News for hackers. Stuff that matters.

A comment on A brief history of credit cards. Parent comment

Re:A brief history of credit cards by azag0 on Monday July 31, 2017 @05:16AM (#14890501)
From what you write and from the diagram in that pdf, it's the issuer bank that creates the device token, but then it's the network that does the reverse lookup. Do both the issuer bank and the network know the mapping between device tokens and cards?
[ Parent | on HN ]
Re:A brief history of credit cards by Artemis2 on Monday July 31, 2017 @05:51AM (#14890613)
Yes. The network needs of course to map tokens back to PANs (Primary Account Numbers). Tokens are included in authorization requests to issuing banks, in addition to the actual payment details.

Also, both issuers and networks need to be able to suspend and unlink tokens in case of fraud or if the end user loses their device, which implies that they know individual device tokens.

[ Parent | on HN ]