Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Minimum knowledge for secure web payment
Search
Yutaro Sugai
July 22, 2014
Technology
1
1.1k
Minimum knowledge for secure web payment
安全なウェブ決済のために
最低限知っておいてほしいこと
WebPay meetup #1 2014/07/22
Yutaro Sugai
July 22, 2014
Tweet
Share
More Decks by Yutaro Sugai
See All by Yutaro Sugai
devlove-kansai-sre-scrum
hokkai7go
0
11k
sre-lounge8
hokkai7go
6
6.7k
88_techbookfest5_in_omotesandorb
hokkai7go
1
140
Career Keynote at LDD '18 in Muroran
hokkai7go
1
630
What has been realized to improve maintainability at "Eight".
hokkai7go
0
970
Serverless and tough access management
hokkai7go
1
1.5k
"1st try and team productivity"
hokkai7go
1
320
Technology to support Eight, Infrastructure part
hokkai7go
0
620
AWS and Serverless and Monitoring
hokkai7go
1
2.2k
Other Decks in Technology
See All in Technology
20251007: What happens when multi-agent systems become larger? (CyberAgent, Inc)
ornew
1
190
後進育成のしくじり〜任せるスキルとリーダーシップの両立〜
matsu0228
7
3.2k
自動テストのコストと向き合ってみた
qa
0
220
Reflections of AI: A Trilogy in Four Parts (GOTO; Copenhagen 2025)
ondfisk
0
110
AWS Control Tower に学ぶ! IAM Identity Center 権限設計の第一歩 / IAM Identity Center with Control Tower
y___u
0
100
大規模サーバーレスAPIの堅牢性・信頼性設計 〜AWSのベストプラクティスから始まる現実的制約との向き合い方〜
maimyyym
6
4.1k
AWS 잘하는 개발자 되기 - AWS 시작하기: 클라우드 개념부터 IAM까지
kimjaewook
0
130
Where will it converge?
ibknadedeji
0
210
【Kaigi on Rails 事後勉強会LT】MeはどうしてGirlsに? 私とRubyを繋いだRail(s)
joyfrommasara
0
230
AI時代こそ求められる設計力- AWSクラウドデザインパターン3選で信頼性と拡張性を高める-
kenichirokimura
3
290
20201008_ファインディ_品質意識を育てる役目は人かAIか___2_.pdf
findy_eventslides
2
600
AWS Top Engineer、浮いてませんか? / As an AWS Top Engineer, Are You Out of Place?
yuj1osm
2
210
Featured
See All Featured
Fashionably flexible responsive web design (full day workshop)
malarkey
407
66k
Practical Orchestrator
shlominoach
190
11k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
30
2.7k
Making the Leap to Tech Lead
cromwellryan
135
9.6k
Build The Right Thing And Hit Your Dates
maggiecrowley
37
2.9k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
eileencodes
37
2.6k
The MySQL Ecosystem @ GitHub 2015
samlambert
251
13k
Build your cross-platform service in a week with App Engine
jlugia
232
18k
How STYLIGHT went responsive
nonsquared
100
5.8k
The Web Performance Landscape in 2024 [PerfNow 2024]
tammyeverts
9
860
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
32
2.3k
Designing for Performance
lara
610
69k
Transcript
҆શͳΣϒܾࡁͷͨΊʹ ࠷ݶ͓͍ͬͯͯ΄͍͜͠ͱ Yutaro Sugai <
[email protected]
> @hokkai7go
ϖΠʂ (ָ͠ΜͰ·͔͢)
҆શͳΣϒܾࡁͷͨΊʹ ࠷ݶ͓͍ͬͯͯ΄͍͜͠ͱ Yutaro Sugai <
[email protected]
> @hokkai7go
@hokkai7go ! WebPay ɾαʔό܈ͷӡ༻ ɾPCIDSSͳͲηΩϡϦςΟج४ͷ४ڌ ! ݸਓ ɾ֤छRubyܥΧϯϑΝϨϯεͷϨϙʔτ൝ ɾΔͼ·ฤू ɾChef࣮ફೖॻ͖·ͨ͠
PCIDSSͬͯ·͔͢ʁ
PCIDSSͱ ΫϨδοτΧʔυใ࿙Ӯࢭͷ ͨΊͷࠃࡍηΩϡϦςΟج४ ΫϨδοτΧʔυใΛऔΓѻ͏ શͯͷࣄۀऀαʔϏεϓϩόΠ μɺ͜ͷඪ४ʹ४ڌ͢Δඞཁ͕ ͋Γ·͢ɻ(േଇͳ͠)
PCIDSSͱ ܾࡁࣄۀऀ͚ͩͰͳ͘ AWSͳͲͷαʔϏεϓϩόΠμ͕ ४ڌ͢Δྫ͕૿͍͑ͯΔ
Χʔυ൪߸࿙Ӯͷ ࡾେϦεΫϙΠϯτ
ॲཧ ૹ อଘ
4242#4242#4242#4242 ૹ
4242#4242#4242#4242 ૹ
4242#4242#4242#4242 ૹɾॲཧ
4242#4242#4242#4242 อଘ
ૹ
PCIDSS ૹ࣌҉߸ԽΛཁٻ
”ΦʔϓϯͳެڞωοτϫʔΫܦ༝Ͱػີ ੑͷߴ͍ΧʔυձһσʔλΛૹ͢Δ ߹ɺҎԼͷΑ͏ͳɺڧྗͳ҉߸ԽͱηΩϡ ϦςΟϓϩτίϧʢSSL/TLSɺIPSECɺ SSHͳͲʣΛ༻ͯ͠อޢ͢Δɻ” - PCIDSS ཁ݅ͱηΩϡϦςΟධՁखॱόʔδϣϯ3.0 ΑΓൈਮ
҉߸ԽͤͣʹΧʔυ൪߸ ͷૹ͍ͯ͠·ͤΜ͔ʁ
ੜͷΧʔυ൪߸ΛαʔόͰ ड͚ͱΓͨ͘ͳ͍Ͱ͢ΑͶ
Έͳ͞Μ͕Χʔυ൪߸Λۃྗѻ Θͳ͍͍ͯ͘Α͏ʹɺτʔΫϯ ܾࡁͷΈΛ༻ҙ͍ͯ͠·͢
ɾΫϥΠΞϯταΠυτʔΫϯ ɾαʔόαΠυτʔΫϯ
ΫϥΠΞϯταΠυτʔΫϯͷར ʮॲཧʯʮૹʯʮอଘʯͷ ͯ͢Λճආ͢Δ͜ͱ͕Ͱ͖·͢
https://webpay.jp/docs/payments_with_token
ΫϥΠΞϯταΠυτʔΫϯΛΘͳ͍ ɾʮॲཧʯʮૹʯΛආ͚ΒΕͳ͍ ɾੜͷΧʔυ൪߸Λѻ͏ϦεΫ ɹɾܦ࿏্ͷϩάʹΧʔυ൪߸͍ͬͯ·ͤΜ͔ʁ ɹɾʮॲཧʯޙͷϝϞϦ҆શͰ͔͢ʁ
ʮॲཧʯʮૹʯΛߦ͏͜ͱϦεΫͰ͢ɻ ΫϥΠΞϯταΠυτʔΫϯΛར༻ͯ͠ ආ͚Δ͜ͱΛ͓͢͢Ί͠·͢ɻ
҆શͳΣϒܾࡁͷͨΊʹ ɾSSLͷ༻(αΠτؙ͝ͱ or ࠷Ͱܾࡁϖʔδ) ɾదͳΤϥʔϋϯυϦϯά ɾෆཁͳΧʔυใͷഁغ