PCI-Secure Standard Software
Bayanin samfur: PCI-Secure Software Standard dillali
Jagoran Aiwatarwa don Tashar Viking 2.00
Ƙayyadaddun bayanai
Shafin: 2.0
1. Gabatarwa da Taimako
1.1 Gabatarwa
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software
yana ba da jagororin aiwatar da software akan Viking
Tashar 2.00.
1.2 Tsarin Tsaro na Software (SSF)
Tsarin Tsaro na Software (SSF) yana tabbatar da amintaccen biyan kuɗi
aikace-aikacen akan Viking Terminal 2.00.
1.3 Jagorar Aiwatar da Mai siyarwar Software - Rarraba da
Sabuntawa
Wannan jagorar ya ƙunshi bayani kan rarrabawa da sabuntawa
na Jagorar Aiwatar da Mai siyarwar Software don Tashar Viking
2.00.
2. Amintaccen Aikace-aikacen Biyan Kuɗi
2.1 Aikace-aikacen S/W
Amintaccen software na aikace-aikacen biyan kuɗi yana tabbatar da tsaro
sadarwa tare da mai biyan kuɗi da ECR.
2.1.1 Biyan Mai watsa shiri sadarwar TCP/IP saitin siga
Wannan sashe yana ba da umarni don kafa TCP/IP
sigogi don sadarwa tare da mai biyan kuɗi.
2.1.2 Sadarwar ECR
Wannan sashe yana ba da umarni don sadarwa tare da
ECR (Rijistan Kuɗi na Lantarki).
2.1.3 Sadarwa don karɓar bakuncin ta hanyar ECR
Wannan sashe yana bayanin yadda ake kafa sadarwa tare da
mai biyan kuɗi ta amfani da ECR.
2.2 Kayan aikin tasha masu goyan baya
Amintaccen aikace-aikacen biyan kuɗi yana goyan bayan Viking Terminal 2.00
hardware.
2.3 Manufofin Tsaro
Wannan sashe yana zayyana manufofin tsaro da ya kamata su kasance
bi lokacin amfani da amintaccen aikace-aikacen biyan kuɗi.
3. Tabbataccen Sabunta software mai nisa
3.1 Aiwatar da Kasuwanci
Wannan sashe yana ba da bayani kan cancantar amintattu
sabunta software na nesa don 'yan kasuwa.
3.2 Manufofin Amfani Mai karɓuwa
Wannan sashe yana zayyana ingantaccen tsarin amfani don amintaccen
m software updates.
3.3 Firewall na sirri
Umarni don saita Tacewar zaɓi na sirri don ba da izini
Ana samar da ingantaccen sabunta software na nesa a wannan sashe.
3.4 Tsare-tsaren Sabunta nesa
Wannan sashe yana bayanin hanyoyin gudanar da amintattu
m software updates.
4. Tsare Tsare-Tsare na Bayanan Hankali da Kariya na Ajiye
Bayanan Mai Kati
4.1 Aiwatar da Kasuwanci
Wannan sashe yana ba da bayani kan cancantar amintattu
shafe mahimman bayanai da kare bayanan da aka adana a katin
ga yan kasuwa.
4.2 Amintaccen Shawarar Shafi
An ba da umarnin don share mahimman bayanai a amintattu
a wannan sashe.
4.3 Wuraren da aka Ajiye bayanan mai katin
Wannan sashe yana lissafin wuraren da ake adana bayanan mariƙin
kuma yana bada jagora akan kare shi.
Wannan sashe yana bayanin hanyoyin da aka jinkirta
ma'amalolin izini amintacce.
4.5 Hanyoyin magance matsala
Umarnin don warware matsalolin da suka shafi amintattu
Ana ba da gogewa da kare bayanan da aka adana a cikin katin
wannan sashe.
4.6 Wuraren PAN - An Nuna ko Bugawa
Wannan sashe yana gano wuraren da PAN (Asusun Farko
Lamba) ana nunawa ko bugu kuma yana ba da jagora akan tsaro
shi.
4.7 Gaba files
Umarni don sarrafa gaggawa filean samar da su cikin aminci
wannan sashe.
4.8 Gudanar da Maɓalli
Wannan sashe yana bayyana mahimman hanyoyin gudanarwa don tabbatarwa
tsaron bayanan mai katin da aka adana.
4.9 '24 HR' Sake yi
Umarni don sake yin '24 HR' don tabbatar da tsarin
an samar da tsaro a wannan sashe.
4.10 Lissafin labarun kan layi
Wannan sashe yana ba da bayani game da jerin abubuwan da aka ba da izini da kuma sa
mahimmanci wajen kiyaye tsarin tsaro.
5. Tabbatarwa da Gudanarwa
Wannan sashe yana ɗaukar matakan tantancewa da samun dama
don tabbatar da tsaron tsarin.
Tambayoyin da ake yawan yi (FAQ)
Tambaya: Menene maƙasudin Ma'aunin Software na PCI-Secure
Jagorar Aiwatar da Mai siyarwa?
A: Jagoran yana ba da jagororin aiwatar da amintaccen biyan kuɗi
software na aikace-aikacen akan Viking Terminal 2.00.
Tambaya: Wanne kayan masarufi na tasha ne ke tallafawa ta amintaccen biyan kuɗi
aikace-aikace?
A: Amintaccen aikace-aikacen biyan kuɗi yana goyan bayan Viking Terminal
2.00 hardware.
Tambaya: Ta yaya zan iya share mahimman bayanai?
A: Umarnin don amintacce share mahimman bayanai sune
an bayar a sashe na 4.2 na jagorar.
Tambaya: Menene mahimmancin yin rajista?
A: Lissafin ba da izini yana taka muhimmiyar rawa wajen kiyaye tsarin
tsaro ta hanyar ba da izinin aikace-aikacen da aka amince kawai suyi aiki.
An rarraba wannan abun cikin azaman Ciki
Nets Denmark A/S tarihin farashi
Jagorar Aiwatar da Madaidaicin Mai siyarwar Software na PCI-Secure Software don tashar Viking 2.00
Shafin 2.0
PCI-Secure Software Daidaitaccen Jagorar Aiwatar da Mai siyarwa v2.0 don Viking Terminal 2.00 1 1
Abubuwan da ke ciki
1. Gabatarwa da Iyaka………………………………………………………………………………………………………. 3
1.1
Gabatarwa …………………………………………………………………………………………………………………. 3
1.2
Tsarin Tsaro na Software (SSF)……………………………………………………………………… 3
1.3
Jagorar Aiwatar da Mai siyarwar Software - Rarrabawa da Sabuntawa …… 3
2. Amintaccen Aikace-aikacen Biyan Kuɗi………………………………………………………………………………………………………………
2.1
Aikace-aikacen S/W ………………………………………………………………………………………………………………… 4
2.1.1 Biyan Mai watsa shiri sadarwar TCP/IP saitin siga………………………….. 4
2.1.2 Sadarwar ECR……………………………………………………………………………………… 5
2.1.3 Sadarwa don karɓar bakuncin ta hanyar ECR……………………………………………………………………………… 5
2.2
Kayan aikin tasha masu goyan baya……………………………………………………………………………….. 6
2.3
Manufofin Tsaro ………………………………………………………………………………………………… 7
3. Tabbataccen Sabunta Software na Nisa………………………………………………………………………. 8
3.1
Canjin Kasuwanci………………………………………………………………………………………………………………
3.2
Manufofin Amfani Mai karɓuwa……………………………………………………………………………………………………… 8
3.3
Firewall na sirri…………………………………………………………………………………………………………………………………………
3.4
Hanyoyin Sabunta Nisa………………………………………………………………………………………………………………
4. Tsare Tsare-Tsare na Bayanan Hankali da Kariya na Ajiye bayanan mai katin9
4.1
Canjin Kasuwanci………………………………………………………………………………………………………………
4.2
Tsare-tsare Tsare-Tsare Umarni………………………………………………………………………………………………………………………………
4.3
Wuraren da aka Ajiye bayanan mai riƙe da kati……………………………………………………………….. 9
4.4
Kasuwancin Izinin da aka jinkirta………………………………………………………. 10
4.5
Hanyoyin magance matsalar …………………………………………………………………………………………………………………………………………………
4.6
Wuraren PAN - Nunawa ko Bugawa………………………………………………………………………………
4.7
Da sauri files………………………………………………………………………………………………………………………………………
4.8
Gudanarwa mai mahimmanci …………………………………………………………………………………………………………………………………………
4.9
Sake yi '24 HR'………………………………………………………………………………………………………… 12
4.10 Rubuce-rubuce ………………………………………………………………………………………………………………………………………………………………… 12
5. Tabbatarwa da Sarrafa Hannu…………………………………………………………………. 13
5.1
Ikon shiga ………………………………………………………………………………………………………… 13
5.2
Sarrafa kalmar wucewa……………………………………………………………………………… 15
6. Shiga………………………………………………………………………………………………………………………………………………
6.1
Canjin Kasuwanci……………………………………………………………………………………………… 15
6.2
Sanya Saitunan Log…………………………………………………………………………………………………. 15
6.3
Babban Saka…………………………………………………………………………………………………………………………………………
6.3.1 Kunna alamar shiga tasha…………………………………………………………………………………………………………
6.3.2
6.3.3 Saƙo mai nisa……………………………………………………………………………………………………………… 16
6.3.4 Kuskuren shiga nesa……………………………………………………………………………………………………………………… 16
7. Mara waya ta hanyar sadarwa …………………………………………………………………………………………………………………………………………………
7.1
Canjin Kasuwanci……………………………………………………………………………………………… 16
7.2
Shawarar Saitunan Mara waya…………………………………………………………………………
8. Rarraba cibiyar sadarwa ………………………………………………………………………………………………………………….. 17
8.1
Canjin Kasuwanci……………………………………………………………………………………………… 17
9. Samun Nesa………………………………………………………………………………………………………………………………………………………………………………
9.1
Canjin Kasuwanci……………………………………………………………………………………………… 17
10.
Isar da Bayanan Hankali ………………………………………………………………………………………………………………… 17
10.1 Isar da Bayanan Hankali………………………………………………………………………………………………………
10.2 Raba bayanai masu ma'ana zuwa wasu software…………………………………………………………
10.3 Imel da Bayanan Hankali……………………………………………………………………………………………… 17
10.4 Ba-Console Samun Gudanarwa………………………………………………………………. 17
11.
Hanyar Sigar Sigar Viking………………………………………………………………………. 18
12.
Umarni game da Amintaccen Shigar Faci da Sabuntawa. …………. 18
13.
Sabunta Sakin Viking………………………………………………………………………………. 19
14.
Abubuwan Buƙatun da Ba a Aiwatar da su ba……………………………………………………………………………… 19
15.
PCI Secure Software Standard Bukatun Magana ………………………… 23
16.
Kamus na Sharuɗɗa………………………………………………………………………………………………. 24
17.
Ikon Takardu……………………………………………………………………………………………………… 25
2
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
1. Gabatarwa da Taimako
1.1 Gabatarwa
Manufar wannan PCI-Secure Software Daidaitaccen Jagorar Aiwatar da Mai siyarwar Software shine don samar da masu ruwa da tsaki tare da cikakkiyar jagora akan ingantaccen aiwatarwa, daidaitawa, da aiki na software na Viking. Jagoran ya umurci 'yan kasuwa kan yadda ake aiwatar da aikace-aikacen Nets' Viking a cikin mahallinsu a cikin daidaitaccen ma'auni na PCI Secure Software. Ko da yake, ba a nufin ya zama cikakken jagorar shigarwa ba. Aikace-aikacen Viking, idan an shigar da shi bisa ga ƙa'idodin da aka rubuta anan, yakamata ya sauƙaƙe, kuma ya goyi bayan yarda da PCI na ɗan kasuwa.
1.2 Tsarin Tsaro na Software (SSF)
Tsarin Tsaro na Software na PCI (SSF) tarin ma'auni ne da shirye-shirye don ingantaccen ƙira da haɓaka software na aikace-aikacen biyan kuɗi. SSF ta maye gurbin Ma'aunin Tsaro na Data Aikace-aikacen Biyan (PA-DSS) tare da buƙatun zamani waɗanda ke tallafawa nau'ikan software na biyan kuɗi, fasaha, da hanyoyin haɓakawa. Yana ba dillalai ma'auni na tsaro kamar PCI Secure Software Standard don haɓakawa da kiyaye software na biyan kuɗi ta yadda zai kare ma'amalar biyan kuɗi da bayanai, rage lahani, da kare kai daga hare-hare.
1.3 Jagorar Aiwatar da Mai siyarwar Software - Rarrabawa da Sabuntawa
Wannan Jagorar Aiwatar da Madaidaicin Mai siyarwar Software na PCI Secure Software yakamata a yada shi ga duk masu amfani da aikace-aikacen da suka dace gami da yan kasuwa. Ya kamata a sabunta shi aƙalla kowace shekara kuma bayan canje-canje a cikin software. Shekara-shekara review kuma ɗaukaka yakamata ya haɗa da sabbin canje-canjen software da canje-canje a cikin Ma'auni na Amintaccen Software.
Nets yana buga bayanai akan jeri webshafin idan akwai wani sabuntawa a cikin jagorar aiwatarwa.
WebYanar Gizo: https://support.nets.eu/
Don ExampLe: Nets PCI-Secure Software Standard Software Procession Exerment Guide Guide to duk abokan ciniki, masu siyarwa, da masu haɗawa. Abokan ciniki, Masu Sake siyarwa, da Masu Haɗin kai za a sanar da su daga sakeviews da sabuntawa.
Ana iya samun sabuntawa zuwa PCI-Secure Software Standard Process Software dillali ta hanyar tuntuɓar Nets kai tsaye, haka nan.
Wannan Jagorar Aiwatar da Madaidaicin Mai siyarwar Software na PCI-Secure Software yana nuni da daidaitattun software na PCI-Secure da buƙatun PCI. An yi la'akari da sigogi masu zuwa a cikin wannan jagorar.
PCI-Secure-Software-Standard-v1_2_1
3
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
2. Amintaccen Aikace-aikacen Biyan Kuɗi
2.1 Aikace-aikacen S/W
Aikace-aikacen biyan kuɗi na Viking ba sa amfani da kowace software na waje ko kayan aikin da ba na cikin aikace-aikacen da aka saka Viking ba. Duk masu aiwatarwa na S/W na aikace-aikacen biyan kuɗi na Viking an sanya hannu ta hanyar lambobi tare da kayan sa hannun Tetra wanda Ingenico ya samar.
Tashar yana sadarwa da Mai watsa shiri na Nets ta amfani da TCP/IP, ko dai ta hanyar Ethernet, GPRS, Wi-Fi, ko ta PC-LAN da ke gudanar da aikace-aikacen POS. Hakanan, tashar tashar zata iya sadarwa tare da mai gida ta wayar hannu tare da haɗin Wi-Fi ko GPRS.
Tashoshin Viking suna sarrafa duk hanyar sadarwa ta amfani da bangaren haɗin haɗin Ingenico. Wannan bangaren aikace-aikace ne da aka loda a cikin tasha. Layin Link Layer na iya sarrafa sadarwa da yawa a lokaci guda ta amfani da na'urori daban-daban (modem da serial port na example).
A halin yanzu yana goyan bayan ka'idoji masu zuwa:
· Na jiki: RS232, modem na ciki, modem na waje (ta hanyar RS232), USB, Ethernet, Wi-Fi, Bluetooth, GSM, GPRS, 3G da 4G.
· Haɗin kai: SDLC, PPP. · Cibiyar sadarwa: IP. · Sufuri: TCP.
Tashar tasha koyaushe tana ɗaukar yunƙuri don kafa hanyar sadarwa zuwa Mai watsa shiri na Nets. Babu TCP/IP uwar garken S/W a cikin tashar, kuma tashar S/W ba ta taɓa amsa kira mai shigowa.
Lokacin da aka haɗa tare da aikace-aikacen POS akan PC, ana iya saita tashar don sadarwa ta PC-LAN da ke tafiyar da aikace-aikacen POS ta amfani da RS232, USB, ko Bluetooth. Har yanzu duk ayyukan aikace-aikacen biyan kuɗi suna gudana a cikin tashar S/W.
Yarjejeniyar aikace-aikacen (da boye-boye da aka yi amfani da ita) bayyane ce kuma mai zaman kanta daga nau'in sadarwa.
2.2 Biyan Mai watsa shiri sadarwar TCP/IP saitin siga
4
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
2.3 Sadarwar ECR
Serial RS232 · Haɗin USB · Saitin sigar TCP/IP, wanda kuma aka sani da ECR akan IP
Zaɓuɓɓukan sadarwar Mai watsa shiri/ECR a cikin Aikace-aikacen Biyan Biyan Viking
· Nets Cloud ECR (Haɗa @ Cloud) daidaita sigogi
2.4 Sadarwa don karɓar bakuncin ta hanyar ECR
Lura: Koma "2.1.1- Biyan Mai watsa shiri sadarwar TCP/IP saitin siga" don takamaiman tashar TCP/IP na ƙasa.
5
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
2.5 Kayan aikin tasha masu goyan baya
Ana tallafawa aikace-aikacen biyan kuɗi na Viking akan na'urorin Ingenico masu inganci na PTS (Tsaron ma'amala na PIN). Jerin kayan aikin tasha tare da lambar amincewar su ta PTS an bayar da su a ƙasa.
Nau'in Terminal Tetra
Hardware na ƙarshe
Hanyar 3000
PTS
Amincewar PTS
lambar sigar
5x
4-30310
PTS Hardware Version
Saukewa: LAN30EA30AA
Tebur 3500
5x
4-20321
Saukewa: DES35BB
Motsa 3500
5x
4-20320
MOV35BB MOV35BC MOV35BQ MOV35BR
Link2500
Link2500 Self4000
4x
4-30230
5x
4-30326
5x
4-30393
LIN25BA LIN25JA
LIN25BA LIN25JA SEL40BA
PTS Firmware Version
820547v01.xx 820561v01.xx 820376v01.xx 820376v02.xx 820549v01.xx 820555v01.xx 820556v01.xx 820565v01.xx 820547v01.xx 820376v01.xx 820376v02.xx 820547v01.xx 820549v01.xx 820555v01.xx 820556v01.xx 820565v01.xx 820547v01.xx 820565v01.xx 820548v02.xx 820555v01.xx 820556v01.xx 820547v01.xx
820547v01.xx
820547v01.xx
6
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
2.6 Manufofin Tsaro
Aikace-aikacen biyan kuɗi na Viking yana bin duk ƙa'idodin tsaro da Ingenico ya kayyade. Don cikakkun bayanai, waɗannan su ne hanyoyin haɗin kai zuwa manufofin tsaro na tashoshin Tetra daban-daban:
Nau'in Tasha
Hanyar 2500 (v4)
Takardun Dokar Tsaro Link/2500 PCI PTS Tsarin Tsaro (pcisecuritystandards.org)
Hanyar 2500 (v5)
Manufar Tsaro ta PCI PTS (pcisecuritystandards.org)
Tebur 3500
https://listings.pcisecuritystandards.org/ptsdocs/4-20321ICO-OPE-04972-ENV12_PCI_PTS_Security_Policy_Desk_3200_Desk_3500-1650663092.33407.pdf
Matsar3500
https://listings.pcisecuritystandards.org/ptsdocs/4-20320ICO-OPE-04848-ENV11_PCI_PTS_Security_Policy_Move_3500-1647635765.37606.pdf
Hanyar 3000
https://listings.pcisecuritystandards.org/ptsdocs/4-30310SP_ICO-OPE-04818-ENV16_PCI_PTS_Security_Policy_Lane_3000-1648830172.34526.pdf
Kai4000
Kai/4000 PCI PTS Tsarin Tsaro (pcisecuritystandards.org)
7
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
3. Tabbataccen Sabunta software mai nisa
3.1 Aiwatar da Kasuwanci
Nets amintacce yana ba da sabuntawar aikace-aikacen biyan kuɗin Viking daga nesa. Waɗannan sabuntawar suna faruwa akan tashar sadarwa guda ɗaya kamar amintattun ma'amalar biyan kuɗi, kuma ba'a buƙatar ɗan kasuwa ya yi wani canje-canje ga wannan hanyar sadarwa don biyan bukata.
Don cikakkun bayanai, ya kamata 'yan kasuwa su haɓaka tsarin amfani mai karɓuwa don mahimmancin fasahar fuskantar ma'aikata, bisa ga jagororin da ke ƙasa don VPN, ko wasu hanyoyin haɗin kai mai sauri, ana samun sabuntawa ta hanyar Tacewar zaɓi ko na sirri.
3.2 Manufofin Amfani Mai karɓuwa
Ya kamata ɗan kasuwa ya haɓaka manufofin amfani don mahimman fasahar fuskantar ma'aikata, kamar modem da na'urorin mara waya. Waɗannan manufofin amfani yakamata su haɗa da:
Izinin gudanarwa na bayyane don amfani. · Tabbatarwa don amfani. Jerin duk na'urori da ma'aikatan da ke da damar shiga. · Lakabi na'urorin tare da mai shi. · Bayanan tuntuɓar juna da manufa. · Amincewar amfani da fasaha. Wuraren cibiyar sadarwa masu karɓuwa don fasahar. · Jerin samfuran da aka amince da kamfani. Ba da izinin amfani da modem ga masu siyarwa kawai lokacin da ake buƙata da kashewa bayan amfani. Hana ajiyar bayanan mariƙin akan kafofin watsa labarai na gida lokacin da aka haɗa shi da nisa.
3.3 Firewall na sirri
Duk wani haɗin "ko da yaushe-kan" daga kwamfuta zuwa VPN ko wani haɗin kai mai sauri ya kamata a kiyaye shi ta amfani da samfurin tacewar zaɓi na sirri. Ƙungiya ce ta tsara Tacewar ta don saduwa da ƙayyadaddun ƙa'idodi kuma ba za a iya musanya ta wurin ma'aikaci ba.
3.4 Tsare-tsaren Sabunta nesa
Akwai hanyoyi guda biyu don kunna tashar don tuntuɓar cibiyar software ta Nets don sabuntawa:
1. Ko dai da hannu ta hanyar zaɓin menu a cikin tashar (shafe katin ciniki, zaɓi menu 8 “Software”, 1 “Fetch software”), ko Mai watsa shiri ya qaddamar.
2. Yin amfani da hanyar da aka ƙaddamar da Mai watsa shiri; tashar ta karɓi umarni ta atomatik daga Mai watsa shiri bayan ta yi ma'amala ta kuɗi. Umurnin yana gaya wa tashar tasha ta tuntuɓi cibiyar software na Nets don bincika sabuntawa.
Bayan an sami nasarar sabunta software, tasha mai ginanniyar firinta za ta buga rasit tare da bayani kan sabon sigar.
Masu haɗa tashar tasha, abokan tarayya da/ko ƙungiyar goyan bayan fasaha ta Nets za su sami alhakin sanar da yan kasuwa sabuntawa, gami da hanyar haɗin kai zuwa sabunta jagorar aiwatarwa da bayanin bayanan saki.
Baya ga karɓar bayan sabunta software, aikace-aikacen biyan kuɗi na Viking kuma ana iya inganta ta ta Bayanin Tasha akan latsa maɓallin 'F3' akan tashar.
8
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
4. Tsare Tsare-Tsare na Bayanan Hankali da Kariya na bayanan da aka Ajiye
4.1 Aiwatar da Kasuwanci
Aikace-aikacen biyan kuɗi na Viking baya adana duk wani bayanan tsintsin maganadisu, ƙimar ingancin katin ko lambobi, PIN ko bayanan toshe PIN, kayan maɓalli, ko cryptograms daga nau'ikan sa na baya.
Don zama mai yarda da PCI, ɗan kasuwa dole ne ya kasance yana da manufar riƙe bayanai wanda ke bayyana tsawon lokacin da za a adana bayanan mai katin. Aikace-aikacen biyan kuɗi na Viking yana riƙe bayanan mai riƙe da kati da/ko mahimman bayanan tabbatar da ma'amala ta ƙarshe kuma idan akwai ma'amalar ba da izini ta layi ko jinkirta yayin da ake bin ƙa'idodin PCI-Secure Software a lokaci guda, don haka ana iya keɓance shi daga manufar riƙe bayanan mai riƙe da katin ɗan kasuwa.
4.2 Amintaccen Shawarar Shafi
Tashar ba ta adana bayanan tantancewa masu mahimmanci; full track2, CVC, CVV ko PIN, ba kafin ko bayan izini ba; ban da ma'amalar Izini da aka jinkirta wanda a cikin yanayin rufaffen bayanan tantancewa (cikakken bayanan track2) ke adanawa har sai an yi izini. Bayan izini ana share bayanan amintattu.
Duk wani misali na bayanan tarihi da aka haramta da ke cikin tashar za a share su ta atomatik lokacin da aka inganta aikace-aikacen biyan kuɗi ta Viking. Share bayanan tarihi da aka haramta da kuma bayanan da suka wuce manufofin riƙewa za su faru ta atomatik.
4.3 Wuraren da aka Ajiye bayanan mai katin
Ana adana bayanan mai katin a cikin Flash DFS (Bayanai File System) na tasha. Ba a samun damar bayanan kai tsaye ta wurin ɗan kasuwa.
Store Data (file, tebur, da dai sauransu)
Abubuwan da aka adana bayanan mai riƙe da kati (PAN, ƙarewa, kowane abubuwan SAD)
Yadda ake kiyaye ma'ajin bayanai (misaliample, boye-boye, ikon sarrafawa, yanke, da sauransu.)
File: trans.rsd
PAN, Ranar Karewa, Lambar Sabis
PAN: Rufaffen 3DES-DUKPT (112 bits)
File: storefwd.rsd PAN, Ranar Karewa, Lambar Sabis
PAN: Rufaffen 3DES-DUKPT (112 bits)
File: transoff.rsd PAN, Ranar Karewa, Lambar Sabis
PAN: Rufaffen 3DES-DUKPT (112 bits)
File: transorr.rsd Truncated PAN
Yanke (6 na farko, na ƙarshe 4)
File: offlrep.dat
Tsuntsun PAN
Yanke (6 na farko, na ƙarshe 4)
File: defauth.rsd PAN, Ranar Karewa, Lambar Sabis
PAN: Rufaffen 3DES-DUKPT (112 bits)
File: defauth.rsd Cikakken bayanan track2
Cikakkun bayanan Track2: 3DES-DUKPT da aka riga aka rufawa (bits 112)
9
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
4.4 Ma'amalar Izini da aka jinkirta
Izinin da aka jinkirta yana faruwa lokacin da ɗan kasuwa ba zai iya kammala izini ba a lokacin ma'amala tare da mai katin saboda haɗin kai, matsalolin tsarin, ko wasu iyakoki, sannan daga baya ya kammala izini lokacin da ya sami damar yin hakan.
Wannan yana nufin cewa izinin da aka jinkirta yana faruwa lokacin da aka yi izini kan layi bayan babu katin. Kamar yadda ba da izinin kan layi na ma'amalar izini da aka jinkirta, za a adana ma'amalolin a kan tasha har sai an sami nasarar ba da izinin ma'amalolin daga baya idan akwai hanyar sadarwa.
Ana adana ma'amalolin kuma ana aika su daga baya ga mai masaukin baki, kamar yadda ake adana ma'amalar A layi a yau a cikin aikace-aikacen biyan kuɗi na Viking.
Dan kasuwa zai iya fara ciniki azaman 'Izinin da aka jinkirta' daga Rijista Kuɗi na Lantarki (ECR) ko ta menu na tasha.
Ana iya loda ma'amalar izini da aka jinkirta zuwa gidan yanar gizo ta dillali ta amfani da zaɓuɓɓukan da ke ƙasa: 1. ECR - umarnin gudanarwa - Aika offline (0x3138) 2. Terminal - Mai ciniki ->2 EOT -> 2 aika zuwa mai masaukin baki
4.5 Hanyoyin magance matsala
Tallafin gidan yanar gizo ba zai nemi ingantaccen tabbaci ko bayanan mariƙin ba don dalilai na warware matsalar. Aikace-aikacen biyan kuɗi na Viking ba shi da ikon tattarawa ko magance mahimman bayanai a kowane hali.
4.6 Wuraren PAN - An Nuna ko Bugawa
PAN da aka rufe:
· Rasitun Kasuwancin Kuɗi: PAN mai rufe fuska koyaushe ana buga shi akan rasidin ma'amala na mai kati da ɗan kasuwa. PAN da aka rufe a mafi yawan lokuta yana tare da * inda lambobi 6 na farko da lambobi 4 na ƙarshe ke cikin bayyanannen rubutu.
Rahoton lissafin ma'amala: Rahoton lissafin ma'amala yana nuna ma'amaloli da aka yi a cikin zama. Bayanan ma'amala sun haɗa da Mask PAN, sunan mai ba da katin da adadin ma'amala.
· Rasidin abokin ciniki na ƙarshe: Ana iya samar da kwafin karɓar abokin ciniki na ƙarshe daga menu na kwafin tasha. Rasidin abokin ciniki ya ƙunshi PAN mai rufe fuska azaman ainihin rasidin abokin ciniki. Ana amfani da aikin da aka bayar idan tasha ta kasa samar da rasidin abokin ciniki yayin ciniki saboda kowane dalili.
Rufaffen PAN:
Rasidin ma'amala ta layi: sigar karɓar dillali na ma'amala ta layi ta haɗa da bayanan ɓoye-ɓoye DES 112-bit DUKPT (PAN, Kwanan ƙarewa da lambar sabis).
BAX: 71448400-714484 12/08/2022 10:39
Visa Visa ************ 3439-0 107a47458E773A3D84D977FFF553D3D93FFF9876543210D0D15F3F0000000031010F0000000000D123461F000004D000000FFF3DXNUMXAXNUMXDFXNUMXFXNUMXDXNUMX AID: XNUMX XNUMX KCXNUMX
10
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
Saukewa: Y1 Zama: 782
SIYA
NOK
12,00
YARDA
KWAFI DIN YAN UWA
Tabbatarwa:
Aikace-aikacen biyan kuɗi na Viking koyaushe yana ɓoye bayanan mai katin ta tsohuwa don ajiyar ma'amala ta layi, watsawa zuwa mai masaukin NETS da buga bayanan katin ɓoye akan rasidin dillali don ma'amala ta layi.
Hakanan, don nunawa ko buga katin PAN, aikace-aikacen biyan kuɗi na Viking koyaushe yana rufe lambobin PAN tare da alamar ''*' tare da lambobi 6 + na ƙarshe a bayyane azaman tsoho. Tsarin buga lambar katin ana sarrafa shi ta tsarin gudanarwa na tasha inda za'a iya canza tsarin bugawa ta hanyar nema ta hanyar da ta dace da kuma gabatar da halaltacciyar buƙata ta kasuwanci, duk da haka don aikace-aikacen biyan kuɗi na Viking, babu irin wannan yanayin.
Example don abin rufe fuska PAN: PAN: 957852181428133823-2
Mafi ƙarancin bayani: **************3823-2
Matsakaicin bayanai: 957852********3823-2
4.7 Gaba files
Aikace-aikacen biyan kuɗi na Viking baya samar da kowane lokaci daban files.
Buƙatun aikace-aikacen biyan kuɗi na Viking don abubuwan shigar da mariƙin ta hanyar faɗakarwa waɗanda ke cikin tsarin saƙon cikin aikace-aikacen biyan kuɗin Viking da aka sanya hannu.
Nuna faɗakarwa don PIN, adadin, da sauransu ana nuna su akan tashar, kuma ana jiran abubuwan shigar da mariƙin. Abubuwan da aka karɓa daga mai katin ba a adana su ba.
4.8 Gudanar da Maɓalli
Don kewayon Tetra na ƙirar tasha, ana yin duk ayyukan tsaro a cikin amintaccen yanki na na'urar PTS da aka kare daga aikace-aikacen biyan kuɗi.
Ana yin ɓoyayyen ɓoyewa a cikin amintaccen wuri yayin da tsarin rufaffen bayanan za a iya aiwatar da shi ta hanyar Nets Mai watsa shiri. Duk musanyar maɓalli tsakanin mai masaukin gidan yanar gizo, Maɓalli/Kayan allura (na tashar Tetra) da PED ana yin su ne ta hanyar ɓoyewa.
Nets ne ke aiwatar da matakan Gudanar da Maɓalli bisa ga tsarin DUKPT ta amfani da ɓoyayyen 3DES.
Duk maɓallai da maɓalli da maɓallan da tashoshin Nets ke amfani da su ana ƙirƙira su ne ta amfani da ingantaccen tsarin bazuwar bazuwar. Maɓallai da mahimman abubuwan da tashoshin Nets ke amfani da su ana samar da su ta tsarin sarrafa maɓalli na Nets, waɗanda ke amfani da raka'o'in Thales Payshield HSM da aka amince da su don samar da maɓallan sirri.
11
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
Maɓalli na gudanarwa mai zaman kansa ne daga ayyukan biyan kuɗi. Loda sabon aikace-aikacen don haka baya buƙatar canji zuwa aikin maɓalli. Wurin maɓallin tashar tashar zai tallafawa kusan ma'amaloli 2,097,152. Lokacin da maɓalli ya ƙare, tashar Viking ta daina aiki kuma tana nuna saƙon kuskure, sannan dole ne a maye gurbin tasha.
4.9 `24 HR' Sake yi
Duk tashoshi na Viking sune PCI-PTS 4.x da sama kuma saboda haka suna bin ka'idodin yarda cewa tashar PCI-PTS 4.x za ta sake yin aiki aƙalla sau ɗaya kowane sa'o'i 24 don goge RAM da ƙarin amintaccen tashar HW daga amfani da shi don samun biyan kuɗi. kati data.
Wani fa'idar sake zagayowar '24hr' shine cewa za a rage raguwar ƙwalƙwalwar ƙwaƙwalwar ajiya kuma ba ta da tasiri ga ɗan kasuwa (ba wai ya kamata mu yarda da lamuran zubar ƙwaƙwalwar ajiya ba.
Mai ciniki zai iya saita lokacin sake yi daga zaɓin Menu na tashar zuwa 'Sake yi Lokacin'. An saita lokacin sake kunnawa bisa agogon '24hr' kuma zai ɗauki tsarin HH: MM.
An tsara tsarin Sake saitin don tabbatar da sake saitin tasha aƙalla sau ɗaya a cikin sa'o'i 24 yana gudana. Don cika wannan buƙatu an fayyace ma'anar lokaci, wanda ake kira "tazarar sake saiti" wanda Tmin da Tmax ke wakilta. Wannan lokacin yana wakiltar tazarar lokaci inda aka ba da izinin sake saiti. Ya danganta da yanayin kasuwancin, “tazarar sake saiti” an keɓance shi yayin lokacin shigarwa ta ƙarshe. Ta hanyar ƙira, wannan lokacin ba zai iya zama ya fi guntu minti 30 ba. A wannan lokacin, sake saitin yana faruwa kowace rana mintuna 5 da suka gabata (akan T3) kamar yadda zanen da ke ƙasa ya bayyana:
4.10 Lissafin labarun kan layi
Rubutun ba da izini hanya ce don tantance cewa PANs da aka jera a matsayin jerin farar fata an yarda a nuna su a bayyanannen rubutu. Viking yana amfani da filaye 3 don tantance PANs masu ba da izini waɗanda aka karanta daga saitunan da aka zazzage daga tsarin sarrafa tasha.
Lokacin da aka saita 'tuta mai yarda' a cikin gidan yanar gizo zuwa Y, ana zazzage bayanin daga Mai watsa shiri na Nets ko tsarin sarrafa tasha zuwa tashar tashar, lokacin da tashar ta fara. Ana amfani da wannan tutar Yarjejeniyar don tantance PANs masu ba da izini waɗanda aka karanta daga saitin bayanai.
Tutar 'Track2ECR' tana ƙayyade ko an ba da izinin sarrafa bayanan Track2 (aika/ karɓa) ta ECR don takamaiman mai bayarwa. Dangane da ƙimar wannan tuta, ana ƙayyade idan bayanan track2 yakamata a nuna su a yanayin gida akan ECR.
'Filin tsarin bugawa' yana ƙayyade yadda za a nuna PAN. Katunan da ke cikin iyakokin PCI duk za su kasance suna da sigar bugawa da aka saita don nuna PAN a cikin tsari mai sassauka/ abin rufe fuska.
12
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
5. Tabbatarwa da Gudanarwa
5.1 Ikon Shigowa
Aikace-aikacen biyan kuɗi na Viking ba shi da asusun mai amfani ko kalmomin sirri masu dacewa don haka, aikace-aikacen biyan kuɗi na Viking ba shi da wannan buƙatu.
Saitin Haɗe-haɗe na ECR: Ba zai yiwu a sami damar nau'ikan ma'amala kamar Refunda, Ajiye da Juyawa daga menu na ƙarshe don tabbatar da amincin waɗannan ayyukan daga yin amfani da su ba. Waɗannan nau'ikan ciniki ne inda kuɗi ke gudana daga asusun ɗan kasuwa zuwa asusun mai katin. Haƙƙin ɗan kasuwa ne don tabbatar da cewa masu amfani da izini kawai ke amfani da ECR.
Saitin tsaye: An ba da ikon sarrafa damar katin ciniki don samun damar nau'ikan ma'amala kamar Refunda, Deposit da Juyawa daga menu na tasha don tabbatar da amincin waɗannan ayyukan daga yin amfani da su. An saita tashar ta Viking ta tsohuwa don amintaccen zaɓin menu, don hana shiga mara izini. Ma'auni don daidaita tsarin tsaro na menu ya faɗi ƙarƙashin Menu na Kasuwanci (mai samuwa tare da katin ciniki) -> Ma'auni -> Tsaro
Kare menu Saita zuwa 'Eh' ta tsohuwa. Maɓallin Menu akan tashar ana kiyaye shi ta amfani da tsarin menu na Kare. Menu na iya samun dama ga mai ciniki kawai ta amfani da katin ciniki.
13
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
Kare saitin juyawa zuwa 'Eh' ta tsohuwa. Sake ma'amala kawai ɗan kasuwa zai iya yin amfani da katin ciniki don samun dama ga menu na juyawa.
Kare sulhu Saita zuwa 'Eh' ta tsohuwa Zaɓin sulhu na iya samun dama ga ɗan kasuwa tare da katin ciniki lokacin da aka saita wannan kariyar zuwa gaskiya.
Kare Gajerar hanya Saiti zuwa 'Eh' ta hanyar menu na gajeriyar hanya tare da zaɓuɓɓukan don viewBayanin Terminal da zaɓi don ɗaukaka sigogin Bluetooth za su kasance ga ɗan kasuwa kawai lokacin da aka goge katin ciniki.
14
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
5.2 Sarrafa kalmar sirri
Aikace-aikacen biyan kuɗi na Viking ba shi da asusun mai amfani ko kalmomin shiga daidai; don haka, aikace-aikacen Viking ya keɓe daga wannan buƙatun.
6. Shiga
6.1 Aiwatar da Kasuwanci
A halin yanzu, don aikace-aikacen biyan kuɗi na Nets Viking, babu mai amfani na ƙarshe, saitunan rajista na PCI mai daidaitawa.
6.2 Sanya Saitunan Shiga
Aikace-aikacen biyan kuɗi na Viking ba shi da asusun mai amfani, don haka ba za a iya amfani da rajistar shigar PCI ba. Ko da a cikin mafi yawan ma'amala ta hanyar shiga aikace-aikacen biyan kuɗi na Viking baya shigar da duk wani bayanan tantancewa ko bayanan mai riƙe da kati.
6.3 Tsakiyar shiga
Tashar yana da tsarin log ɗin gamayya. Hakanan tsarin ya haɗa da shigar da ƙirƙira da gogewar S/W mai aiwatarwa.
Ana shigar da ayyukan zazzagewar S/W kuma ana iya canjawa wuri zuwa Mai watsa shiri da hannu ta hanyar zaɓin menu a cikin tasha ko akan buƙatun mai masaukin baki da aka yi alama a cikin zirga-zirgar ma'amala ta yau da kullun. Idan kunnawar saukarwar S/W ta gaza saboda sa hannun dijital mara inganci akan abin da aka karɓa files, ana shigar da lamarin kuma an canza shi zuwa Mai watsa shiri ta atomatik kuma nan take.
6.4 6.3.1 Kunna alamar shiga tasha
Don ba da damar shigar da alamar alama:
1 Goge katin ciniki. 2 Sa'an nan a cikin menu zaɓi "9 System Menu". 3 Sannan je zuwa menu "2 System Log". 4 Rubuta a cikin lambar fasaha, wanda zaka iya samu ta kiran goyan bayan Sabis na Kasuwanci na Nets. 5 Zaɓi "Sigogi 8". 6 Sannan kunna "Logging" zuwa "Ee".
6.5 6.3.2 Aika rajistan ayyukan ganowa zuwa masaukin baki
Don aika da rajistan ayyukan:
1 Danna maɓallin Menu akan tasha sannan ka goge katin ciniki. 2 Sa'an nan a cikin babban menu zaɓi "7 Menu Operator". 3 Sannan zaɓi “5 Send Trace Logs” don aika da rajistan ayyukan zuwa masaukin baki.
15
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
6.6 6.3.3 Shigar alamar nesa
An saita ma'auni a cikin Mai watsa shiri na Nets (PSP) wanda zai ba da damar / musaki aikin binciken layin Terminal daga nesa. Mai watsa shiri na Nets zai aika Trace ba da damar / kashe sigar shiga zuwa Terminal a cikin bayanan da aka saita tare da lokacin da aka tsara lokacin da Terminal zai loda rajistan ayyukan. Lokacin da tasha ta karɓi siginar Trace kamar yadda aka kunna, zai fara ɗaukar rajistan ayyukan kuma a lokacin da aka tsara zai loda duk rajistan ayyukan kuma ya kashe aikin shiga daga baya.
6.7 6.3.4 Kuskure mai nisa
Ana kunna rajistan ayyukan kuskure koyaushe akan tashar. Kamar alamar bincike, ana saita ma'auni a cikin Mai watsa shiri na Nets wanda zai ba da damar / kashe aikin shigar da kuskuren Terminal daga nesa. Mai watsa shiri na Nets zai aika Trace ba da damar / kashe sigar shiga zuwa Terminal a cikin bayanan da aka saita tare da lokacin da aka tsara lokacin da Terminal zai loda rajistan ayyukan kuskure. Lokacin da tasha ta karɓi ma'aunin shiga Kuskuren kamar yadda aka kunna, zai fara ɗaukar rajistan ayyukan Kuskure kuma a lokacin da aka tsara zai loda duk rajistan ayyukan kurakurai kuma ya kashe aikin shiga daga baya.
7. Mara waya ta Networks
7.1 Aiwatar da Kasuwanci
Tashar biyan kuɗi ta Viking - MOVE 3500 da Link2500 suna da damar haɗi tare da hanyar sadarwar Wi-Fi. Don haka, don aiwatar da Wireless cikin aminci, yakamata a yi la’akari da lokacin shigarwa da daidaita hanyar sadarwar mara waya kamar yadda aka yi bayani a ƙasa.
7.2 Shawarar Saitunan Mara waya
Akwai la'akari da matakai da yawa da za a ɗauka yayin daidaita hanyoyin sadarwar mara waya waɗanda ke da alaƙa da cibiyar sadarwar ciki.
Aƙalla, dole ne a kasance cikin wurin saituna da saitunan masu zuwa:
Dole ne a raba duk cibiyoyin sadarwa mara waya ta amfani da Tacewar zaɓi; idan ana buƙatar haɗi tsakanin hanyar sadarwa mara igiyar waya da mahallin bayanan mai riƙe katin dole ne a sarrafa damar shiga kuma ta kiyaye ta Tacewar zaɓi.
Canja tsoho SSID kuma kashe watsa shirye-shiryen SSID · Canja tsoffin kalmomin shiga don haɗin yanar gizo da wuraren shiga mara waya, wannan ya haɗa da haɗin gwiwa.
Samun damar kawai da kuma layukan al'umma na SNMP · Canja duk wani rashin tsaro da aka bayar ko saita ta dillali · Tabbatar cewa an sabunta wuraren shiga mara waya zuwa sabuwar firmware · Yi amfani da WPA ko WPA2 kawai tare da maɓalli masu ƙarfi, WEP an haramta kuma ba za a taɓa amfani da ita ba. Canja maɓallan WPA/WPA2 yayin shigarwa da kuma akai-akai kuma a duk lokacin da mutum yake da shi
sanin makullin ya bar kamfanin
16
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
8. Rarraba Network
8.1 Aiwatar da Kasuwanci
Aikace-aikacen biyan kuɗi na Viking ba aikace-aikacen biyan kuɗi ba ne na tushen uwar garke kuma yana zaune a kan tasha. Saboda wannan dalili, aikace-aikacen biyan kuɗi baya buƙatar kowane daidaitawa don biyan wannan buƙatun. Don cikakken ilimin ɗan kasuwa, ba za a iya adana bayanan katin kiredit a kan tsarin da aka haɗa kai tsaye da Intanet ba. Don misaliample, web bai kamata a shigar da sabar da sabar bayanai akan sabar guda ɗaya ba. Dole ne a saita yankin da aka cire soja (DMZ) don raba hanyar sadarwa ta yadda injuna akan DMZ kawai ke samun damar Intanet.
9. Samun Nisa
9.1 Aiwatar da Kasuwanci
Ba za a iya isa ga aikace-aikacen biyan kuɗin Viking daga nesa ba. Tallafin nesa yana faruwa ne kawai tsakanin memba na ma'aikacin gidan yanar gizo da ɗan kasuwa ta wayar tarho ko ta hanyar Nets kai tsaye tare da ɗan kasuwa.
10.Mai isar da saƙon bayanai
10.1 Isar da Bayanan Hankali
Aikace-aikacen biyan kuɗi na Viking yana kiyaye mahimman bayanai da/ko bayanan mai riƙe da kati ta hanyar amfani da ɓoyayyen matakin saƙo ta amfani da 3DES-DUKPT (112 ragowa) don duk watsawa (gami da cibiyoyin sadarwar jama'a). Ka'idojin tsaro don sadarwar IP daga aikace-aikacen Viking zuwa Mai watsa shiri ba a buƙata tunda ana aiwatar da ɓoyayyen matakin saƙo ta amfani da 3DES-DUKPT (112-bits) kamar yadda aka bayyana a sama. Wannan makircin boye-boye yana tabbatar da cewa ko da an katse ma'amaloli, ba za a iya canza su ko daidaita su ta kowace hanya ba idan 3DES-DUKPT (112-bits) ya kasance a matsayin ɓoye mai ƙarfi. Kamar yadda tsarin gudanarwa na DUKPT yake, maɓallin 3DES da aka yi amfani da shi ya keɓanta ga kowace ma'amala.
10.2 Rarraba bayanai masu mahimmanci ga wasu software
Aikace-aikacen biyan kuɗi na Viking baya samar da kowane ma'amala (s) / APIs don ba da damar raba bayanan bayanan asusu kai tsaye tare da sauran software. Ba a raba mahimman bayanai ko bayanan asusu mai share rubutu tare da wasu software ta hanyar fallasa APIs.
10.3 Imel da Bayani mai mahimmanci
Aikace-aikacen biyan kuɗi na Viking baya goyan bayan aika imel na asali.
10.4 Ba-Console Gudanar da Gudanarwa
Viking baya goyan bayan samun damar gudanarwa ba na Console ba. Koyaya, don ilimin ɗan kasuwa gabaɗaya, samun damar gudanarwar da ba ta Console ba dole ne ta yi amfani da ko dai SSH, VPN, ko TLS don ɓoye duk hanyar da ba ta amfani da na'ura mai kwakwalwa ba zuwa sabobin a cikin mahallin bayanan mai riƙe da kati. Dole ne a yi amfani da Telnet ko wasu hanyoyin shiga mara rufaffen.
17
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
11. Hanyar Sigar Sigar Viking
Hanyar sigar Nets ta ƙunshi lambar sigar S/W mai kashi biyu: a.bb
inda `a' za a ƙara lokacin da aka yi babban tasiri canje-canje kamar yadda PCI-Secure Software Standard. a - babban sigar (lambobi 1)
Za a ƙara 'bb' lokacin da aka yi sauye-sauye da aka tsara ƙarancin tasiri kamar yadda ma'aunin software na PCI-Secure. bb - ƙaramin sigar (lambobi 2)
Ana nuna lambar sigar biyan kuɗin Viking S/W kamar haka akan allon tasha lokacin da aka kunna tasha: `abb'
Sabuntawa daga misali, 1.00 zuwa 2.00 muhimmin sabuntawar aiki ne. Yana iya haɗawa da canje-canje tare da tasiri akan tsaro ko daidaitattun buƙatun Software na PCI Secure.
Sabuntawa daga misali, 1.00 zuwa 1.01 sabuntawar aiki mara mahimmanci. Maiyuwa bazai haɗa da canje-canje tare da tasiri akan tsaro ko daidaitattun buƙatun software na PCI Secure ba.
Ana wakilta duk canje-canje a cikin jeri na lamba.
12. Umarni game da Amintaccen Shigar Faci da Sabuntawa.
Nets suna sadar da sabuntawar aikace-aikacen biyan kuɗi amintacce. Waɗannan sabuntawar suna faruwa akan tashar sadarwa guda ɗaya kamar amintattun ma'amalar biyan kuɗi, kuma ba'a buƙatar ɗan kasuwa ya yi wani canje-canje ga wannan hanyar sadarwa don biyan bukata.
Lokacin da akwai faci, Nets za su sabunta sigar faci akan Mai watsa shiri na Nets. Mai ciniki zai sami facin ta hanyar buƙatar zazzagewar S/W mai sarrafa kansa, ko kuma ɗan kasuwa na iya fara zazzagewar software daga menu na tasha.
Don cikakkun bayanai, ya kamata 'yan kasuwa su haɓaka tsarin amfani mai karɓuwa don mahimman fasahar fuskantar ma'aikata, bisa ga jagororin da ke ƙasa don VPN ko wasu haɗin kai mai sauri, ana karɓar sabuntawa ta hanyar bangon wuta ko bangon ma'aikata.
Ana samun mai masaukin gidan yanar gizo ta hanyar intanet ta amfani da amintacciyar hanya ko ta hanyar rufaffiyar hanyar sadarwa. Tare da rufaffiyar cibiyar sadarwa, mai ba da hanyar sadarwa yana da haɗin kai kai tsaye zuwa wurin masaukinmu da aka bayar daga mai ba da hanyar sadarwar su. Ana sarrafa tashoshi ta hanyar sabis na sarrafa tashar Nets. Sabis ɗin gudanarwa na tasha yana ma'anar exampyankin da tashar tashar ta kasance ta kuma mai siye da ake amfani da ita. Gudanar da tasha kuma yana da alhakin haɓaka software ta tashar nesa akan hanyar sadarwa. Nets suna tabbatar da cewa software ɗin da aka ɗora zuwa tashar ta kammala takaddun da ake buƙata.
Nets suna ba da shawarar duba maki ga duk abokan cinikinta don tabbatar da biyan kuɗi mai aminci da aminci kamar yadda aka jera a ƙasa: 1. Ajiye jerin duk tashoshin biyan kuɗi na aiki kuma ɗaukar hotuna daga kowane girma don ku san yadda ya kamata su yi kama. 2. Nemo bayyanannun alamun tampring kamar karyewar hatimai akan samun damar faranti ko screws, m ko cabling daban-daban ko sabon kayan aikin da ba za ku iya gane su ba. 3. Kare tashoshin ku daga isar abokin ciniki lokacin da ba a amfani da su. Bincika wuraren biyan kuɗi na yau da kullun da sauran na'urori waɗanda zasu iya karanta katunan biyan kuɗi. 4. Dole ne ku bincika ainihin ma'aikatan gyara idan kuna tsammanin duk wani gyare-gyaren biyan kuɗi. 5. Kira Nets ko bankin ku nan da nan idan kun yi zargin wani aiki maras tabbas. 6. Idan kun yi imani cewa na'urarku ta POS tana da rauni ga sata, to akwai ginshiƙan sabis da amintattun harnesses da tethers don siye ta kasuwanci. Yana iya zama darajar la'akari da amfani da su.
18
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
13.Viking Sakin Sabuntawa
Ana fitar da software na Viking a cikin zagayowar sakewa masu zuwa (batun canje-canje):
Babban fitowar guda 2 a shekara · Ƙananan fitowa 2 a shekara · Faci na software, kamar kuma lokacin da ake buƙata, (misali saboda kowane matsala mai mahimmanci ko rashin lahani). Idan a
saki yana aiki a filin kuma an ba da rahoton wasu batutuwa masu mahimmanci, sa'an nan kuma ana sa ran fitar da facin software tare da gyara a cikin watanni ɗaya.
Za a sanar da 'yan kasuwa game da sakewar (manyan/ƙananan/patch) ta imel waɗanda za a aika kai tsaye zuwa adiresoshin imel nasu. Imel ɗin kuma zai ƙunshi manyan mahimman bayanai na sakin da bayanin kula.
Har ila yau, 'yan kasuwa za su iya samun damar bayanan sakin da za a loda a:
Bayanan sakin software (nets.eu)
Ana sanya hannu kan sakin software na Viking ta amfani da kayan aikin waƙa na Ingenico don tashoshin Tetra. Software da aka sa hannu kawai za a iya lodawa a kan tashar.
14. Abubuwan Buƙatun da ba a Aiwatar da su ba
Wannan sashe yana ƙunshe da jerin buƙatu a cikin Tsarin Software na PCI-Secure wanda aka tantance a matsayin 'Ba za a Aiwatar da shi ba' ga aikace-aikacen biyan kuɗin Viking da hujjar wannan.
PCI Secure Software Standard
CO
Ayyuka
Hujja don kasancewa 'Ba a zartar ba'
5.3
Hanyoyin tabbatarwa (ciki har da aikace-aikacen biyan kuɗin Viking na zaman lokaci yana gudana akan PTS POI da aka amince da PCI
hakori) suna da isasshen ƙarfi da ƙarfi ga na'urar.
kare takaddun shaida daga kasancewa
ƙirƙira, spoofed, leaked, zato, ko dawafi aikace-aikacen biyan kuɗi na Viking baya bayar da gida, mara amfani.
huta.
ko shiga nesa, ko matakin gata, don haka babu au-
takaddun shaida a cikin na'urar PTS POI.
Aikace-aikacen biyan kuɗi na Viking baya samar da saituna don sarrafawa ko samar da ID na mai amfani kuma baya samar da kowane gida, mara amfani ko damar nesa zuwa mahimman kadarorin (har ma don dalilai na ɓarna).
5.4
Ta hanyar tsoho, duk damar zuwa mahimman kadarorin ana sake dawowa.
Aikace-aikacen biyan kuɗin Viking yana gudana akan amincewar PTS POI na PCI
Tsananta ga waɗancan asusu da na'urar ayyuka kawai.
wanda ke buƙatar irin wannan damar.
Aikace-aikacen biyan kuɗi na Viking baya samar da saitunan zuwa
sarrafa ko samar da asusu ko ayyuka.
7.3
Duk bazuwar lambobi da software ke amfani da su aikace-aikacen biyan kuɗi na Viking baya amfani da kowane RNG (bazuwar
wanda aka ƙirƙira ta amfani da janareta mai lamba bazuwar da aka amince kawai) don ayyukan ɓoyewa.
ber generation (RNG) algorithms ko dakunan karatu.
19
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
Algorithms na RNG da aka amince da su ko ɗakunan karatu sune waɗanda suka cika ka'idojin masana'antu don isassun rashin tabbas (misali, Buga na Musamman na NIST 800-22).
Aikace-aikacen biyan kuɗi na Viking baya samarwa ko amfani da kowane bazuwar lambobi don ayyukan sirri.
7.4
Ƙimar bazuwar suna da entropy wanda ya dace da aikace-aikacen biyan kuɗin Viking baya amfani da kowane RNG (bazuwar
mafi ƙarancin ingantaccen ƙarfin buƙatun janareta na lamba) don ayyukan ɓoyayyen sa.
primitives da maɓallan da suka dogara
akan su.
Aikace-aikacen biyan kuɗi na Viking baya samarwa ko amfani da komai
lambobi bazuwar don ayyukan sirri.
8.1
Duk yunƙurin samun dama da amfani da mahimman kadarori aikace-aikacen biyan kuɗi na Viking yana gudana akan amincewar PTS POI na PCI
ana bin sawu kuma ana iya gano shi ga wani mutum na musamman. na'urori, inda duk mahimmancin sarrafa kadari ya faru, da kuma
PTS POI firmware yana tabbatar da sirri da amincin sen-
bayanan sirri yayin adanawa a cikin na'urar PTS POI.
Sirri, mutunci da juriya na aikin biyan kuɗi na Viking ana kiyaye su kuma ana samar da su ta PTS POI firmware. Firmware na PTS POI yana hana duk wani damar samun mahimman kadarori daga tashar kuma ya dogara da anti-tampfasali fasali.
Aikace-aikacen biyan kuɗi na Viking baya bayar da damar gida, mara amfani ko nesa, ko matakin gata, don haka babu wani mutum ko wasu tsarin da ke da damar yin amfani da mahimman kadarori, kawai aikace-aikacen biyan kuɗi na Viking ne ke iya ɗaukar mahimman kadarori.
8.2
An kama duk ayyukan da isasshe kuma ana buƙata- aikace-aikacen biyan kuɗin Viking yana gudana akan PTS POI da aka amince da PCI
cikakken bayani don bayyana ainihin takamaiman na'urori.
ayyukan da aka yi, wadanda suka yi
su, lokacin da aka yi su, da
Aikace-aikacen biyan kuɗi na Viking baya bayar da na gida, mara amfani
wanda muhimman kadarori suka yi tasiri.
ko shiga nesa, ko matakin gata, don haka babu
mutum ko wasu tsarin da ke da damar samun mahimman kadarori, kawai
Aikace-aikacen biyan kuɗi na Viking yana iya ɗaukar mahimman kadarori.
· Aikace-aikacen biyan kuɗi na Viking baya ba da damar hanyoyin aiki.
Babu ayyuka don musaki ɓoyayyen bayanai masu mahimmanci
Babu ayyuka don ɓata mahimman bayanai
Babu ayyuka don fitarwa bayanai masu mahimmanci zuwa wasu tsarin ko matakai
Babu wasu fasalulluka da ke tallafawa
Ba za a iya kashe sarrafawar tsaro da ayyukan tsaro ba ko share su.
8.3
Software yana goyan bayan amintaccen riƙewar aikace-aikacen biyan kuɗi na de-Viking yana gudana akan PTS POI da aka amince da PCI
rubuce-rubucen ayyukan wutsiya.
na'urori.
20
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
8.4 B.1.3
Aikace-aikacen biyan kuɗi na Viking baya bayar da damar gida, mara amfani ko nesa, ko matakin gata, don haka babu wani mutum ko wasu tsarin da ke da damar yin amfani da mahimman kadarori, kawai aikace-aikacen biyan kuɗi na Viking yana iya ɗaukar mahimman kadarori.
· Aikace-aikacen biyan kuɗi na Viking baya ba da damar hanyoyin aiki.
Babu ayyuka don musaki ɓoyayyen bayanai masu mahimmanci
Babu ayyuka don ɓata mahimman bayanai
Babu ayyuka don fitarwa bayanai masu mahimmanci zuwa wasu tsarin ko matakai
Babu wasu fasalulluka da ke tallafawa
Ba za a iya kashe sarrafawar tsaro da ayyukan tsaro ba ko share su.
Software ɗin yana ɗaukar gazawa a cikin hanyoyin bin diddigin ayyuka kamar yadda ana kiyaye amincin bayanan ayyukan da ake da su.
Aikace-aikacen biyan kuɗin Viking yana gudana akan na'urorin PTS POI da aka amince da PCI.
Aikace-aikacen biyan kuɗi na Viking baya bayar da damar gida, mara amfani ko nesa, ko matakin gata, don haka babu wani mutum ko wasu tsarin da ke da damar yin amfani da mahimman kadarori, aikace-aikacen Viking kawai ke da ikon sarrafa kadarorin masu mahimmanci.
· Aikace-aikacen biyan kuɗi na Viking baya ba da damar hanyoyin aiki.
Babu ayyuka don musaki ɓoyayyen bayanai masu mahimmanci
Babu ayyuka don ɓata mahimman bayanai
Babu ayyuka don fitarwa bayanai masu mahimmanci zuwa wasu tsarin ko matakai
Babu wasu fasalulluka da ke tallafawa
Ba za a iya kashe sarrafawar tsaro da ayyukan tsaro ba ko share su.
Mai siyar da software yana kiyaye takaddun da ke bayyana duk zaɓuɓɓukan daidaitawa waɗanda zasu iya shafar tsaro na mahimman bayanai.
Aikace-aikacen biyan kuɗin Viking yana gudana akan na'urorin PTS POI da aka amince da PCI.
Aikace-aikacen biyan kuɗi na Viking baya bayar da ɗayan waɗannan masu zuwa ga masu amfani na ƙarshe:
· zaɓin daidaitacce don samun dama ga mahimman bayanai
21
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
B.2.4 B.2.9 B.5.1.5
· zaɓi mai daidaitawa don gyara hanyoyin kare mahimman bayanai
· samun nisa zuwa aikace-aikacen
· sabuntawa na nesa na aikace-aikacen
· zaɓi mai daidaitawa don gyara tsoffin saitunan aikace-aikacen
Software yana amfani ne kawai da aikin ƙirƙira lambar bazuwar da aka haɗa cikin ƙimar na'urar PTS ta tashar biyan kuɗi don duk ayyukan sirrin da suka haɗa da bayanai masu mahimmanci ko ayyuka masu mahimmanci inda ake buƙatar ƙimar bazuwar kuma baya aiwatar da nasa.
Viking baya amfani da kowane RNG (janar lambar bazuwar) don ayyukan ɓoyayyen sa.
Aikace-aikacen Viking baya samarwa ko amfani da kowane bazuwar lambobi don ayyukan sirri.
Ayyukan samar da lambar bazuwar.
Mutunci na faɗakarwar software files ana kiyaye shi daidai da Maƙasudin Gudanarwa B.2.8.
Duk nuni da sauri akan tashar Viking an lullube su a cikin aikace-aikacen kuma babu hanzari files suna nan a wajen aikace-aikacen.
Babu hanzari files a waje da aikace-aikacen biyan kuɗi na Viking, duk bayanan da ake buƙata suna samuwa ta aikace-aikacen.
Jagoran aiwatarwa ya haɗa da umarni ga masu ruwa da tsaki don sanya hannu a cikin sirrin kowane saƙo files.
Duk abubuwan da aka nuna a kan tashar Viking an sanya su cikin aikace-aikacen kuma babu hanzari files suna nan a wajen aikace-aikacen.
Babu hanzari files a waje da aikace-aikacen biyan kuɗi na Viking, duk bayanan da ake buƙata suna samuwa ta aikace-aikacen
22
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
15. PCI Secure Software Standard Bukatun Magana
Babi a cikin wannan takarda 2. Amintaccen Aikace-aikacen Biyan Kuɗi
Daidaitaccen Abubuwan Buƙatun Software na PCI Secure
B.2.1 6.1 12.1 12.1.b
Abubuwan buƙatun PCI DSS
2.2.3
3. Amintaccen software mai nisa
11.1
Sabuntawa
11.2
12.1
1&12.3.9 2, 8, & 10
4. Tsare Tsare-Tsare na Bayanan Hankali da Kariya na bayanan da aka Ajiye
3.2 3.4 3.5 A.2.1 A.2.3 B.1.2a
Tabbatarwa da Gudanarwa 5.1 5.2 5.3 5.4
3.2 3.2 3.1 3.3 3.4 3.5 3.6
8.1 & 8.2 8.1 & 8.2
Shiga
3.6
10.1
8.1
10.5.3
8.3
Mara waya ta hanyar sadarwa
4.1
1.2.3 & 2.1.1 4.1.1 1.2.3, 2.1.1,4.1.1, XNUMX
Rarraba hanyar sadarwa ta hanyar Nesa isar da bayanan mai riƙe da kati
4.1c ku
B.1.3
A.2.1 A.2.3
1.3.7
8.3
4.1 4.2 2.3 8.3
Hanyar Sigar Tsarin Viking
11.2 12.1.b
Umarni ga abokan ciniki game da 11.1
amintaccen shigarwa na faci da 11.2
sabuntawa.
12.1
23
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
16. Kalmomin Kalmomi
Bayanan mai riƙe katin TERM
DUKPT
3DES Mai ciniki SSF
PA-QSA
BAYANI
Cikakken igiyar maganadisu ko PAN da kowane ɗayan waɗannan: · Sunan mai riƙe da kati · Ranar ƙarewa · Lambar sabis
Maɓallin Maɓalli na Musamman (DUKPT) shine tsarin gudanarwa wanda a cikin kowane ma'amala, ana amfani da maɓalli na musamman wanda aka samo daga kafaffen maɓalli. Don haka, idan an lalata maɓalli da aka samu, gaba da bayanan ma'amala na baya har yanzu ana kiyaye su tunda maɓallan na gaba ko na baya ba za a iya tantance su cikin sauƙi ba.
A cikin cryptography, Sau uku DES (3DES ko TDES), bisa hukuma Algorithm na Encryption Data sau uku (TDEA ko Triple DEA), siffa ce ta maɓalli-maɓalli, wanda ke amfani da DES cipher algorithm sau uku ga kowane toshe bayanai.
Ƙarshen mai amfani da mai siyan samfurin Viking.
Tsarin Tsaro na Software na PCI (SSF) tarin ma'auni ne da shirye-shirye don ingantaccen ƙira da haɓaka software na biyan kuɗi. Tsaro na software na biyan kuɗi wani muhimmin sashi ne na gudanawar ma'amalar biyan kuɗi kuma yana da mahimmanci don sauƙaƙe amintaccen ma'amalar biyan kuɗi.
Ƙwararrun Ƙwararrun Tsaro na Aikace-aikacen Biyan Kuɗi. Kamfanin QSA wanda ke ba da sabis ga masu siyar da aikace-aikacen biyan kuɗi don tabbatar da aikace-aikacen biyan kuɗi na dillalai.
SAD (Bayanan Tabbatar da Mahimmanci)
Bayanan da ke da alaƙa da tsaro (Lambobin Tabbatar da Katin Kati, cikakkun bayanan waƙa, PINs, da Tubalan PIN) da ake amfani da su don tantance masu riƙe da kati, suna bayyana a bayyane ko sigar mara tsaro. Bayyanawa, gyarawa, ko lalata wannan bayanin na iya yin illa ga tsaron na'urar sirri, tsarin bayanai, ko bayanan mai riƙe da kati ko kuma ana iya amfani da su a cikin ma'amala ta yaudara. Ba dole ba ne a taɓa adana bayanan tabbatar da hankali lokacin da aka gama ciniki.
Farashin HSM
Dandalin software da Nets ke amfani da shi don haɓaka aikace-aikace don kasuwar Turai.
Hardware Tsaro module
24
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
17. Gudanar da Takardu
Mawallafin Takardun, Reviewers and Approvers
Bayanin SSA Development Compliance Manager System Architect QA Mai Samfur Manajan Injiniya Darakta
Aiki ReviewMarubuci Reviewer & Amincewa Reviewer & Amincewa Reviewer & Amincewa Reviewer & Approver Manager Manager
Claudio Adami / Flavio Bonfiglio Sorans Aruna Panicker Arno Ekström Shamsher Singh Varun Shukla Arto Kangas Eero Kuusinen Taneli Valtonen
Takaitacciyar Canje-canje
Lambar Sigar 1.0
1.0
1.1
Shafin Kwanan wata 03-08-2022
15-09-2022
20-12-2022
Yanayin Canji
Sigar Farko don Matsayin Software na PCI-Secure
Sabunta sashe na 14 tare da maƙasudin kulawa da ba su dace ba tare da hujjarsu
Sabunta sassan 2.1.2 da 2.2
da Self4000.
An cire
Link2500 (PTS sigar 4.x) daga
goyan bayan m jerin
Canza Mawallafi Aruna Panicker Aruna Panicker
Aruna Panicker
Reviewer
Ranar Amincewa
Shamsher Singh 18-08-22
Shamsher Singh 29-09-22
Shamsher Singh 23-12-22
1.1
05-01-2023 An sabunta sashi 2.2 tare da Link2500 Aruna Panicker Shamsher Singh 05-01-23
(pts v4) don ci gaba da tallafin
don wannan nau'in tashoshi.
1.2
20-03-2023 An sabunta sashi 2.1.1 tare da Latvia Aruna Panicker Shamsher Singh 21-04-23
da Lithuanian tashar tashar profiles.
Kuma 2.1.2 tare da BT-iOS sadarwa-
irin goyon baya
2.0
03-08-2023 Sigar saki an sabunta ta zuwa Aruna Panicker Shamsher Singh 13-09-23
2.00 a cikin kai/kafa.
An sabunta sashi 2.2 tare da sabo
Move3500 hardware da firmware
iri-iri. An sabunta sashi na 11 don
'Tsarin Sigar Tsarin Viking'.
Sashe na 1.3 da aka sabunta tare da sabon
sigar buƙatun PCI SSS
jagora. An sabunta sashin 2.2 don tallafi-
an cire mashigai tasha ba tare da tallafi ba-
ported hardware versions daga
jeri.
2.0
16-11-2023 Kayayyakin gani (CVI).
Leyla Avsar
Arno Ekström 16-11-23
25
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
Jerin Rarraba
Sunan Tashar Sashen Gudanar da Samfura
Haɓaka Aiki, Gwaji, Gudanar da Aiki, Ƙarfafa Ƙarfafa Ƙirar Samfura, Samfuran Manajan Ƙarfafawa
Amincewa da Takardu
Sunan mahaifi Arto Kangas
Mai Samfurin Aiki
Takardun Review Shirye-shirye
Wannan takarda za a sakeviewed kuma sabunta, idan ya cancanta, kamar yadda aka bayyana a ƙasa:
· Kamar yadda ake buƙata don gyara ko haɓaka abun ciki na bayanai · Bayan kowane canje-canje ko sake fasalin ƙungiya · Bayan sake fasalin shekara-shekaraview Biyo bayan cin gajiyar rauni · Bin sabbin bayanai / buƙatu game da raunin da ya dace
26
Jagorar Aiwatar da Madaidaicin Mai siyarwa na PCI-Secure Software v2.0 don Viking Terminal 2.00
Takardu / Albarkatu
 |
net PCI-Secure Standard Software [pdf] Jagorar mai amfani PCI-Secure Standard Software, PCI-Secure, Standard Software, Software |
