PeepSafe Printing
The default configuration of PeepSafe does not allow printing, as it provides opportunities for agents — either willfully or accidentally — to print full Primary Account Number (PAN) data that would bring cardholder data back into their corporate environments and traverse their local networks as depicted in the case study below.
However, many agents need to print receipts for audit reasons, to provide these back to their customers or for other purposes.
We therefore developed a secure printing solution. There is an optional print directory within every user account. The agent can take a PDF and drop it into that directory for printing. Each user then installs a simple print client on their local computer. Once something is within that directory, the local print client polls that directory, and submits the job to a local printer. In order to prevent users from accidentally bringing themselves back into scope by printing receipts that have credit card information on them, or any other piece of documentation with a credit card number on it, there is a Data Loss Prevention solution purpose-built for detecting cardholder data. The Data Loss Prevention solution sits in front of the print directory and, when a print job is submitted within the portal environment, it’s inspected for cardholder data. In the event that it contains something that looks like a credit card number, the print job is detained and quarantined within a secure mailbox in the portal. Other alternatives would be to delete or redact the files or to mask out all but the last 4 digits of the credit card number. The same scanning technology is equally available to customers who wish to ensure that prohibited data such as Sensitive Authentication Data, is deleted post authorization.
PeepSafe Printing Features
- Print services are integrated into PeepSafe so that receipts and sanitized documents can be printed to any configured local print devices
- No payment data is ever transmitted to or stored on local printer hard drives
- Data Loss Prevention technology monitors the print queue ensuring that any documents containing payment data are re-directed to a quarantine hosted within the portal
- A simple configurable interface enables users to manage their local printer settings