Gateway API
...
Authorisations
Protected Card Data
2 min
protected card data sensitive card data should be protected in line with pci dss requirements an example of how to send protected card data is shown below the xml encoded structure for card data is \<plaincarddata> \<pan>9913330089010574\</pan> \<cardseqnb>00\</cardseqnb> \<fctvdt>2006 01\</fctvdt> \<xprydt>2016 12\</xprydt> \<svccd>201\</svccd> \<trck2>9913330089010574d161220101064064\</trck2> \</plaincarddata> once unnecessary spaces and carriage returns are removed, this xml encoded structure with the padding is \<plaincarddata>\<pan>9913330089010574\</pan>\<cardseqnb>00\</cardseqnb>\<fctvdt>2006 01\</fctvdt>\<xprydt>2016 12\</xprydt>\<svccd>201\</svccd>\<trck2>9913330089010574d161220101064064\</trck2>\</plaincarddata> using bdk (base derivation key) 37233e89 0b0104e9 bc943d0e 45eae5a7 with key serial number 398725a501 e290200017 the data encryption key a75d20f7 04517545 3e29259d 3b08a72a can be derived under initialisation vector a27bb46d1c306e09 using algorithm 3des 112 cbc, the encrypted version of the padded card data (hex representation) is cb8548f2f3633c4de9718e0bf185e874f95ad40bee69bfcfeafb7c57c109985fbebaa76045d42f0e2e8f47d26431b42d7fdf30a3f921b65c6698dece08c9a44483814673bfde05d22b78332479665c8c99bb371179944c24631627ddbd57e8db729e180c31b0d134ad9df8b6534a4a31f5d43a40746633fde6ea9dc249ba5e9b33e7c5fe46e64ae3d1fbc512e97ab479f9af018c215c0dfb56a9e277c7611139d73d1e6927587aab65aff8121f2f0414e3acb13449c9c25a890d927b9be0dc9de28e67dacaa9a133 this should be encoded as base64 y4vi8vnjpe3pcy4l8yxodpla1avuab/p6vt8v8ejmf++uqdgrdqvdi6pr9jkmbqtf98wo/khtlxmmn7ocmmkriobrno/3gxsk3gzjhlmxiyzuzcrezrmjgmwj929v+jbcp4yddgw0tstnfi2u0pkmfxuokb0zjp95uqdwkm6xpsz58x+ruzk49h7xrlperr5+a8bjcfcdftwqej3x2erodc9hmknwhqrza/4eh8vbbtjrle0scncwoknknub4nyd4o5n2sqpotm= the resulting xml encoded structure is \<card> 	\<prtctdcarddata> 	 \<cntttp>evlp\</cntttp> 	 \<envlpddata> 	 \<rcpt> 	 \<kek> 	 \<kekid> 	 \<keyid>specv1testkey\</keyid> 	 \<keyvrsn>2010060715\</keyvrsn> 	 \<derivtnid>oyclpqe=\</derivtnid> 	 \</kekid> 	 \<keyncrptnalgo> 	 \<algo>dkp9\</algo> 	 \</keyncrptnalgo> 	 \<ncrptdkey>4pagabc=\</ncrptdkey> 	 \</kek> 	 \</rcpt> 	 \<ncrptdcntt> 	 \<cntttp>data\</cntttp> 	 \<cnttncrptnalgo> 	 \<algo>e3dc\</algo> 	 \<param> 	 \<initlstnvctr>onu0brwwbgk=\</initlstnvctr> 	 \</param> 	 \</cnttncrptnalgo> 	 \<ncrptddata>y4vi8vnjpe3pcy4l8yxodpla1avuab/p6vt8v8ejmf++uqdgrdqvdi6pr9jkmbqtf98w o/khtlxmmn7ocmmkriobrno/3gxsk3gzjhlmxiyzuzcrezrmjgmwj929v+jbcp4yddgw0tstnfi2u0pkmfx uokb0zjp95uqdwkm6xpsz58x+ruzk49h7xrlperr5+a8bjcfcdftwqej3x2erodc9hmknwhqrza/4eh8vbb tjrle0scncwoknknub4nyd4o5n2sqpotm=\</ncrptddata> 	 \</ncrptdcntt> 	 \</envlpddata> 	\</prtctdcarddata> \</card>
