+CHAPTER IV CONFIDENTIALITY AND INTEGRITY OF THE PAYMENT SERVICE USERS' PERSONALISED SECURITY CREDENTIALS
---+Article 22 General requirements
------+Article 22 1.
------+Article 22 2.
------+Article 22 3.
------+Article 22 4.
---+Article 23 Creation and transmission of credentials
---+Article 24 Association with the payment service user
------+Article 24 1.
------+Article 24 2.
---+Article 25 Delivery of credentials, authentication devices and software
------+Article 25 1.
------+Article 25 2.
---+Article 26 Renewal of personalised security credentials
---+Article 27 Destruction, deactivation and revocation
|
CHAPTER IV CONFIDENTIALITY AND INTEGRITY OF THE PAYMENT SERVICE USERS' PERSONALISED SECURITY CREDENTIALS
CHAPTER IV CONFIDENTIALITY AND INTEGRITY OF THE PAYMENT SERVICE USERS' PERSONALISED SECURITY CREDENTIALS
1. Ħarsa ġenerali
| Titlu |
Regolamentazzjoni |
|
Article 22 General requirements
|
|
|
Article 23 Creation and transmission of credentials
|
Article 23
Creation and transmission of credentials
Payment service providers shall ensure that the creation of personalised security credentials is performed in a secure environment.
They shall mitigate the risks of unauthorised use of the personalised security credentials and of the authentication devices and software following their loss, theft or copying before their delivery to the payer.
|
|
Article 24 Association with the payment service user
|
|
|
Article 25 Delivery of credentials, authentication devices and software
|
|
|
Article 26 Renewal of personalised security credentials
|
Article 26
Renewal of personalised security credentials
Payment service providers shall ensure that the renewal or re-activation of personalised security credentials adhere to the procedures for the creation, association and delivery of the credentials and of the authentication devices in accordance with Articles 23, 24 and 25.
|
|
Article 27 Destruction, deactivation and revocation
|
Article 27
Destruction, deactivation and revocation
Payment service providers shall ensure that they have effective processes in place to apply each of the following security measures:
(a)
the secure destruction, deactivation or revocation of the personalised security credentials, authentication devices and software;
(b)
where the payment service provider distributes reusable authentication devices and software, the secure re-use of a device or software is established, documented and implemented before making it available to another payment services user;
(c)
the deactivation or revocation of information related to personalised security credentials stored in the payment service provider's systems and databases and, where relevant, in public repositories.
|
,
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Standards relatati
2. Rekwiżiti identifikati
3. Standards relatati
|