Tokenization and Other Methods of Security for Cardholder Data
Tokenization and Other Methods of Security for Cardholder Data
复制标题
持卡人数据的令牌化和其他安全方法
作者：
J. Stapleton;R. Poore
摘要本文比较了令牌化与其他持卡人数据保护方法的相对安全强度和实际应用，这些方法包括截断、掩码、加密、散列和密钥散列。描述了每种方法的有效性，并探讨了组合方法的细微安全弱点。此外，还介绍了将加密方法与合理的密钥管理实践结合使用的固有复杂性。
ABSTRACT This paper compares the relative security strengths and practical use of tokenization with other cardholder data protection methods including truncation, masking, encryption, hash, and keyed hash. The usefulness of each method is described, and the subtle security weaknesses of combining methods are explored. Further, the inherent complexities of using cryptographic methods with sound key management practices are also presented.