What technologies should be used to protect the Android application for paying with plastic cards as much as possible?

A

akimovpro2012-09-06 09:14:23

Android

akimovpro, 2012-09-06 09:14:23

Do you need to create an application for paying for various services with plastic cards (linking a card from the application, then only entering a CVV code for confirmation) via the REST API? What to foresee?
SSL, for example, mandatory, code obfuscation, minimal storage of data in the device. What else?

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

S

Sergey, 2012-09-06
@Ualde

In my opinion, the easiest way is to make a webgate and the application will be a kind of browser for this webgate - do all the processing and storage of information on the server, you just need to store the token on the client.

M

marazmiki, 2012-09-06
@marazmiki

Nobody will let you do that. Card service terminals (which in this case will be a smartphone) are subject to strict security requirements. Google PCI DSS at your leisure, everything is said there.