Worldpay EMV Data Flow

---

Critical Information

Your WorldPay account must have "PASS" enabled. Be sure to let your Worldpay rep know this. This is what allows card tokenization, a critical part of your credit card data security. To ensure that credit card tokens are maintained for an appropriate length of time, be sure that the line below is added to the configuration file, MENUINI.FIL, in your Exec/Tech software folder: ELEMENT-PURGE-DAYS=30,270 This shows our recommended default of 30 days for Guest History and 270 days for everything else. The number of days can be changed. If this is not done, the credit card tokens will not be saved and cards that have been tokenized will have to be swiped again when used. Execu/Tech Systems, Inc. software DOES NOT STORE CREDIT CARD NUMBERS. We only store a token that's returned by Worldpay. The token does not contain the credit card number. Execu/Tech does not have access to the credit card numbers of your guests and cannot provide them to you. If you need to see a credit card number, you must contact Worldpay for assistance.

It's important to understand the flow of data between Execu/Tech Systems software and Worldpay triPOS EMV cloud . This understanding can help you determine if you are PCI compliant and can allow you to provide accurate information during a PCI audit.

Execu/Tech Systems software never communicates with the EMV PIN Pad, and sensitive cardholder data is never seen, passed through, or stored by the software.

• If the proper procedures are used, there will never be any sensitive cardholder seen by, or stored in, Execu/Tech Systems software.
• To ensure that this is always true, you should never enter credit card data into comment, reference or note fields. 

EMV Flow of Credit Card Data

The data flow is very simple. 

• All communication is encrypted using the latest TLS 1.2 protocol.
  
  
• The EMV PIN Pad uses your internet connection to communicate with the triPOS cloud service hosted by Worldpay on their servers.
  
  
• The Execu/Tech Systems software also uses your internet connection to communicate with the triPOS cloud service.
  
  
• When a customer needs to pay with a credit card, we request the appropriate transaction type by sending a message to the triPOS cloud service, which in turn tells the EMV PIN Pad to begin the transaction. 
  
  
• The transaction is completed on the PIN Pad and all cardholder information is passed between the PIN Pad and the triPOS service.
  
  
• After the transaction is complete, the triPOS cloud service tells us whether or not the transaction was a success and provides us with the appropriate data.
  
  
• At no time will the Execu/Tech Systems, Inc. software see the credit card information, nor is it ever passed through the software. Execu/Tech Systems, Inc. software doesn't communicate with the EMV PIN Pad at all, only the triPOS cloud service. 

• The only information identifying the customer's credit card to our software will be a unique alpha numeric token provided by the triPOS cloud service and the last 4 digits of the card number.

This is an example of what a token might look like: BD211C96-F547-4163-7245-A6A8156143BC. You can see it doesn't resemble a credit card number. This token can't be used by hackers or thieves to process a credit card if it's stolen. Hackers and thieves can't steal what doesn't exist.

User Input

Some transactions require user input on the PIN Pad, and some do not. We provide two different progress windows to let you know what needs to happen.

User Input Required:

User Input NOT Required:

See Also:

WorldPay Critical Setup Info

WorldPay EMV PIN Pad Setup

WorldPay EMV Cloud Config

WorldPay EMV Failure Messages

WorldPay EMV PIN Pad Troubleshooting

WorldPay Receipt Printer Setup

​