If I understand correctly, you want the web front end to be able to encrypt credit card numbers, but not decrypt them. This sounds like a perfect application for
. Give the front end the public key, and hide the private key wherever you want to be able to decrypt the credit card information.