1. Tokenizing Your Circulation Data

2. Enhanced Security External vault outside DSI/SAXOTECH software
External vendor provides vault service
Edgil PayWay
Forte Systems
DSI software not in scope for PCI compliance

3. Cardholder Tokenization
NEWSCYCLE Solutions offers a choice of payment vendors using a common token gateway API
Available to self-hosted clients
Cardholder information is directly captured by a third party payment vendor via secure web page
Sensitive cardholder data is stored in a secure PCI compliant environment
A token value replaces the cardholder account number in the circulation database
Removes usage of the DSI / SAXOTECH circulation software from the scope of PCI DSS validation

4. Installation Establish Circulation Web Service
Install Java
Install Apache
Configure SAXOTECH Circulation
Security
Create Web Service User
Establish Web Service RLS User Profile
Set up Role Maintenance codes (ADMIN, PCIGWY, TRUSTS)
Create Web User: PCIGATEWAY
Configure System Preferences

5. Token Conversion
Extract
Cardholder Information
Send Cardholder Information to Payment Vendor and Receive Token
Load Tokens Into Oracle Database
Virtualize Cardholder Information in Oracle Database

6. Cardholder Tokenization Process
DSI PowerBuilder & Web Client
Real Time
Request token
Save token in database
Never sees full card number
Request
SAXOTECH Token Gateway
Web Service
Stores/communicates request to payment vendor
Stores/communicates token back to circulation database
Payment Vendor
Third Party
Web client captures cardholder information
Stores cardholder data in vault
Generates and sends token to SAXOTECH Token Gateway
Users:
Subscribers
Carriers
CSR’s
Carrier/SC Support

7. Thank You!