Hi Dustin:

Do customers ever need to see their credit card number?
Never

Question: Is the credit card processing done on this computer as well? 
Or on another computer? It's best to physically separate the credit card 
database from the processing server.
The credit card processing is done in a different physical location. 
However, the database has an encrypted version of the card. The 
encryption is done at the application level and travels in its encrypted 
form to the database.

Do your sales or transaction people need to access this site, or can
they run on the processing server?
Unfortunately, they need access to this information to pull the 
information from the database. Then this information is decrypted, once 
again at the application level.

This is the problem that I am facing now. The potential sales people 
will need access to this information to enter and retrieve data.

Answer these questions and we can start from there.

Thank you for your Help Dustin.

Alvaro Zuniga

-- 
Alvaro Zuniga
Information Techonology Professional
Zunitek Solutions
(337) 654 6515
www.zunitek.com

Reply via email to