Protecting credit card information: encryption vs tokenisation

摘要

The ongoing battle between security vendors over encryption versus tokenisation often focuses on issues that are largely irrelevant. A closer look at the two technologies shows that the strengths and weaknesses of both are actually very similar.rnThe Payment Card Industry Data Security Standard (PCI DSS) requires the protection of cardholder data.' This includes credit card numbers and perhaps other information such as a name, expiration data or service code, if this additional information is stored with a credit card number.