+Article 22 2.

Article 22 2.

For the purpose of paragraph 1, payment service providers shall ensure that each of the following requirements is met:

(a) 

personalised security credentials are masked when displayed and are not readable in their full extent when input by the payment service user during the authentication;

(b) 

personalised security credentials in data format, as well as cryptographic materials related to the encryption of the personalised security credentials are not stored in plain text;

(c) 

secret cryptographic material is protected from unauthorised disclosure.

1. Overview

,

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards