06:40:25

Quote from Lynn Pantic on 04/04/06 at 06:41:08:

If access in AR-A or CM-A is disabled, then you can't save them either.

What does that mean? ???

I guess I should install the update so I can get a better handle on what's there and how it works, but what is the suggested/required method to get the info for processing? Also, how is the CVV2 handled?

Back to top

David N Waldmann
President
Vermont Hardwoods
Chester, VT

Evo-ERP, 5 user
IST Build: 3/4/19, patched 04/30/19
Pervasive v11.31
Server 2012 / Win10 x64
Crystal Reports v11

IP Logged

JNAPIER Active Member Evil-Evo Bad Dog! Posts: 533 Gender:	Re: Credit Card Encryption Reverse / Warning Reply #6 - 04/05/06 at 06:48:18 Currently you have to view the customer to get the # and their is no CVV2 field. We use IC Verify software for CC processing. It has its own encrypted database so we really have no need to store them in DBA. John
Back to top	EVO-ERP, ISTS 3.27.08 , 2000I 10 user IP Logged

David Waldmann Active Member Live to work, or work to live? Posts: 1924 Gender:	Re: Credit Card Encryption Reverse / Warning Reply #7 - 04/05/06 at 10:42:09 John, I have looked at several stand-alone PC based systems and had narrowed it down to IC Verify, but haven't bitten the bullet on it yet. How do you (or anyone) handle CVV2s? I have found that sometimes the CC will not be approved without it, so I feel like we need to get it.
Back to top	David N Waldmann President Vermont Hardwoods Chester, VT Evo-ERP, 5 user IST Build: 3/4/19, patched 04/30/19 Pervasive v11.31 Server 2012 / Win10 x64 Crystal Reports v11 IP Logged

JNAPIER Active Member Evil-Evo Bad Dog! Posts: 533 Gender:	Re: Credit Card Encryption Reverse / Warning Reply #8 - 04/06/06 at 06:20:55 IC Verify is great. No dial-up, connects through your DSL. It has both CVV2 and Address verification. It will approve without either but our rates are better if you have both correct. Encrypted database for all your customers info. John
Back to top	EVO-ERP, ISTS 3.27.08 , 2000I 10 user IP Logged

David Waldmann Active Member Live to work, or work to live? Posts: 1924 Gender:	Re: Credit Card Encryption Reverse / Warning Reply #9 - 04/07/06 at 06:46:04 Quote from JNAPIER on 04/06/06 at 06:20:55: It has both CVV2... I thought the regulations required that you couldn't keep it on file?
Back to top	David N Waldmann President Vermont Hardwoods Chester, VT Evo-ERP, 5 user IST Build: 3/4/19, patched 04/30/19 Pervasive v11.31 Server 2012 / Win10 x64 Crystal Reports v11 IP Logged

JNAPIER Active Member Evil-Evo Bad Dog! Posts: 533 Gender:	Re: Credit Card Encryption Reverse / Warning Reply #10 - 04/07/06 at 07:15:01 Quote from David Waldmann on 04/07/06 at 06:46:04: I thought the regulations required that you couldn't keep it on file? That is probably correct. IC Verify doesn't have a field for CVV2 in the customer database. John
Back to top	EVO-ERP, ISTS 3.27.08 , 2000I 10 user IP Logged

David Waldmann Active Member Live to work, or work to live? Posts: 1924 Gender:	Re: Credit Card Encryption Reverse / Warning Reply #11 - 04/10/06 at 13:20:08 Quote from JNAPIER on 04/07/06 at 07:15:01: IC Verify doesn't have a field for CVV2 in the customer database. Is there an "extra" field that you use, or....?
Back to top	David N Waldmann President Vermont Hardwoods Chester, VT Evo-ERP, 5 user IST Build: 3/4/19, patched 04/30/19 Pervasive v11.31 Server 2012 / Win10 x64 Crystal Reports v11 IP Logged

JNAPIER

Active Member

Evil-Evo Bad Dog!

Posts: 533
Gender: male

Re: Credit Card Encryption Reverse / Warning
Reply #12 - 04/10/06 at 13:51:42

Quote from David Waldmann on 04/10/06 at 13:20:08:

Is there an "extra" field that you use, or....?

It is in the transaction screen when you enter a charge. You put it in for every transaction. It will not save it. We have a separate Excell sheet that very discretely saves this info. No mention of Credit Card, CCV2 just our own internal way of saving it. You would see 7147862354-0879-656. Cust code, last 4 digits of card and CCV2. I hope we are still legal with this method.

John

Back to top

EVO-ERP, ISTS 3.27.08 , 2000I 10 user

IP Logged

jhepola Browser Is this corn hand-shucked? -- Bob Wiley Posts: 26 Gender:	Re: Credit Card Encryption Reverse / Warning Reply #13 - 04/11/06 at 08:48:18 Back on my original question: Does EVO give the ability for me to customize a report that would show all open SO's in a listing and include the customer's credit card number? Also, I'd like this for Invoices.
Back to top	John Hepola TechnoResources Inc. IP Logged

JNAPIER

Active Member

Evil-Evo Bad Dog!

Posts: 533
Gender: male

Re: Credit Card Encryption Reverse / Warning
Reply #14 - 04/11/06 at 09:56:40

Quote from jhepola on 04/11/06 at 08:48:18:

Back on my original question:

Does EVO give the ability for me to customize a report that would show all open SO's in a listing and include the customer's credit card number?

Also, I'd like this for Invoices.

I would question if it is legal to do so. I know in IC Verify, I can't print out ANY of our customers CC #'s Everything is truncated when printing anything.

John

Back to top

EVO-ERP, ISTS 3.27.08 , 2000I 10 user

IP Logged