Galileo & Worldspan - Mask Credit Card Data in MIR and TAIR


12.10.2010

Overview (PA 1071)

Travelport™ is providing agencies an option to mask payment data in MIR and TAIR to facilitate compliance with the Payment Card Industry Data Security Standard (PCI-DSS). Masking card data from the source eliminates the need for the receiver of MIR and TAIR data to truncate or encrypt card data in destination applications.

Agencies should contact their back office systems provider before turning on masking functionality to avoid service interruptions.

Masking will be controlled at an agency level through new fields in the Apollo/Galileo MIR Options table (MMOD) and the Worldspan Agency Information Record (A.I.R.).

When an agency chooses to activate credit card masking, Travelport will use zeros (0) to mask all but the first 6 and last 4 digits of the credit card number, as well as, the credit card expiration date (where present). Masking will apply to all MIR and TAIR fields known to contain credit card information.

e.g. AX 3794 11000009008     0000 M12345

Customer Benefit

  • Eliminates the need for the Agency Back Office Systems to secure payment data to maintain PCI compliance.
  • Protect customer privacy.
Click here for more details, examples and load date.