Card encryption - verifone.js | Online payments

Card encryption - verifone.js

Last updated: 29-May-2023

Overview

The verifone.js library is a quick and secure way to collect sensitive credit card data. This allows users full control over the checkout experience while maintaining a minimum SAQ A-EP level. The user receives an encrypted card block, which can be used to process a payment.

Availability

verifone.js is available for all Verifone merchants who use the Payments API of Verifone or process their payments using an external party.

Benefits

The verifone.js solution offers:

Full ownership over merchant payment flow
Reduced complexity for PCI DSS compliance
Seamless integration into an existing checkout page, regardless of the stack used

Supported browsers

Chrome
Firefox
Edge, IE 11+
Safari
Opera
Brave

How it works

workflow

Integration steps

An account is created in Verifone Central by a Verifone employee.

The onboarding is done with a Secure Card Capture Key on Verifone Central.

To integrate verifone.js in your Checkout page, follow these steps:

Load verifone.js in the <head> of your Checkout page, where the card form is shown.

<script src="https://cst.jsclient.vficloud.net/verifone.js"></script>

Sandbox environment:

Production environment:

2. Define the Secure Card Capture Key.

var encryptionKey = "SecureCardCaptureKey"

3. Collect the card data and place it into a JSON object.

Card schema

Parameter name	Type	Required/Optional	Description
cardNumber	String	Required	Numeric value with no spaces or separators allowed between the digits
expiryMonth	String	Required	Numeric value with length 2. e.g., March -> 03
expiryYear	String	Required	Numeric value with length 2, e.g., 2028 -> 28
cvv	String	Optional	Numeric value with length 3 or 4

var card = {
"cardNumber": "4000000000001091",
"expiryMonth": "03",
"expiryYear": "28",
"cvv": "123"
}

4. Invoke verifone.js to encrypt the card using encryptionKey

var encryptedCard = await verifone.encryptCard(card, encryptionkey)

verifone.encryptCard returns a Promise. Not all browsers support using async-await. Consider this in your integration.

Alternatively, if you would like to receive additional data regarding the card, such as expiration date and limited card digits use the function below:

var encryptedCard = await verifone.getEncryptedCardDetails(card, encryptionkey)

5. [Optional] To initiate a payment using the Payments API, use the encryptedCard parameter alongside the public key alias of the encryption key:

POST /v2/transactions/card
{
   amount: 3252,
   encrypted_card: encryptedCard,
   public_key_alias: K9,
   ...
}