<div dir="ltr">Yes, that would help with the issue of recording the call without storing sensitive data, so you could have an IVR take the credit card number.<div><br></div><div>It doesn't help with the guideline of the call being encrypted until the point it reaches your server, though.</div>
<div><br clear="all"><div dir="ltr"><font face="Verdana, Arial, Helvetica, sans-serif"><span style="font-size:13px"><span style="font-size:small">-Avi</span></span></font></div>
<br><br><div class="gmail_quote">On Mon, Dec 19, 2011 at 2:34 PM, leightonbrennan <span dir="ltr"><<a href="mailto:leightonbrennan@telcom.ie">leightonbrennan@telcom.ie</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hey<br>
I have seen in some other vendor call recorders that they are able using<br>
dtmf digit that once the user is saying there card info that once the<br>
dtmf digit is dialled the recording is paused and then when finished the<br>
dtmf digit is pressed again and the recording resumes.<br>
<br>
<br>
<br>
Best Regards,<br>
<br>
Leighton Brennan<br>
Technical Manager<br>
Telcom LTD<br>
A2 Nutgrove Avenue<br>
Rathfarnham<br>
Dublin 14<br>
Ireland<br>
<div class="im HOEnZb"><br>
-----Original Message-----<br>
From: <a href="mailto:asterisk-biz-bounces@lists.digium.com">asterisk-biz-bounces@lists.digium.com</a><br>
[mailto:<a href="mailto:asterisk-biz-bounces@lists.digium.com">asterisk-biz-bounces@lists.digium.com</a>] On Behalf Of Alex<br>
Balashov<br>
Sent: 19 December 2011 12:30<br>
To: <a href="mailto:asterisk-biz@lists.digium.com">asterisk-biz@lists.digium.com</a><br>
Subject: Re: [asterisk-biz] PCI Compliance for Credit Cards Over the<br>
Phone - how?<br>
<br>
On 12/19/2011 06:54 AM, Avi Marcus wrote:<br>
<br>
</div><div class="im HOEnZb">> I haven't really heard of any end-to-end encrypted origination lines.<br>
> Is this guideline ignored? How do people deal with this?<br>
> Does someone have T1 lines and offers encryption for origination...?<br>
<br>
</div><div class="HOEnZb"><div class="h5">It's a can of worms, and there are a myriad of answers. The<br>
acceptableness of many of the possible answers to PCI auditors, despite<br>
their technical viability, is uncertain.<br>
<br>
1. Dedicated end-to-end TDM circuits fall within the traditional<br>
guidelines, as do dedicated point-to-point data circuits.<br>
<br>
2. Some VoIP origination providers will deliver the traffic to you via<br>
various inter-site VPN technologies, both for signaling and bearer.<br>
<br>
3. SIP with TLS transport, and ZRTP+SRTP for voice.<br>
<br>
--<br>
Alex Balashov - Principal<br>
Evariste Systems LLC<br>
260 Peachtree Street NW<br>
Suite 2200<br>
Atlanta, GA 30303<br>
Tel: <a href="tel:%2B1-678-954-0670" value="+16789540670">+1-678-954-0670</a><br>
Fax: <a href="tel:%2B1-404-961-1892" value="+14049611892">+1-404-961-1892</a><br>
Web: <a href="http://www.evaristesys.com/" target="_blank">http://www.evaristesys.com/</a><br>
<br>
--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-biz mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-biz" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-biz</a><br>
<br>
<br>
<br>
<br>
--<br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" target="_blank">http://www.api-digital.com</a> --<br>
<br>
asterisk-biz mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-biz" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-biz</a><br>
</div></div></blockquote></div><br></div></div>