Secure data management for sensitive information
Methods, systems, and computer readable medium are provided for generating, by a secure processor, a plurality of configurable data entry elements configured into a webpage, receiving sensitive data entered via the plurality of configurable data entry elements during a user data entry session, generating a hidden controller iframe in the webpage, aggregating, by the hidden controller iframe, the sensitive data across the plurality of configurable data entry elements, and directing aggregated sensitive data to the secure processor hosted by a first server separate from a second server hosting the webpage.
1. A method, comprising:
providing, by a payment processor, a payment element in a web page of a merchant site, the payment element including a plurality of data entry elements for display on a client-side device;
providing, by the payment processor, a controller iframe in the web page to reconcile a data entry element state or content across the plurality of data entry elements;
receiving, by the payment processor, payment information from the client-side device relating to a payment instrument entered into at least one of the plurality of data entry elements; and
automatically reconciling, by the payment processor via the controller iframe, at least one of a data entry element state or content across the plurality of data entry elements based on the payment information, wherein the data entry element includes a visual configuration, and wherein automatically reconciling at least one of the data entry element state or content across the plurality of data entry elements comprises:
dynamically adjusting, by the payment processor, the visual configuration of at least one of the plurality of data entry elements based on at least one aspect of the payment information.
2. The method of claim 1 , wherein the payment element is hosted by a server at the payment processor.
3. The method of claim 1 , wherein the controller iframe is not displayed.
4. A non-transitory computer-readable medium having stored thereon instructions to cause a client device to execute operations comprising:
receiving, by the client device and from a payment processor, a payment element in a web page of a merchant site, the payment element including a plurality of data entry elements for display on the client device;
receiving, by the client device and from the payment processor, a controller iframe in the web page to reconcile a data entry element state or content across the plurality of data entry elements;
providing, by the client device and to the payment processor, payment information relating to a payment instrument entered into at least one of the plurality of data entry elements; and
automatically reconciling, by the controller iframe, at least one of a data entry element state or content across the plurality of data entry elements based on the payment information, wherein the data entry element includes a visual configuration, and wherein automatically reconciling at least one of the data entry element state or content across the plurality of data entry elements comprises:
dynamically adjusting, by the payment processor, the visual configuration of at least one of the plurality of data entry elements based on at least one aspect of the payment information.
5. The non-transitory computer-readable medium of claim 4 , wherein automatically reconciling at least one of a data element state or content across the plurality of data entry elements comprises:
aggregating, by the controller iframe, the at least one of a data entry element state or content of the plurality of data entry elements; and
storing, by the controller iframe and at the payment processor, the aggregation for automatically reconciling, by another controller iframe, at least one of a data entry element state or content across another plurality of data entry elements associated with another web page of the merchant site.
6. The non-transitory computer-readable medium of claim 4 , the method further comprising coordinating, by the controller iframe, a submission to the payment processor of payment information entered into one or more of the plurality of data entry elements.
7. The non-transitory computer-readable medium of claim 4 , the method further comprising coordinating, by the controller iframe, a submission to an API of payment information entered into one or more of the plurality of data entry elements.
8. The non-transitory computer-readable medium of claim 4 , the method further comprising:
receiving, by the client device and from the payment processor, a token for the payment information, the token functioning as a proxy for the payment information; and
electronically sending, by the client device, the token to the merchant site for conducting a transaction without the merchant site being exposed to the payment information.
9. The non-transitory computer-readable medium of claim 4 , wherein the payment element is hosted by a server at the payment processor.
10. A system comprising:
a client device; and non-transitory computer-readable medium having stored thereon instructions to cause the client device to execute operations comprising:
receiving, by the client device and from a payment processor, a payment element in a web page of a merchant site, the payment element including a plurality of data entry elements for display on the client device;
receiving, by the client device and from the payment processor, a controller iframe in the web page to reconcile a data entry element state or content across the plurality of data entry elements;
providing, by the client device and to the payment processor, payment information relating to a payment instrument entered into at least one of the plurality of data entry elements; and
automatically reconciling, by the controller iframe, at least one of a data entry element state or content across the plurality of data entry elements based on the payment information, wherein the data entry element includes a visual configuration, and wherein automatically reconciling at least one of the data entry element state or content across the plurality of data entry elements comprises:
dynamically adjusting, by the payment processor, the visual configuration of at least one of the plurality of data entry elements based on at least one aspect of the payment information.
11. The system of claim 10 , wherein the payment element is hosted by a server at the payment processor.
12. The system of claim 10 , wherein the method further comprises coordinating, by the controller iframe, a submission to the payment processor of payment information entered into one or more of the plurality of data entry elements.
13. The system of claim 10 , wherein the method further comprises coordinating, by the controller iframe, a submission to an API of payment information entered into one or more of the plurality of data entry elements.
14. The system of claim 10 , wherein the controller iframe is not displayed.
15. The system of claim 10 , wherein the method further comprises:
receiving, by the client device and from the payment processor, a token for the payment information, the token functioning as a proxy for the payment information; and
electronically sending, by the client device, the token to the merchant site for conducting a transaction without the merchant site being exposed to the payment information.
16. The system of claim 10 , wherein automatically reconciling at least one of a data element state or content across the plurality of data entry elements comprises:
aggregating, by the controller iframe, the at least one of a data entry element state or content of the plurality of data entry elements; and
storing, by the controller iframe and at the payment processor, the aggregation for automatically reconciling, by another controller iframe, at least one of a data entry element state or content across another plurality of data entry elements associated with another web page of the merchant site.
17. The system of claim 10 , wherein the method further comprises:
generating a plurality of hidden controller iframes in the web page; and
aggregating, by one of the hidden controller iframes, payment information from at least one data entry element.
18. The non-transitory computer-readable medium of claim 4 , wherein the controller iframe is not displayed.
19. The non-transitory computer-readable medium of claim 4 , wherein the method further comprises:
generating a plurality of hidden controller iframes in the web page; and
aggregating, by one of the hidden controller iframes, payment information from at least one data entry element.
20. The method of claim 1 , further comprising:
transmitting, by the payment processor and to the client device, a token for the payment information, the token functioning as a proxy for the payment information, wherein the client device is configured to electronically send the token to the merchant site for conducting a transaction without the merchant site being exposed to the payment information.