Tokenisation

When a card is saved on a merchant website or added to a mobile wallet, storing the actual card number (PAN) creates risk: if the merchant's systems are breached, criminals can misuse the numbers. With tokenisation, the merchant or device stores a token instead. The token is linked to the real card only in the secure vault of the card scheme or issuer, and it is often restricted to a particular merchant or device.

During a payment, the token is sent through the network; the token service provider maps it back to the real card number for authorisation by the issuer. If a token is stolen, it cannot be used elsewhere, and it can be cancelled without replacing the physical card.

Tokenisation differs from encryption. Encrypted data can be decrypted with a key, while a token has no mathematical relationship to the original number.

Tokenisation underlies mobile NFC payments and card-on-file e-commerce transactions and helps institutions meet data security standards such as PCI DSS, reducing the impact of data breaches.

मर्चेन्ट वेबसाइट वा मोबाइल वालेटमा वास्तविक कार्ड नम्बर (PAN) राख्दा प्रणाली ह्याक भए दुरुपयोगको जोखिम हुन्छ। टोकनाइजेसनमा मर्चेन्ट वा उपकरणले टोकन मात्र राख्छ; टोकन र वास्तविक कार्डको सम्बन्ध कार्ड स्किम वा जारीकर्ताको सुरक्षित भल्टमा मात्र हुन्छ र प्रायः विशेष मर्चेन्ट वा उपकरणमा सीमित हुन्छ।

भुक्तानी हुँदा टोकन सेवा प्रदायकले टोकनलाई वास्तविक नम्बरमा बदली जारीकर्तालाई स्वीकृतिका लागि पठाउँछ। चोरिएको टोकन अन्यत्र प्रयोग हुँदैन र कार्ड नफेरी रद्द गर्न सकिन्छ। इन्क्रिप्सन कुञ्जीले खोल्न सकिन्छ तर टोकनको मूल नम्बरसँग गणितीय सम्बन्ध हुँदैन।