Posted by Robert G Laurin on January 22, 2010 at 06:55:20:
In Reply to: Re: ODBC Driver posted by Keith Smith on January 21, 2010 at 22:45:02:
Wrote the Credit Card and pre-authorized bank payments system 15 years ago.
Basically you just make a batch file and transmit once a day. For single, instantaneous transaction there's a web app (plug in?) available. You can also use the card processor's (aka clearing house) application front end. Also like batch processing.
The challenge with Comet is to keep the card holder information secure. The comet Encryption is not secure enough (still better than nothing). The algorithm used be Comet is a common one, but it is known to have been broken years ago. Right now, AES encryption with a 256 key is the minimum recommended.
Remember the threat is from within, good firewall is not enough. We need to limit access to credit card information AND keep logs of all/any access to the data. Tricky, but feasible even with Comet.
Each file can be a maximum of 1MB in length Uploaded files will be purged from the server on a regular basis.