Abstract: A system for creating a restricted use payment card comprising a data processing environment non-compliant with a security requirement for payment cards and a data processing environment compliant with a security requirement for payment cards is disclosed. The non-compliant data processing environment is configured to generate a label, store the label in the non-compliant data processing environment, and provide to the compliant data processing environment a request to create a new payment card. The compliant data processing environment is configured to generate new payment card data, generate a token from the new payment card data; and provide the token to the non-compliant data processing environment. The non-compliant data processing environment is further configured to replace the stored label with the token value.

Abstract: A system for enhancing payment card data security comprising a card payment terminal compliant with a security requirement for payment cards and a processing environment non-compliant with a security requirement for payment cards is disclosed. The compliant card payment terminal is configured to generate a token from a payment card data presented to the card payment terminal and transmit the token and a set of transaction parameters to the data processing environment non-compliant with a security requirement for payment cards. The non-compliant data processing environment is configured to receive the token identifying a security specification comprising at least one security parameter associated with the token and receive the set of transaction parameters and determine whether the transaction parameters submitted to the non-compliant data processing environment satisfy the at least one identified security parameter and provide a response to the compliant card payment terminal comprising the determination.

Abstract: An apparatus for processing payment card data is disclosed (106). The apparatus comprises a tokenisation module (212) operative to generate a token from payment card data, the tokenisation module complying with a security requirement for payment cards; and a registration module (218) operative to transmit the token to a token store for storage therein, the token store being external to the tokenisation module (212). Such apparatus may utilise existing secure payment card processing apparatus to generate tokens. There is also disclosed a system for storing a token and associating a user's personal details with the token together with a method for generating a token and storing it with a user's personal details.