6

How do Apple Pay and Google Pay handle sensitive card info?

 2 years ago
source link: https://nextbigwhat.com/how-do-apple-pay-and-google-pay-handle-sensitive-card-info/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

How do Apple Pay and Google Pay handle sensitive card info?

/1 How do Apple Pay and Google Pay handle sensitive card info?

The diagram below shows the differences. Both approaches are very secure, but the implementations are different. To understand the difference, we break down the process into two flows.

FdMM9CAagAAVnu8.jpg
/2 1. Registering your credit card flow
2. Basic payment flow
/3 1๏ธโƒฃ The registration flow is represented by steps 1~3 for both cases.

๐€๐ฉ๐ฉ๐ฅ๐ž ๐๐š๐ฒ: It doesnโ€™t store any card info. It passes the card info to the bank. Bank returns a token called DAN (device account number). iPhone then stores DAN into a special hardware chip.

FdMM9viaAAM1e2R.jpg
/4 ๐†๐จ๐จ๐ ๐ฅ๐ž ๐๐š๐ฒ: When you register the credit card with Google Pay, the card info is stored in the Google server. Google returns a payment token to the phone.
FdMM-UsaAAMiHxM.jpg
/5 2๏ธโƒฃ When you click the โ€œPayโ€ button on your phone, the basic payment flow starts. Here are the differences:

๐€๐ฉ๐ฉ๐ฅ๐ž ๐๐š๐ฒ: For iPhone, the e-commerce server passes the DAN to the bank.

FdMM--sacAIzNSb.jpg
/6 ๐†๐จ๐จ๐ ๐ฅ๐ž ๐๐š๐ฒ: The e-commerce server passes the payment token to the Google server. Google server looks up the card info and passes it to the bank.

In the diagram, the red arrow means the credit card info is available on the public network, although it is encrypted.

FdMM_jsagAMvU1G.jpg
/7 ๐Ÿ‘‰ Over to you: Apple needs to discuss the DAN details with banks. It takes time and effort, but the benefit is that the credit card info is on the public network only once. If you are an architect and have to choose between security and cost, which solution do you prefer?
/8 I hope youโ€™ve found this thread helpful.

Follow me @alexxubyte for more.

Like/Retweet the first tweet below if you can: https://twitter.com/alexxubyte/status/1572614943811440642

Enjoy this thread?

You might like this thread โ€œWhy is the credit card called ๐ญ๐ก๐ž ๐ฆ๐จ๐ฌ๐ญ ๐ฉ๐ซ๐จ๐Ÿ๐ข๐ญ๐š๐›๐ฅ๐ž product in banksโ€ as well?

https://twitter.com/alexxubyte/status/1557758639946887170

Follow: @alexxubyte

[Via]

I like thisUnlikeUpvoteI dislike thisUndislike

report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK