Limited PCI Scope

how it works with this approach, you can tokenize and store payment card data, minimizing pci compliance scope while maintaining control over payment processing provision token – obtain a secure token for a transaction use token – utilize token for payments, either in single use or multi use forms you must be pci level 1 compliant to implement this approach provisioning tokens tokenize card data this step allows you to process payments while minimizing pci exposure send card data to the psp for authorization, then provision a forter token for secure storage the forter token is then linked to a network token , ensuring enhanced security and enabling future transactions sequencediagram autonumber participant b as buyer participant m as merchant participant f as forter tokenization server participant psp as psp b >>m pay {carddata} m >>psp authorization {carddata, {3dsvalues}} psp >>m response {authorizationoutcome} m >>b payment succeeded/failed m >>f provision forter token {carddata} f >>f provision forter token {carddata} f >>m response {fortertoken} f >>f provision network token {carddata} f >>f bind tokens {fortertoken, networktoken} pay with forter token at this stage, use the single use token to complete a payment sequencediagram autonumber participant b as buyer participant m as merchant participant f as forter tokenization server participant psp as psp b >>m pay {selectedcardindex} m >>m retrieve forter token {selectedcardindex} m >>f detokenize {fortertoken} f >>f retrieve network token {fortertoken} f >>f provision nt cryptogram {networktoken} f >>m response {networktoken, ntcryptogram} m >>psp authrization {networktoken, ntcryptogram, {3dsvalues}} psp >>m response {authorizationoutcome} m >>b payment succeeded/failed once authorized, the transaction is completed upgrade token (optional) after payment, you may upgrade the token to multi use https //docs forter com/reference/upgrade to multi use , allowing future payments without requiring card re entry forter provides two solutions for generating a multi use token 1 network token preferred by issuers, adds security, and increases approval rates sequencediagram autonumber participant m as merchant participant f as forter tokenization server %% participant fv as forter vault participant cn as card network m >>f upgrade to multi use token \<br> {fortersingleusetoken, networktoken provision=true} %% f >>fv retrieve card data {fortersingleusetoken} %% fv >>f response {carddata} f >>cn provision network token {carddata} cn >>f response {networktoken} f >>f create multi use token {carddata, networktoken} f >>m response {multiusetoken} m >>m save forter token {multiusetoken} 2 multi use token without network token if a network token isn’t available, forter provides its own secure token sequencediagram autonumber participant m as merchant participant f as forter tokenization server %% participant fv as forter vault participant cn as card network m >>f upgrade to multi use token \<br> {fortersingleusetoken} %% f >>fv create multi use token {fortersingleusetoken} %% fv >>f response {multiusetoken} f >>m response {multiusetoken} m >>m save forter token {multiusetoken} use tokens once a token has been provisioned, you can use it for future payments the method depends on whether a network token was issued based on the way the token was created there are two different options for using the card 1 using a forter token linked to a network token sequencediagram autonumber participant u as buyer participant cp as checkout page participant m as merchant participant f as forter proxy %% participant fv as forter vault participant psp as psp participant cn as card network u >>cp pay with selected card cp >>m pay {selectedcardindex} m >>m retrieve forter multi use token {selectedcardindex} m >>f authorization \<br> {multiusetoken, networktoken provision=true} %% f >>fv retrieve network token {multiusetoken} %% fv >>f response {networktoken} f >>cn provision cryptogram {networktoken} cn >>f response {cryptogram} f >>psp authorization {cryptogram} psp >>f response {authorizationresult} f >>m response {authorizationresult} m >>cp payment succeeded/failed cp >>m payment succeeded/failed a cryptogram is a secure, time sensitive authentication value that improves approval rates and security for network token transactions 2\ use a forter multi use token (no network token) sequencediagram autonumber participant u as buyer participant cp as checkout page participant m as merchant participant f as forter proxy %% participant fv as forter vault participant psp as psp u >>cp pay with selected card cp >>m pay {selectedcardindex} m >>m retrieve forter multi use token {selectedcardindex} m >>f authorization \<br> {multiusetoken} %% f >>fv retrieve card data {multiusetoken} %% fv >>f response {carddata} f >>psp authorization {carddata} psp >>f response {authorizationresult} f >>m response {authorizationresult} m >>cp payment succeeded/failed cp >>m payment succeeded/failed