SYSTEM AND METHOD FOR SECURELY TRANSMITTING DATA ACROSS A SYSTEM LANDSCAPE
A system and method for securely transferring sensitive payment data across a system landscape. The system and method may utilize machine-readable media including program code stored therein executable by one or more processors to perform the transferring of payment data. The transferring of data includes generating and encrypting a data container to combine all sensitive payment data. The encryption logic is configured to automatically transfer keys between systems.
1 . A computer system comprising machine-readable media having stored therein instructions that when executed cause the computer system to implement a method for transferring data between computer systems, the method comprising:
receiving a transaction log in a first computerized system, the transaction log including payment data;
generating a data container, by a data container generation logic implemented by the instructions stored in the machine-readable media, the data container including payment data and references to the transaction data; and
receiving a certificate from a second computerized system, the second computerized system using a first encryption mechanism;
encrypting the data container, by an encryption logic implemented by the instructions stored in the machine-readable media; and
transmitting the transaction log and the encrypted payment data to a third computerized system.
2 . The computer system of claim 1 , wherein the payment data received by the first computerized system was received encrypted using a second encryption mechanism.
3 . The computer system of claim 2 , wherein the first computerized system retrieves a first key from storage to decrypt the payment data before generating the data container.
4 . The computer system of claim 1 , wherein the generated data container is encrypted using the certificate, wherein the certificate contains a first key and a first key version.
5 . The computer system of claim 4 , wherein the certificate and the encrypted data container are encrypted using the first key, and resulting encrypted value and the first key version are appended to the transaction log.
6 . The computer system of claim 4 , wherein the transaction log is transmitted to a middleware system, the middleware system changing the transaction log format from a first format to a second format, and the middleware system transmitting the re-formatted transaction log to the second system.
7 . The computer system of claim 6 , wherein the second system decrypts the encrypted data in the transaction log using the first key version.
8 . The computer system of claim 1 , wherein the first encryption mechanism uses an asymmetric encryption algorithm.
9 . The computer system of claim 2 , wherein the second encryption mechanism uses a symmetric encryption algorithm.
10 . The computer system of claim 1 , wherein the first computerized system is a store server.
11 . The computer system of claim 1 , wherein the transaction data is received from a point of sale device.
12 . The computer system of claim 1 , wherein the payment data includes credit card information.
13 - 20 . (canceled)