PCI DSS (Payment Card Industry Data Security Standard)

PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment to protect cardholder data.

PAN Masking (Requirement 3)

function maskPAN(pan) {
  // Show only last 4 digits
  if (pan && pan.length > 4) {
    const visibleDigits = pan.slice(-4);
    const maskedPortion = '*'.repeat(pan.length - 4);
    return maskedPortion + visibleDigits;
  }
  return '****';
}

// Usage
const cardNumber = "4111111111111111";
console.log(maskPAN(cardNumber)); // ************1111

-- Mask PAN in database queries
SELECT 
  customer_id,
  CONCAT(REPEAT('*', LENGTH(pan) - 4), RIGHT(pan, 4)) AS masked_pan,
  expiry_date
FROM payment_cards
WHERE customer_id = ?;

-- Result: ************1111

Strong Authentication Implementation (Requirement 8)

// Multi-factor authentication implementation
class PCI_Authentication {
  constructor() {
    this.maxFailedAttempts = 6;
    this.lockoutDuration = 30; // minutes
    this.passwordComplexity = {
      minLength: 12,
      requireUppercase: true,
      requireLowercase: true,
      requireNumbers: true,
      requireSpecialChars: true
    };
  }

  validatePasswordComplexity(password) {
    const { minLength, requireUppercase, requireLowercase, 
            requireNumbers, requireSpecialChars } = this.passwordComplexity;
    
    if (password.length < minLength) return false;
    if (requireUppercase && !/[A-Z]/.test(password)) return false;
    if (requireLowercase && !/[a-z]/.test(password)) return false;
    if (requireNumbers && !/d/.test(password)) return false;
    if (requireSpecialChars && !/[!@#$%^&*(),.?":{}|<>]/.test(password)) return false;
    
    return true;
  }

  enforceAccountLockout(userId, failedAttempts) {
    if (failedAttempts >= this.maxFailedAttempts) {
      // Lock account for specified duration
      const lockUntil = new Date(Date.now() + (this.lockoutDuration * 60 * 1000));
      this.lockAccount(userId, lockUntil);
      return { locked: true, lockUntil };
    }
    return { locked: false };
  }
}