Tokenizing Your Circulation Data

Enhanced Security External vault outside DSI/SAXOTECH software External vendor provides vault service Edgil PayWay Forte Systems DSI software not in scope for PCI compliance

Cardholder Tokenization NEWSCYCLE Solutions offers a choice of payment vendors using a common token gateway API Available to self-hosted clients Cardholder information is directly captured by a third party payment vendor via secure web page Sensitive cardholder data is stored in a secure PCI compliant environment A token value replaces the cardholder account number in the circulation database Removes usage of the DSI / SAXOTECH circulation software from the scope of PCI DSS validation

Installation Establish Circulation Web Service Install Java Install Apache Configure SAXOTECH Circulation Security Create Web Service User Establish Web Service RLS User Profile Set up Role Maintenance codes (ADMIN, PCIGWY, TRUSTS) Create Web User: PCIGATEWAY Configure System Preferences

Token Conversion Extract Cardholder Information Send Cardholder Information to Payment Vendor and Receive Token Load Tokens Into Oracle Database Virtualize Cardholder Information in Oracle Database

Cardholder Tokenization Process DSI PowerBuilder & Web Client Real Time Request token Save token in database Never sees full card number Request SAXOTECH Token Gateway Web Service Stores/communicates request to payment vendor Stores/communicates token back to circulation database Payment Vendor Third Party Web client captures cardholder information Stores cardholder data in vault Generates and sends token to SAXOTECH Token Gateway Users: Subscribers Carriers CSR’s Carrier/SC Support

Thank You!