Support A2Billing :

provided by Star2Billing S.L.

Support A2Billing :
It is currently Thu Mar 28, 2024 5:08 pm
Auto Dialer Software


All times are UTC




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: Card number (PIN-code) in invoice, receipts
PostPosted: Thu May 28, 2009 9:50 am 
Offline

Joined: Wed May 13, 2009 7:19 am
Posts: 24
If possible, change account number in documents to login, because annonce of customer's PIN is unsecure.
Thanks


Top
 Profile  
 
 Post subject: Re: Card number (PIN-code) in invoice, receipts
PostPosted: Thu May 28, 2009 6:11 pm 
Offline

Joined: Sun Mar 12, 2006 2:49 pm
Posts: 954
Location: Barcelona
good point, I will add a ticket for this.


Top
 Profile  
 
 Post subject: Re: Card number (PIN-code) in invoice, receipts
PostPosted: Thu May 28, 2009 6:30 pm 
Offline

Joined: Tue Mar 17, 2009 4:00 pm
Posts: 153
Location: Where the sun shines
Hi,

I agree this is a security risk.

however, to my knowledge (correct me if I'm wrong) it is the only identifier to id the customer when he enquires regarding his invoice - the invoice screen is filtered by the account # - so is the customer screen... so finding exactly who is "Mr Smith" calling about invoice 20090000123 may become tricky !

I think in the long run, there may be a need to have a customer id different from the PIN number.

J.


Top
 Profile  
 
 Post subject: Re: Card number (PIN-code) in invoice, receipts
PostPosted: Fri May 29, 2009 5:58 am 
Offline

Joined: Wed May 13, 2009 7:19 am
Posts: 24
Customer's login is unique as a PIN, and may be used for indentification of the customer.
It also may be used as name, username, accountcode, regexten in sip/iax parameters, so, customer's PIN number will be only used for authentication.


Top
 Profile  
 
 Post subject: Re: Card number (PIN-code) in invoice, receipts
PostPosted: Fri May 29, 2009 8:06 am 
Offline

Joined: Fri Jun 23, 2006 3:56 pm
Posts: 4065
Maybe a short term workaround for this problem is to only display the first 3 digits of the PIN/Account number on the invoice followed by an appropriate number of ***'s or xxx's

So when Mr Smith phones up with a problem, you can type in the first 3 digits of the account number, and you will get a small subset of the possible customers it could be, and Mr Smith can easily be identified by name from that subset.

Joe


Top
 Profile  
 
 Post subject: Re: Card number (PIN-code) in invoice, receipts
PostPosted: Fri May 29, 2009 9:08 am 
Offline

Joined: Sun Mar 12, 2006 2:49 pm
Posts: 954
Location: Barcelona
using "login/alias" can lead to issues as this can change in time.
using a the 3 first digits might outcome to a subset but if the system use short length for the account code, the list might be huge.

TMHO the CardID sounds the most relevant here.


Cheers,
/Areski


Top
 Profile  
 
 Post subject: Re: Card number (PIN-code) in invoice, receipts
PostPosted: Wed Jun 03, 2009 8:59 am 
Offline

Joined: Wed May 13, 2009 7:19 am
Posts: 24
areski wrote:
using "login/alias" can lead to issues as this can change in time.
using a the 3 first digits might outcome to a subset but if the system use short length for the account code, the list might be huge.

TMHO the CardID sounds the most relevant here.


Cheers,
/Areski


How login/alias in documents cat lead to issues?
and if i use login/alias as username, accountcode, etc in voip setiings (i don't want annonce customer's pin in any voip settings), it may lead to issues too ?


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 
VoIP Billing solution


All times are UTC


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group