PCI DSS Information Supplement Tokenization

← Back to document page

Information Supplement : PCI DSS Tokenization Guidelines Standard: PCI Data Security Standard (PCI DSS) Version: Date: August 2011 Author: Scoping SIG, Tokenization Taskforce PCI Security Standards Council 2 Information Supplement PCI DSS Tokenization Guidelines August 2011 The intent of this document is to provide supplemental Information . Information provided here does not replace or supersede requirements in the PCI Data Security Standard. Table of Contents 1 Executive Summary.

Tokenization is a process by which the primary account number (PAN) is replaced with a surrogate value called a ―token.‖ De-tokenization is the reverse process of redeeming a token for ... and additional security controls above and beyond those required in PCI DSS may be warranted. 2.1.4 Cryptographic Key Management Cryptographic key ...

  Required, Tokenization