Uses an additional symmetric key or asymmetric key pair to prevent unauthorized skimming and access to sensitive data and provides additional key management