Alipay, China's leading third-party online payment solutionAlipay, China's leading third-party online payment solution

Asset data migration guide

To ensure the data security of the asset information, APO offers the following services:

  • PAN Data import: You can import the asset data from other acquirers into your APO account. APO collaborates with your current acquirer to securely migrate your asset data. During this process, you can continue charging your users without interrupting service or requiring users to provide payment details again.
  • PAN Data export: APO can securely migrate your asset data to a new acquirer. In this case, an encrypted CSV file is to be exported, containing user card details and the APO token. The new acquirer can use this file to import the data into the system for secure transmission. You can contact Antom Technical Support and provide the new acquirer name to initiate the asset data migration.

Data import

Migrating asset data to APO involves the following steps:

  1. Make preparations
  2. Export application
  3. Encrypt the asset file
  4. Transfer the asset file

Make preparations

  • Initialize the GnuPG tool or choose other tools that can perform the Pretty Good Privacy (PGP) to encrypt or decrypt.
  • Use PGP public key to encrypt sensitive data (such as credit card information) for PCI-compliant migration. Refer to GnuPG for more details and start with importing public keys. If you have any questions, contact Antom Technical Support for troubleshooting.

Export application

Submit a request to your current acquirer to export the asset data for APO's data import.

Encrypt the asset file

To ensure the secure transfer of asset data, the current acquirer (the asset data exporter) needs to encrypt the asset files using the specified PGP public key.

You can download the following public key to encrypt the asset files.

📎pop_migrate_security_key_public.asc

Or copy the provided public key for encryption.

copy
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=nlgQ
-----END PGP PUBLIC KEY BLOCK-----

Run the following command to import the public key into your Keychain.

copy
gpg --import <path>/pop_migrate_security_key_public.asc

Note: <path> is the file path.

The public key information is as follows:

  • Name: APO Migrate Security Key
  • Creation time: 2024-05-23
  • Expiration time: 2029-05-22
  • Key ID: 7CBC0ACA531C1183
  • Fingerprint: C543 6A3C 5CCD 8D8F 5D32 9113 7CBC 0ACA 531C 1183
  • Key size: 4096 bits
  • Algorithm: RSA

After importing the public key, run the command to encrypt the file.

copy
gpg --encrypt --recipient 7CBC0ACA531C1183 <FILENAME>

Note: <FILENAME> is the asset file name. After executing the command, an encrypted <FILENAME>.gpg file is to be generated.

Transfer the asset file

Use the Secure File Transfer Protocol (SFTP) to transfer the asset files. After the asset data exporter uploads the files to the designated server, APO decrypts the uploaded asset files and imports the asset data into the APO system.

Data export

When exporting asset data, APO requires you to provide the following information:

  • An official email that contains the following content:
    • The reason to migrate asset data.
    • Your company name, company logo, signature, and date.
  • Name and valid PCI qualification of the new acquirer.
  • Provide the PGP public key for encrypting the asset files. This public key must be provided by displaying on the website of the new acquirer that has valid PCI qualification.

Data format

The decrypted CSV file format is as follows:

Parameters

Description

paymentMethodId

The APO card token (ALIPAYXXXXX format)

cardNo

The PAN/credit card number

expiryMonth

The month the card expires

expiryYear

The year the card expires

cardholderName

The customer's name on the card

billingAddress.region

The country or region associated with the card

billingAddress.state

The state or province associated with the card

billingAddress.city

The city associated with the card

billingAddress.address1

The first address line associated with the card

billingAddress.address2

The second address line associated with the card

billingAddress.zipCode

The postal code associated with the card

The following is an example of the code:

copy
paymentMethodId,cardNo,expiryMonth,expiryYear,cardholderName,billingAddress.region,billingAddress.state,billingAddress.city,billingAddress.address1,billingAddress.address2,billingAddress.zipCode,,,
ALIPAY/testToken1,428743ABC2318615,05,25,Tom,US,CA,Houston,anyAddress1,anyAddress2,90210,,,
ALIPAY/testToken2,428743ABC2318616,05,25,Tom,US,CA,Houston,anyAddress1,anyAddress2,90211,,,
ALIPAY/testToken3,428743ABC2318617,05,25,Tom,US,CA,Houston,anyAddress1,anyAddress2,90211,,,
ALIPAY/testToken4,428743ABC2318618,05,25,Tom,US,CA,Houston,anyAddress1,anyAddress2,90212,,,