Online Payments

Card encryption - verifone.js

Last updated: 05-Apr-2022
Rate this article:

Overview

The verifone.js library is a quick and secure way to collect sensitive credit card data. This allows users full control over the checkout experience while maintaining a minimum SAQ A-EP level. The user receives an encrypted card block, which can be used to process a payment.

Availability

verifone.js is available for all Verifone merchants who use the Payments API of Verifone or process their payments using an external party.

Benefits

The verifone.js solution offers:

  • Full ownership over merchant payment flow
  • Reduced complexity for PCI DSS compliance
  • Seamless integration into an existing checkout page, regardless of the stack used

Supported browsers

  • Chrome
  • Firefox
  • Edge, IE 11+
  • Safari
  • Opera
  • Brave

Integration steps

An account is created in Verifone Central by a Verifone employee.

 The onboarding is done with a  Secure Card Capture Key on Verifone Central.

To integrate verifone.js in your Checkout page, follow these steps: 

  1. Load verifone.js in the <head> of your Checkout page, where the card form is shown.
<script src="https://jsclient_cst.dimebox.com/verifone.js"></script>

Sandbox environment:

Production environment: 

2. Define the Secure Card Capture Key.

var encryptionKey = "SecureCardCaptureKey"

3. Collect the card data and place it into a JSON object.

Card schema

Parameter name Type Required/Optional Description
cardNumber String Required Numeric value with no spaces or separators allowed between the digits
expiryMonth String Required Numeric value with length 2. e.g., March -> 03
expiryYear String Required Numeric value with length 2, e.g., 2028 -> 28
cvv String Optional Numeric value with length 3 or 4

 

var card = {
"cardNumber": "4000000000001091",
"expiryMonth": "03",
"expiryYear": "28",
"cvv": "123"
}

4. Invoke verifone.js to encrypt the card using encryptionKey.

var encryptedCard = await verifone.encryptCard(card, encryptionkey)
 

verifone.encryptCard returns a Promise. Not all browsers support using async-await. Consider this in your integration.

5. [Optional] To initiate a payment using the Payments API, use the encryptedCard parameter alongside the public key alias of the encryption key:

POST /v2/transactions/card
{
   amount: 3252,
   encrypted_card: encryptedCard,
   public_key_alias: K9,
   ...
}

Use cases

Use cases image

 

 
Rate this article:
Logo of Verifone