To 4Go (forego: do without) actual cardholder data is one way Shift4 is helping merchants achieve Real Security and Simplify PCI.

4Go SafeSwipe ^®

Shift4's solution to the vulnerability of Cardholder Data (CHD) as it is transmitted over networks or stored in the local file logs of traditional merchants is 4Go SafeSwipe™. The first solution of its kind, 4Go uses Card Information Replacement Technology^sm (CIRT) to secure CHD at the point-of-sale by replacing it with false data before it ever enters the Point-of-Sale (POS) or Property Management System (PMS).

4Go is effectively a driver-based firewall that runs on the POS/PMS terminal and intercepts CHD as soon as it is swiped. This data is transmitted to Shift4’s Universal Transaction Gateway™ (UTG), where a false data packet is generated and returned to the POS/PMS application. The false information subsequently enters the POS/PMS and is used to perform the transaction. The false CHD is sent to Shift4's secure payment gateway DOLLARS ON THE NET^® where it is associated with the actual CHD and sent for authorization. The actual CHD is subsequently sent to Shift4’s secure data centers for storage. When the response comes back, the POS handles the response as normal. Although the use of false data is effective in short term use or lower volume transaction situations, Tokenization may be more appropriate if transaction volume exceeds certain levels.

4Go can also be combined with Tokenization to replace the false CHD at the POS/PMS. Since the false data packet is intended for short-term use, combining 4Go's functionality with Tokenization provides a long term solution that allows the merchant to perform all the same transaction functions, as well as keep up to a 24-month archive for auditing, chargeback defense and other information requests. Essentially, anything the actual card number would be used for can be accomplished using the Token. When integrating the two technologies, upon transaction authorization the DOLLARS ON THE NET gateway uses Tokenization technology to generate a random, alphanumeric Token to return to the POS with the authorization code. The Token replaces the false data packet for future use and reference, and the false data packet is discarded.

4Go eliminates security concerns about transport and immediate data storage because the real CHD never enters the merchant system and is never stored, processed or transmitted. Combining 4Go with Tokenization sanitizes the system and entirely removes sensitive cardholder data from the equation.

“I am very impressed with the concept of 4Go. With the current Payment Card Industry (PCI) rules far too burdensome for the average merchant, POS vendor, or Information Technology person, the elegant design of 4Go has the potential to greatly simplify PCI compliance. Most importantly, 4Go can improve cardholder security at the merchant level to create a real win-win for everyone.”

- Gary Gibb, President, AutoClerk Inc.