Nginxitha ukuthi i-POS yenkampani eyahlukene kuyenza amaphondo amanje amahhule?

Amatekonoloji Ayisisuluzeleko Ezintshangayo Kwi-POS Zencinci

Ukushicilela Amathetho Kuwo Wonke ukuze Waphathe

Ukubethela okuvela ekugcineni kuya ekugcineni noma i-E2EE kudlala indima ebalulekile ekugcineni ulwazi lwamakhasimende luphephile ngaphakathi kwezinhlelo ezivikelekile ze-point-of-sale. Lapho othile esusa ikhadi lakhe lesikweletu lapho ephuma, le-tech iyazifihli zonke lezo zinombolo ukuze zingafundwa muntu ngaphandle komprosesa wokukhokha uqobo. Lokho kusho ukuthi abaduni abakwazi ukucasha lapho idatha ihamba ngamanethiwekhi. Ukuphulwa kwedatha kulimaza amabhizinisi ngempela kulezi zinsuku. Izibalo zibonisa ukuthi amabhizinisi amancane angaba amaphesenti angu-60 empeleni ayavala ngenxa yokuhlaselwa okuthile ngo-inthanethi ngokusho kocwaningo lwakamuva mayelana nokuphepha kwe-POS kusukela ngo-May 2024. Isebenza kanjani i-E2EE? Ngokuyisisekelo, ithatha idatha evamile bese iyijika ibe yinhlamba isebenzisa amafomula akhethekile wezibalo abizwa ngokuthi ama-algorithm e-cryptographic. Lokhu kugcina konke kuyimfihlo kusukela lapho kuthunjwa okokuqala kuze kube yilapho ekugcineni ifika lapho kufanele iye khona.

EMV Chip Technology: Ngaphandle kweMagnetic Stripes

I-EMV chip tech engenziwe ngu-Europay, MasterCard, ne-Visa iyahlula ukwenziwa kwezifelokhadi ngokuthi yenzi kucode yokuthengwa okuhlukile kanye nesikhathi esifanayo. Ngemuva kokuthi i-EMV isetshenziswe kakhulu e-US, ukuthengwa okungathulwa kwezifelo kuhluka pansi nge-76%. Lokhu kungathulwa ngokulinganisa nokuthenga ngamaphesenti amikhulu ngaphambi kokuba le magnetic stripes esikhundleni yesikhathi ziyahlula ukuthunyelwa. Ukushintsha kwezifelo ezinzile ezikhundleni kwezifelo ziyakunceda kakhulu ngokuthi amaphesenti amakhawulawula ayikhona. Kwezinkampani, ukuthuthukiswa kwezimo ze-EMV azingeki kuphela ukuthuthukiswa kakhulu kodwa kungaba yimalwa ukuthi abasebenzisi babophelele amaphela abo kanye nobubekelelwa okudala.

Ukuthezwa kweToken: Ukubuyisela Idatha Engasenziwe

Ukugeleza kungaba yindlela ebalulekile yokuhlinzela ngemvume kuzo zisiteme zokuthengisa izindawo kuleli nxenye. Kusebenza ngokushintshela amanani wokubhuxelela amanani okwenza amathokheni. Uma lokhu kusukwa, amaphando ayimfihlakathiyo akugcinwa kuzo zisiteme. Noma ubani abathatha lezo zithokheni, azizobe zinethimba koma abasebenzisa amathokheni. Imicwaningo yesekela ikubonisa ukuthi lapho izinkampani zisebenzisa le ndlela, zifinyelela ukulungiswa kwezivumo zokuhlinzela kwezokudatha zomsebenzisi futhi zilungiselela ukuthi kudingekile ukuvumela amastandadi asePCI (bheka 'Imvume yePOS: 11 Zindlela Ezifanele Zokusebenzela Ngemvume Kwi-2024' ukuthola amadansi). Izinkampani ezifuna ukuthwala le ndlela ziyakhipha ukulungisa kwazo zokuhlinzela futhi zinikeza abasebenzisi ukuthula kokuthi izithengiso zabo zenziwa ngendlela ethintekayo.

Ukubeka konkxaso Ngeemva kwePOS

Imidingozi yePCI DSS Yokuqedwa KweTransakshoni

I-PCI DSS, okuqondile ngokuthi yindlela yokuphepha imali xa abasebenzisa izinhlelo zokuthenga (point-of-sale). Kungenzeka ukuthi yikhowudi yezinyathelo nezinhlobo zokuphepha imali ephawulekayo xa kubhuxekwa. Ukutholwa kwezinhlobo kubonisa ukuthi izinkampani eziyavuma le khowudi zingenza ukuthi kungena kwebhreji yedatha nge-48% ngaphansi kwaleyo zinkampani ezingavumi. Lokhu kungcono kakhulu le kutsi kunesimo esikhulu esibonakalayo xa kunezindlela zokubhlapa zokuxhumana nezimali. Abathengi bamele ukuthi bavume le khowudi kufanele bakhulule ukuthi kunezinye izidingo ezifanayo nezokuphepha kwenethiwekhi, ukubheka amathiphu okungenzeka, nokwakheka abasebenzi.

• Uhlukeni Lwesikhumba Esidingiweni : Sebenzisa amafayela nesiqhovu lesikhumbuzo ukuprotekela isikhumba sesidingiweni kusenamandla engasetshekeni.
• Ukuprotekela Idatha Yesithunywa : Enqumele amandla aqhoshelelwe kwi-transmission yedatha yesithunywa somphumela phakathi kwezindlela ezindala ezimpilisiphiyo ukusure ukudalaleka.
• Ukusetshenziswa Kwamandla Okuvavanya : Yibuyeleyo ledata ngokwesiphumo sokuqala; sebenzisa i-ID ezithathu kunye nomthavazo ofanayo.
• Ukuphohlwa Ngesikhatsi Sonqopho : Ngokujwayelekile yimfanelo yomsebenzi wekhonkho kunye nokuthintsa izinkinga zomsebenzi ukukhombisa amandla angaphandle komncane.
• Isikhwama Sokusebenza Komphumela : Ukwenza nokugcina umthetho ophakathi lokuthola ukuphatha edata ngaphandle kwezifundazwe.

Izicathulo eziningi zingaba zikhawuleza izibuzwana zokuncedeka okuncane kodwa zingabonisa ukuhluphekiswa kwesilono esikhathini sokuthiwa ukukhuseleka ukusetyenziswa kokuthola imali ngeke yasetyenziswa.

Imbizo ye-SSL/TLS kwiGateway yokuthola Imali

Imiprotokholi ye-SSL kanye ne-TLS usithile idatha xa iyashisa phakathi kwezisitimbi zokuthengisa (point-of-sale) kanye nezisevisi zasekhaya. Bayokhuphela abasebenzisa amathuluzi ukuba bathinte izimibongo emaphakathi kwekhasimende, lokhu kuyakuvikela izindlela zokuthengisa. Xa idatha iyahlukile kanye neyahlukwanga kusukela kuthengiswa, abasebenzisi baphuma ngokubonakala kuhle ukuthengisa ngendlela elekthronika. Izinhlelo zokusesha kanye ne-SSL zinikeza izindawo eziqinisekile kwezinye izinombolo zemiphakathi, lokhu kuyakungeza ukutholakala kwebhizinisi kanye ne-traffic kweziviki. Izinkhomba zokuphumula kudinga ukuvikelwa kwe-SSL/TLS ukusebenza ngendlela echanekile, lokhu kuyakunqatfisa ukuthi le miprotokholi yidingekile kakhulu ngaphandle kwekhipha ukubangelwa. Iyakudala umfanelo wokuthengisa okuhle kabanzi. Ibhizinisi lapho ethumela kwekhipha ukuvikela ngokukhawuleza kwe-SSL/TLS ayokuvikela kuphela, kodwa naye kuyakunika abathengi isithemba lokhu idatha yabo yasekhaya kanye nezinansi zabo zivikelekile kakhulu kusukela kwezithuluzi zokusebenza.

Umkhathalento Womkhakha Wesihlanu Esingabhedwayo

Imikhasi Yesihlanu SeAndroid Esintsha Kwisithombo

Izinhlelo zokuthengisa ezivumelekile kwe-Android uyizinto okuthi kushintsha indlela amadoti kusebenza ngayo namanje. Zinikeza amaskrin amathathu kusebenzela, izinhlobo eziningi zezinhlelo ezingasebenziswanga, futhi zisebenze ngokuzuzwe nezindlela zokulipa ezahlukene, okwenza ithuba lokuthenga libe lincane kwezokudla. Abasebenzisi lezi zinhlelo banelise ngoba bathulela ukuthi bakhuthaze indlela abasebenzisa ngayo inkampani ngekuthi kungabi nendaba ngokuphelele kwe-Android. Ngaphezulu, izindleko zokusebenza kuzo kungenzeka ukuba ziphansi ngokulingana nezinhlelo ezidoliwe. Aba-mlawuli wokwekisa bafakwa ukuthi kuzozwa okuningi ekuqaleni kwezinhlelo zokuthengisa ezinezinkimba nokuba amanye abathanda ukulipa ngemhla ngaphandle kokulala kunesikhathi eside emadotini amadala. Ubukhulu bezinhlelo zokuthengisa ezivumelekile kwe-Android bubonakala kakhulu lapho kubhekiwa ukuthi yini okuthi kusenzakwa emadotini noma lapho kuthenga ngokushesha nezokuphepha kungukhona okuphambene nezikhathi eziphezulu.

Amahleli Amanye Njengamanje neZinhlelo Zesokhwezulu Ezincinci

Abakheli banelisele kakhulu izinhawu zokugcina nezincane zokukhokha imali ngoba zivumela izindawo zokuthenga ukwenza imali lapho abakheli baphakeme, lokhu kwenza yonke into ngokulula futhi nokuthandwa kwezinye zonke. Abathengi abangena ngemibili lezi zinhawu zokukhokha bonke abakheli bakhona ukuthi kubaluleke kakhulu ukuthi abakheli babe nesikhathi esincane esikuletho kuzindlela futhi kube nesikhathi esiningi sokuthenga ngokwakhe. Ngokwesicelo sezinga lezokuthenga esisha, kwa zikhulu kwezinye izikhulu zabakheli (70%) abathanda ukuthenga ezindaweni ezinikeza leli khetho lokukhokha ngokugcwele. Lezi zinhawu ezincane zokukhokha zinezindaba ezinhle kakhulu yokulandela izindleko futhi ukwenza ukuthi izinyathelo zonke ziphume ngokuzuzwe emuva kwamadoda. Ngaphezulu, lapho amadoda wokusebenza angakhuluma ngokugcwele nabakheli lapho bazenza imali esikhathini sokuthenga, lokhu kwenza ukuthi bakhona ukuxhumana ngokulula okwenza abakheli bakwazi ukubuya futhi bakwazi ukubuya futhi bakwazi ukubuya.

Iingxenye Zokugcina Ukuziphatha Kwisihasho

Ukuvavanya Kwesikhatsi Sesikhombisa Ngenqanawe Nezikhatsi Ezidinga Izinsimu

Ukuthi kunezicathami zokugcina ngokusheshayo zenza ubunconywa kakhulu lapho kubekwa kageza amaphethini we-fraud futhi uthole imiyazelo ngokusheshayo ukuze uvikele indlela engeyona phambi kokuba kungenhlanhla. Lezi zicathami zihlinzeka ngqo kudatha yezindleko, ngakho ke izinkampani zingagcina noma yiliphi into engenakho futhi zithathelwe ngokushesha phambi kokuba abasebenzisa amathulela kwenze isifo. Izinombolo zokuvikela zilandela le nto futhi kahle, izinkampani ezenze ukufaka izicathami zokugcina ngokusheshayo zibona ukuthi kuthulelwe izindleko ezingeyona ngama-third, lokhu kusho ukuthi lezi zicathami ziphiweke kanjani ukuvikela. Lapho kuthunyelwe nezicathami zokugcina ezisemaphuzisweni, le ndawo yokuvikela iphumelela ngakoreke. Ukuthi lezi zicathami zingathunyelwa ngokushesha kuthiwa ukuthi izinkampani zingathola ukuvikela okuphelele kakhulu kwezindleko futhi kungena amathulwane ngaphandle kokushintsha.

Ukuphawula Kwesiqhino Somculo Ngokusebenzela

Lapho imikhiqizo iqinisekisa ukusebenzisa kwe-RBAC (Role-Based Access Control), babaluleka ngokuphelela ukuthi yikuphi into engasekho ukubona. Iminyango ethile ingasekho ukubonwa ngabanyekeke kodwa ngabanye abaningi kudinga yona ngokusebenzela. Okuthandwayo yilokho ukuthi le ndlela iyasula kakhulu izinkinga ezibizwa ngokuba ngaphakathi. Izinkomba ezibalwe ngokwembono zokusebenzisa le ndlela zinezinto ezifewekayo lapho abasebenzi bezimisele ukuthi babheke ngokungathanda izinto zokuvikela noma ukuthi kudinga yena ukusebenzela. Ngokuba kudinga ukuthi imikhiqizo ibe nezinto ezibalwe ngokwembono, kukhona izinto eziningi abafuna ukuzikhumbula. Izinkomba ezihlinzekileyo zokuthi yikuphi into engasekho ukusebenzisa futhi ukuthi abasebenzi babhalwe ngokuthi kudinga yena ukuthi le mthetho iyakuphela kanjani. Imikhiqizo ezidinga ukuthi izinkomba zokuhlinzeka zibe nezinkinga eziphansi kakhulu lapho kudinga ukuthi izinkomba zokuvikela zibe nezinto ezibalwe ngokwembono futhi zibe nezinyathelo ezinhle zokuvikela izinkomba.

Amapheramfudo Omncane Ukuthola Ukusuka Kwesicwangciso Sesihlanu

Ukufakwa Kwemvume Yophrojekthi Ngezinsuku

Kuhle ukuthi ikhasimende yenyeke inqubo yokuthenga ukuthi yenyeke ngokomdla uma izifiso ukuba ziphile kakhulu kumaqo fomu nokubulawa kwekhompiyutha. Iziphumo zombalanga zithi kakhulu: ngokuphelele kwe-90% yazo zonke i-hacking ezinhlanu zihlala zihlala nezinkinga ezaziwayo fanele kwenziwe ngokulandelana nokwenyekela. Lokhu kuxhomele kakhulu ukuthi izinyathelo zenyekelo kudinga ukuba zenyeke ngokomdla. Indlela engcono yokuphatha lezi nyekelo kukuthemba lapho kungekho inkampani, ngokwesibini noma kuqala kwemini ukuze abathengi bangeke bakhiphe. Izinkampani kufanele baphathe kokuqala lezi zinkinga ezithathwa ngokuba zikhulu ngokuzinca kweqoqo yokuphepha kanti kuzingelwa ukuthi zingcono kakhulu. Uma izinkampani zenze le nto ngokumiselwe, ziyakuphela kakhulu kwezimali bese bakhulelwa inkundla yabo ngokuthi abathengi baziwa ukuthi amaphando abo amathile ayephephile kakhulu.

Ukufundiswa Kwabantu Babasebenzi Ngokugcina Umlomo Nge-Data Handling

Ukubekiwa kwezifuna ngokuphawuliweyo kuhlonipha ukuthi izicelo zokulayisha izinketho kanye nezindlela zokusebenzisa amadatha kunceda kakhulu ekugcineni izinhlelo zokuthengisa esebenza. Ngokweminye imibhalo, kungenhla kwezindidima zokulayisha amadatha kumele kungu-80% kubekwe kakhulu ngokungaziwa kwezifuna noma ukulahla ukuzikhumbuzela izincomo zokuphepha. Ngakho ke ukubekiwa okuphumelelayo kungaba yindlela encane. Uma izinkampani zimelela ukubekiwa okuthinta ukuthi kumele kube nezinyathelo zokulayisha izifuna ukuthi bafunde ukuthola imiyalelo engalokiyo kanye nokwazi ukuphendula ngokushesha ngekho ukuphakama. Okungcono? Bantu bamelela ukulondoloza amadatha afanele, okwazi ukuncipha ukuthi kungaba yini okungcono kungaphumeleliyo. Futhi, ukwakha, akukho onke amadoda athanda ukuthi amadatha wokuthengisa athathwe noma ukuthi izinkampani zabo zilungiswa ngokwehlulekileyo ngenxa yezinto ezingekho ukuvikela.