User guide

NX2200 User Guide
© 2012 ExaDigm, Inc. Page 14 of 17 Rev. 1/0812
In order to make sure storage of cardholder and full track data is in the database only when it is actually
needed; transaction level controls are added as following:
 Save Cardholder Data in Database:
Cardholder data is saved to database during regular credit transactions.
 Save Full Track in Database:
Full track data is saved to database when store and forward transactions are accepted.
The application uses a module named Transaction Object Interface Processor that makes sure that all
“Transaction Variables” are deleted from memory after it is processed.
Also the Transaction Object module checks for the following conditions before running a payment
transaction and does not allow the transaction and forces the user to perform Settlement if “any of” the
following initial conditions fails:
 The oldest transaction in database shouldn’t be older than a configurable “Cardholder Retention
Time” Variable Object.
 Number of transactions in database shouldn’t exceed the configurable “Max Transaction Number”
Variable Object.
 Total Amount of transactions in database shouldn’t exceed the configurable “Max Transaction
Total” Variable Object.
 Available free flash memory space in system should be more than “Min Free Memory Size”
Variable Object.
16.1.3 Database Object Security Features
The application uses a module named the Database Interface Processor which gathers information from
different sources to determine whether to write the account data in the database or not. These settings
are all hard coded and cannot be accessed by any user. The settings are based on PA-DSS
requirements.
The following rules are applied in Database module:
 PIN Block Data is not stored in any case.
 CVV Data is not stored in any case.
 Full Magnetic Data is stored only if “all” of the following conditions are met:
i. If offline transaction is supported (Defined in a Configuration Variable Object)
ii. “Save Full Track Data in Database” flag is active in Transaction Object
iii. If current transaction is performed offline (or Store and Forward).