Ver i Sign Payment Gateway Interface Guide

8/12/2019 Ver i Sign Payment Gateway Interface Guide

1/28

Setup & Configuration Guide

Verisign Payment Gateway

Pronto Networks Headquarters4637 Chabot Drive Suite 350Pleasanton, C !45""#nite$ States%el& '( !)5 ))7 5500

Fax: +1 925 460 8223

www.prontonetworks.com


2/28

Setup & Configuration Guide Verisign Payment Gateway Interface

Copyright 2005 Pronto Networks, Inc. All Rights Reserved.

Document Details

Document Revision History

Pronto *+eration Su++ort System V30 Page )

itle Setu+ - Con.iguration Gui$e

!ersion 30

Category Verisign Payment Gateway

Product Pronto *SS /elease 301

"udience So.tware Customers

Created on "th2uly )005

#atest Revision on ("th2uly )005

!ersion Date Revised $y "pproved $y C%angesComments

(0 " 2uly )005 anveer an$u Desai nitial Dra.t

)0 (( 2uly )005 anveer an$u Desai Stan$ar$ low an$ $etaile$ $esri+tiono. terms use$

30 (" 2uly )005 anveer an$u Desai Seurity an$ Glossary


3/28


Contents

( Summary & Scope of t%e Document '

) How Payment Processing (orks )

uthori8ation )

Settlement *

'+ !erisign

Pay.low Pro - 9in: eatures ,

Contat Details ,

4 Pre-Requisites to setup !erisign Payment Gateway .

Pay.low ount .

VeriSign egistration .

n nternet merhant aount .

SS9 Server Certi.iates .

%est your Pay.low ount .

tivate your Pay.low ount .

5 Security /

Digital Certi.iates /

SS9 Server Certi.iates 01

$$ress Veri.iation Servie 00

Verisign Seure$ Seal 0'

6 Setup !erisign Gateway wit% Pronto 2SS 0)

%o on.igure Payment ;etho$s in Pronto *SS 0)

Set u+ Verisign Payment Gateway in Pronto *SS 0*

Con.igure Verisign Payment Gateway < or =SP 03

7 Glossary 41

Pronto *+eration Su++ort System V30 Page 3


4/28


Summary

Pronto *+erating Su++ort System /*SS1 su++orts multi+le +ayment inter.aes to

+roess Cre$it Car$ transations over the nternet Verisign is one o. the su++orte$

inter.aes with whih ustomers an o..er their subsribers an o+tion to +urhasetheir +ro$ut>servies online %his inter.ae enables an easy way to onnet an$

transat seurely over the nternet

%his $oument $esribes various +roe$ures, .eatures an$ +re?re@uites to on.igure

Verisign +ayment gateway, whih an be integrate$ with Pronto *+erating Su++ort

System /*SS1 .or online transations %his $oument also serves as a gui$e .or

setu+ an$ on.iguration o. Verisign +ayment gateway with Pronto *SS t also

inlu$es Pronto *SS sreenshots .or ste+?by?ste+ on.iguration

Scope

%his gui$e is inten$e$ .or ustomers who will be using Pronto *SS so.tware .or their

=ireless etwor:s %he Sreenshots a+ture$ .or Verisign Payment Gateway

on.iguration are o. Pronto *SS release 30 %he in.ormation in this $oument is

subAet to hange without notie %his $oument will be u+$ate$ as the Pronto *SS

solution set grows with its subse@uent releases



5/28


How Payment Processing (orks

Payment +roessing an be $ivi$e$ into two maAor +hases or ste+s

uthori8ation an$

Settlement

"ut%ori5ation

uthori8ation veri.ies that the ar$ is ative an$ that the ustomer has su..iient re$itavailable to ma:e the transation

Figure 1 Authorization Process

Steps 6nvolved

( Customer $ei$es to ma:e a +urhase on ;erhantBs =eb site, +roee$s to he:?

out, an$ in+uts re$it ar$ in.ormation) ;erhantBs =eb site reeives ustomer in.ormation an$ sen$s transation

in.ormation to Payment Proessing Servie

3 Payment Proessing Servie routes in.ormation to the Proessor

4 Proessor sen$s in.ormation to the ssuing an: o. the CustomerBs re$it ar$

5 ssuing an: sen$s transation result /authori8ation or $eline1 to the Proessor

6 Proessor routes transation result to the Payment Proessing Servie

7 Payment Proessing Servie +asses result in.ormation to ;erhant



6/28


" ;erhant ae+ts or reAets transation

Settlement

%he settlement +roess trans.ers authori8e$ .un$s .or a transation .rom the ustomerBsban: aount to the merhantBs ban: aount

Figure 2 Settlement Process



7/28


8/28


30 $ay %rial ount *nline Fn@uiry Priing n.ormation

egional *..ies nternational *..ies

Pre-requisites to setup !erisign Payment Gateway

%he .ollowing are the re@uirements an$ ste+s re@uire$ be.ore setting u+ VeriSign +aymentgateway in *SS

0+ " Payflow "ccount

9ive ount / Pay.low 9in:>Pro1 or

%est>%rial ount

4+ !erisign Registration

Create the Pay.low aount you will use to aess an$ o+erate your +ayments+roessing servie

'+ "n 6nternet merc%ant account

n nternet merhant aount is an aount with a .inanial institution that enablesyou to ae+t +ayments over the nternet %o @uali.y .or an nternet merhantaount, you must have a he:ing aount with a #S ban: . you $o not have anaount with a #S ban:, many a@uiring institutions an assist you Hour a@uiringinstitution must set u+ your aount to use one o. the .ollowing +roessing networ:s&

FDS

irst Data ;erhant Servies

orwest

ova

Paymenteh

%eleChe:

Vital

)+ SS# Certificates

SS9 erti.iates an be +urhase$ .rom any one o. the below mentione$ Certi.iateauthorities

VeriSign

%hawte Consulting

SoietI +er i Servi8i anari ? SS S+

nternet Publishing Servies

Certisign Certi.iation Digital 9t$a

elSign

*+ est your Payflow accountFnsure that you an aess your Pay.low aount an$ submit transations +ro+erly#se VeriSign ;anager /htt+s&>>+aymentsverisignom>manager1 to ensure you an+roess test transations VeriSignEs test servers allow you to simulate transationsthrough your =eb site an$ your Pay.low aount %here are no transation hargesor .ees inurre$ while your aount is in the test state

Note: You can test Payflow transactions without an Internet Merchant Account !owe"er#before you can acti"ate your Payflow account# you must ha"e an Internet Merchant Account

,+ "ctivate your Payflow account+

Pronto *+eration Su++ort System V30 Page "
https://register-payflow.verisign.com/testreg.cfm?partner=VeriSign&product=1001&memo1=WebLink22https://www.verisign.com/cgi-bin/go.cgi?a=w45240142576032000http://www.verisign.com/products-services/payment-processing/accept-credit-card-pricing.htmlhttp://www.verisign.com/verisign-inc/verisign-contact-information/index.html#regionalhttp://www.verisign.com/verisign-inc/verisign-contact-information/index.html#internationalhttp://www.verisign.com/http://www.thawte.com/http://www.ssb.net/http://www.ips.es/http://www.certisign.com.br/http://www.belsign.be/https://payments.verisign.com/managerhttps://register-payflow.verisign.com/testreg.cfm?partner=VeriSign&product=1001&memo1=WebLink22https://www.verisign.com/cgi-bin/go.cgi?a=w45240142576032000http://www.verisign.com/products-services/payment-processing/accept-credit-card-pricing.htmlhttp://www.verisign.com/verisign-inc/verisign-contact-information/index.html#regionalhttp://www.verisign.com/verisign-inc/verisign-contact-information/index.html#internationalhttp://www.verisign.com/http://www.thawte.com/http://www.ssb.net/http://www.ips.es/http://www.certisign.com.br/http://www.belsign.be/https://payments.verisign.com/manager


9/28


tivate your aount to enable you to submit live transations e.ore you anativate your Pay.low aount to +roess live transations, ma:e sure that you havesuess.ully run test transations an$ that you have an ative nternet ;erhantount

Note:$nce you acti"ate your Payflow account# you will be billed accordin% to your ser"ice

plan

o activate your Payflow account>0+ Specify your ransaction Settings+

Set $ollar limits an$ rules .or how your aount +roesses transationsor Fg

;aimum mount +er %ransation;aimum mount .or Cre$itsllow on?re.erene$ Cre$itsCre$its may eee$ original transation amountllow re.erene transations

4+ 9nter accepted card types+

S+ei.y the re$it ar$s that you will ae+t .or +ayment an$ whih +roessoryou will use %his in.ormation is available .rom your merhant ban:

Note> . you a++lie$ .or a ;erhant e?Solutions nternet ;erhant ount throughVeriSign, this in.ormation has been om+lete$ .or you by ;erhant e?Solutions

'+ 9nter your acquirerprocessor account information+

Proessor is the institution res+onsible .or vali$ating +ayment transations%he Proessor routes .inanial transations between merhant ban:s, $ebitnetwor:s, Visa, ;asterCar$, the ar$hol$ersE ban:s, an$ other .inanialinstitutions Fnter the $etails .or your nternet ;erhant aount, available .romthe merhant ban: that issue$ your aount

Note: If you applied for a Merchant e&Solutions Internet Merchant Account throu%h'eriSi%n# this information has been completed for you by Merchant e&Solutions

Pronto *+eration Su++ort System V30 Page !


10/28


Security

%o suee$ in the e?ommere mar:et+lae, businesses must beome .ully aware o.nternet seurity threats, ta:e a$vantage o. the tehnology that overomes them, an$ winustomersB trust Fighty?.ive +erent o. =eb users surveye$ re+orte$ that a la: o. seurityma$e them unom.ortable sen$ing re$it ar$ numbers over the nternet %he merhantswho an win the on.i$ene o. these ustomers will gain their loyaltyJan$ an enormouso++ortunity .or e+an$ing mar:et share n +erson?to?+erson transations, seurity is base$on +hysial ues Consumers ae+t the ris:s o. using re$it ar$s in +laes li:e $e+artmentstores beause they an see an$ touh the merhan$ise an$ ma:e Au$gments about thestore *n the nternet, without those +hysial ues, it is muh more $i..iult to assess thesa.ety o. a business lso, serious seurity threats have emerge$ y beoming aware o. theris:s o. nternet?base$ transations, businesses an a@uire tehnology solutions thatoverome those ris:s

%his setion $esribes about $i..erent metho$s - tehnology available to seure onlinetransations over the internet

0+ Digital Certificates4+ SS# Server Certificates

'+ "ddress !erification Service)+ !erisign Secured Seal

0+ Digital Certificates

$igital erti.iate is an eletroni .ile that uni@uely i$enti.ies in$ivi$uals an$ =eb siteson the nternet an$ enables seure, on.i$ential ommuniations t assoiates thename o. an entity that +artii+ates in a seure$ transation /eg, an email a$$ress ora =eb site a$$ress1 with the +ubli :ey that is use$ to sign ommuniation with thatentity in a ry+togra+hi system %hey are issue$ by a truste$ thir$ +arty, a erti.iateauthority /C1, whih veri.ies the i$entity o. the erti.iateEs hol$er %hey are tam+er?+roo. an$ annot be .orge$

Digital erti.iates $o two things&i %hey authentiate that their hol$ers ? +eo+le, web sites, an$ even

networ: resoures suh as routers ? are truly who or what they laim tobe

ii %hey +rotet $ata ehange$ online .rom the.t or tam+ering

or eam+le, onsi$er the ase o. a seure =eb transation that ta:es +lae when auser visits a =eb store.ront to ma:e a re$it ar$ +urhase =hen the userBs browseraesses a seure +age, a +ubli :ey .rom the =eb store has alrea$y been $elivere$ tothe lient browser in the .orm o. an K50! $igital erti.iate t all ha++enstrans+arently to the browser user at the time the seure onnetion is set u+%he browser trusts the erti.iate beause it is signe$, an$ the browser trusts thesignature beause the signature an be veri.ie$ n$ why an it be veri.ie$L eausethe signerBs +ubli :ey is alrea$y embe$$e$ in the browser so.tware itsel.

ty+ial erti.iate ontains .ollowing .iel$s&

Pronto *+eration Su++ort System V30 Page (0


11/28


Version

Serial number

Signature algorithm D

ssuer name

Vali$ity +erio$

SubAet /user1 name

SubAet +ubli :ey in.ormation ssuer uni@ue i$enti.ier /version ) an$ 3 only1

SubAet uni@ue i$enti.ier /version ) an$ 3 only1

Ftensions /version 3 only1

Digital signature .or the above .iel$s

Different types of Digital Certificates

De+en$ent on their usage Digital Certi.iates are available in a number o. $i..erentty+es&

Personal& #se$ by n$ivi$uals re@uiring seure email an$ web base$

transations

2rgani5ation& #se$ by or+orate to i$enti.y em+loyees .or seure email an$web base$ transations

Server& %o +rove ownershi+ o. a $omain name an$ establish SS9 > %9S

enry+te$ sessions between their website an$ a visitor

Developer& %o +rove authorshi+ an$ retain integrity o. $istribute$ so.tware

+rograms

4+ SS# Server Certificates

SS9 server Certi.iates .ul.ill two neessary .untions

0+ SS# server aut%enticationJSS9 Certi.iates allow users to on.irm a =ebserverBs i$entity =eb browsers automatially he: that a serverBs erti.iate an$+ubli D are vali$ an$ have been issue$ by a CJsuh as VeriSignJinlu$e$ inthe list o. truste$ Cs built into browser so.tware SS9 server authentiation isvital .or seure eommere transations in whih users, .or eam+le, are sen$ingre$it ar$ numbers over the =eb an$ .irst want to veri.y the reeiving serverBsi$entity

4+ SS# encryptionJSS9 Certi.iates establish a seure hannel that enables allin.ormation sent between a userBs =eb browser an$ a =eb server to beenry+te$ by the sen$ing so.tware an$ $ery+te$ by the reeiving so.tware,+roteting +rivate in.ormation .rom intere+tion over the nternet n a$$ition, all$ata sent over an enry+te$ SS9 onnetion are +rotete$ with a mehanism .or$eteting tam+ering, that is, .or automatially $etermining whether the $ata has

been altere$ in transit %his means that users an on.i$ently sen$ +rivate $ata,suh as re$it ar$ numbers, to a =eb site, trusting that SS9 :ee+s it +rivate an$on.i$ential

SS# ? DefinedSecure Sockets #ayer /SS#1 tehnology is the in$ustry?stan$ar$ metho$ .or+roteting web ommuniations $evelo+e$ by etsa+e Communiations Cor+oration%he SS9 seurity +rotool +rovi$es $ata enry+tion, server authentiation, messageintegrity, an$ o+tional lient authentiation .or a %CP>P onnetion eause SS9 isbuilt into all maAor browsers an$ web servers, sim+ly installing a $igital erti.iateturns on their SS9 a+abilities

Pronto *+eration Su++ort System V30 Page ((
http://developer.netscape.com/tech/security/ssl/howitworks.htmlhttp://developer.netscape.com/tech/security/ssl/howitworks.html


12/28


How SS# Server Certificates (ork

%he SS9 +rotool uses a ombination o. asymmetri +ubli :ey enry+tion an$ .astersymmetri enry+tion %he +roess begins by establishing an SS9 Mhan$sha:eNJallowing the server to authentiate itsel. to the browser user an$ then +ermitting theserver an$ browser to oo+erate in the reation o. the symmetri :eys use$ .or

enry+tion, $ery+tion, an$ tam+er $etetion&( ustomer ontats a site an$ aesses a seure$ #9, a +age seure$ by an

SS9 erti.iate /in$iate$ by a #9 that begins with Mhtt+s&N instea$ o. AustMhtt+&N or by a message .rom the browser1 %his +age ty+ially might be anonline or$er .orm olleting +rivate in.ormation .rom the ustomer, suh asa$$ress, +hone number, an$ re$it ar$ number or other +aymentin.ormation

) %he ustomerBs browser automatially sen$s the server the browserBs SS9version number, i+her settings, ran$omly generate$ $ata, an$ otherin.ormation the server nee$s to ommuniate with the lient using SS9

3 %he server res+on$s, automatially sen$ing the ustomerBs browser the siteBs$igital erti.iate, along with the serverBs SS9 version number, i+her settings,et

4 %he ustomerBs browser eamines the in.ormation ontaine$ in the serverBserti.iate, an$ veri.ies that&

%he server erti.iate is vali$ an$ has a vali$ $ate

%he C that issue$ the server has been signe$ by a truste$ C whose

erti.iate is built into the browser %he issuing CBs +ubli :ey, built into the browser, vali$ates the

issuerBs $igital signature %he $omain name s+ei.ie$ by the server erti.iate mathes the

serverBs atual $omain name5 . the server annot be authentiate$, the user is warne$ that an enry+te$,

authentiate$ onnetion annot be establishe$6 . the server an suess.ully be authentiate$, the ustomerBs =eb browser

generates a uni@ue Msession :eyN to enry+t all ommuniations with the siteusing asymmetri enry+tion

7 %he userBs browser enry+ts the session :ey itsel. with the siteBs +ubli :ey sothat only the site an rea$ the session :ey an$ sen$s it to the server

" %he server $ery+ts the session :ey using its own +rivate :ey! %he browser sen$s a message to the server in.orming it that .uture messages

.rom the lient will be enry+te$ with the session :ey(0%he server then sen$s a message to the lient in.orming it that .uture

messages .rom the server will be enry+te$ with the session :ey((n SS9?seure$ session is now establishe$ SS9 then uses symmetri

enry+tion,/whih is muh .aster than asymmetri PO enry+tion1 to enry+tan$ $ery+t messages within the SS9?seure$ M+i+elineN

()*ne the session is om+lete, the session :ey is eliminate$

t all ta:es only seon$s an$ re@uires no ation by the user

SS# Strengt%s

SS9 omes in two strengths, 40? or 56?bit an$ ()"?bit, whih re.er to the length o. thesession :ey generate$ by every enry+te$ transation %he longer the :ey, the more$i..iult it is to brea: the enry+tion o$e ()"?bit SS9 enry+tion is the strongestommerially available or$ing to S 9abs, it woul$ ta:e a trillion trillion years tora: using to$ayBs tehnology()"?bit enry+tion is a++roimately 3 K (0)6 timesstronger than 40?bit enry+tion

Pronto *+eration Su++ort System V30 Page ()


13/28


14/28


NR o ;ath, the submitte$ in.ormation $oes not math in.ormation on .ile with the aounthol$erEs ban:

@R ount hol$erEs ban: $oes not su++ort VS he:ing .or this in.ormation or ar$ issuingban: is an international ban:

$lank/null1 R n some ases ban:s return no value at all

)+ !erisign Secured Seal

%he VeriSign Seure$ Seal is a trust mar: available .or $is+lay on any =eb site that+rotets its ustomersB on.i$ential in.ormation using VeriSign servies S+ei.ially$esigne$ an$ teste$ .or its ommuniation value, the VeriSign Seure$ Seal in$iatesto online sho++ers an$ other site visitors that your organi8ation has hosen the verybest SS9 an$>or +ayment +roessing solution to hel+ +rotet their re$it ar$s an$other on.i$ential in.ormation the VeriSign Seure$ Seal is a tool in your e..ort toim+rove your ustomersB +ere+tion o. sa.ety when they $o business online %heVeriSign Seure$ Seal, inlu$e$ with every VeriSign SS9 Certi.iate an$ every VeriSign+ayment servie, is one o. the most reogni8e$ trust mar:s on the nternet Dis+laying

the seal on your =eb site reassures visitors an$ an lea$ to inrease$ visitor?to?salesonversions, lower sho++ing art aban$onment, an$ a larger average +urhase +rie



15/28


Setup !erisign Gateway wit% Pronto 2SS

%o setu+ Verisign Gateway with Pronto *SS you nee$ .ollow the below mentione$ ste+s

"+ Configure Payment


16/28


Select Payment ype& Choose the ty+e o. +ayment .rom the list o. hoies . Cre$it

Car$ is hosen then the +arameters CC% /ount umber1, ;% /mount1 an$ C*#%H/Country ame1 are man$atory

Parameter Name & Description& $$ multi+le +arameter name an$ $esri+tion .or the

selete$ +ayment metho$ $is+laying the alrea$y a$$e$ +arameters in the list Remove& emove o+tion is also +rovi$e$ Deletion o. +arameters is not allowe$ one the

in.ormation is save$ to the $atabase

$+ Set up t%e !erisign Payment Gateway in Pronto 2SS

( rom the main menu hoose Contracts & ariffs Payment Gateways*+tion to mo$i.y +reviously reate$ +ayment gateway is also +rovi$e$ 1

Figure 4 Payment +ateways

) %o a$$ new +ayment gateway li: "dd



17/28


Figure 5 Set up Payment +ateway

3 Fnter the relevant +arameter values an$ li: NeAt

%he master list o. the +ayment gateways su++orte$ by the system .or the various +ayment mehanisms

is store$ here

Figure 6 Set up Payment +ateway add details

"ut%ori5ation Class Name> is generi im+lementation lass .or the +ayment gateway ven$or . +aymentgateway is 'erisi%n an$ the +ayment ty+e is credit card thencom+pronto+payment+creditcard+verisign+!erisignCreditCardPayment"ut%ori5er will be theauthori8ation lass name

4 ;ar: the +arameters re@uire$ .or transations .or a +artiular gateway an$ alsomar: whether it is man$atory an$ li: NeAt

Figure7 Payment +ateway *ransaction Parameters

5 Fnter the +ayment gateway on.iguration +arameters an$ li: "dd to #ist



18/28


Figure 8 Payment +ateway ,onfi%uration Parameters

6 .ter a$$ing all the +arameters li: Save to setu+ the +ayment gatewayon.iguration +arameters

%his in.ormation annot be remove$ or mo$i.ie$ a.ter it is save$ to the $atabase

Pronto *+eration Su++ort System V30 Page ("


19/28


C+ Configure !erisign Payment Gateway ? 8or (6SP

( rom the main menu hoose Setup & Customi5ation B (6SP BSetup/Sreen 3 o. 71

Figure 9

) Fnter the re@uire$ in.ormation to setu+ the +ayment gateway - li: NeAt

#ogin 6d>Verisign 9ogin $

Partner 6d> VeriSign

Partner Port>443

Partner Host> +ay.lowverisignom

!endor 6D>Verisign 9ogin $

ransaction ime 2ut>;aimum amount o. time allowe$ .or the transation to be

om+lete$ %he transation time shoul$ be su..iiently high allowing the re$it ar$transation to be om+lete$ Pre.erably at "0 seon$s are higher

ProAy Host ProAy Port ProAy #ogin 6d & Password> %hese +arameters are use$

when the *SS server is behin$ a firewall S+ei.y these values to enable the +aymentgateway to ommuniate the results ba: to the *SS server

"!S Required -Address 'erification Ser"ice.> ;ar: this .lag to +er.orm a$$ress

veri.iation at the time o. +roessing the re$it ar$ n ase o. any mismath in the

in.ormation, the re$it ar$ authori8ation .ails (indows Certificate Pat%& %he $iretory on the *SS Server mahine where the SS9

erti.iate .ile is loate$ %his .ile is use$ .or SS9 so:et han$sha:e by the VeriSign P%his +ath is use$ i. the *SS Server is running on =in$ows +lat.orm

:niA Certificate Pat%& %he $iretory on the *SS Server mahine where the SS9

erti.iate is loate$ %his .ile is use$ .or SS9 so:et han$sha:e by the VeriSign P %his+ath is use$ i. the *SS Server is running on a #ni>9inu +lat.orm

Country Code& ountry o$e is the stan$ar$i8e$ )? harater abbreviation .or a

ountry, use$ in the Domain ame System or Fgin .or n$iaus .or #nite$ States

Pronto *+eration Su++ort System V30 Page (!
http://kadovtextpopup%28this%29/http://kadovtextpopup%28this%29/


20/28


u: .or #nite$ Oing$om

3 $$ the various +ayment metho$s .rom this inter.ae li: Save

t annot be remove$ or mo$i.ie$ a.ter it is save$ in the $atabase

Figure 10

Select a Payment ype& Choose a +ayment ty+e .rom list available .or the

=SP

Select a Payment Gateway& Choose a +ayment gateway orres+on$ing to that+ayment ty+e

"ut%ori5ation Class& >t is the name o. the generi im+lementation lass .or

the +ayment gateway ven$or . the +ayment gateway is 'erisi%n an$ the+ayment ty+e is credit card thencom.pronto.pament.cre!itcar!."eri#ign.$eri#ign%re!it%ar!&ament'ut(ori)er

will be the authori8ation lass name Settlement Currency& %his .iel$ is use$ to store the urreny o. transation

settlement .or the =SP Choose the .rom the $ro+?$own list $e+en$ing on theountry o. o+erations

Pronto *+eration Su++ort System V30 Page )0


21/28


Glossary

"ccount Num=er

#ni@ue se@uene o. numbers assigne$ to a ar$hol$er aount whih i$enti.ies the issuer an$ ty+e o..inanial transation ar$

"cquireran: or .inanial institution that issues merhant aounts .or the ae+tane o. re$it ar$transations

"cquiring $ankan: that maintains the merhant relationshi+ an$ reeives all transations .rom the merhant n theonline +ayment +roessing worl$, an @uiring an: +rovi$es nternet ;erhant ounts merhantmust o+en an nternet ;erhant ount with an @uiring an: to enable online re$it ar$authori8ation an$ +ayment +roessing Fam+les o. @uiring an:s inlu$e ;erhant eSolutions an$most maAor ban:s

"ddress !erification Service - "!SServie that veri.ies the ar$hol$erBs billing a$$ress in or$er to hel+ ombat .rau$ in ar$?not?+resenttransations /eg mail or$er, tele+hone or$er, internet, et1 #se$ only in the #nite$ States

"gent $ankan: that +artii+ates in another ban:Bs a@uiring +rogram, usually by turning over its a++liants .orban: ar$s to the ban: a$ministering the ban: a@uiring +rogram

"merican 9Apress*rgani8ation that issues ar$s an$ a@uires transations, unli:e Visa an$ ;asterCar$, whih are ban:assoiations

"P6++liation Programming nter.ae /P1 is the inter.ae by whih an a++liation +rogram aesses theo+erating system an$ other servies n P is $e.ine$ at soure o$e level an$ +rovi$es a level o.abstration between the a++liation an$ the :ernel to ensure the +ortability o. the o$e

"pprovalny transation that is a++rove$ by the ar$hol$er or he: writerBs ban: ++rovals are re@ueste$ viaan authori8ation n a++roval is the o++osite o. a $eline$ transation

"r=itrationProe$ure use$ to $etermine the res+onsibility .or a hargeba:?relate$ $is+ute between twomembers

"ut% 2nly %ransation in whih the merhant $oes not inten$ to harge the ar$hol$er until a latertime, i. at all

"ut%ori5ation%he +roess by whih a ustomerEs re$it ar$ is veri.ie$ as ative an$ that they have the re$itavailable to ma:e a transation n the online +ayment +roessing worl$, an authori8ation also veri.iesthat the billing in.ormation the ustomer has +rovi$e$ mathes u+ with the in.ormation on reor$ withtheir re$it ar$ om+any

"ut%ori5ation Code++rove$ sale an$ authori8ation transations always reeive a numeri or al+hanumeri authori8ationo$e that re.erenes the transation .or +roessing +ur+oses

"utomated Clearing House

Pronto *+eration Su++ort System V30 Page )(


22/28


%he utomate$ Clearing Touse /CT1 networ: is a nationwi$e, wholesale eletroni +ayment an$olletion system t is a metho$ o. trans.erring .un$s between ban:s via the e$eral eserve Systemt is use$ by most, but not all, .inanial institutions

"verage icketverage $ollar amount o. merhant re$it transations

$ank 6dentification Num=er - $6NDigits on a re$it ar$ that i$enti.y the issuing ban: t is sometimes the .irst si $igits an$ is o.tenre.erre$ to as a

$asis Point*ne one?hun$re$th o. a +erent Disount rates are e+resse$ as basis +oints

$atc%Colletion o. transations submitte$ .or settlement #sually a merhant has one bath +er $ay or +ershi.t

$atc% 6Dor most +roessors the bath D is an i$enti.ying number assigne$ to a settle bath o. transationsFvery transation in the bath shares this D ormally i. a transation $oes not have a bath D

assoiate$ with it, the transation has not been settle$, or is a non?settleable transation suh as anauthori8ation

$atc% Processing%y+e o. $ata +roessing where relate$ transations are transmitte$ as a grou+ .or +roessing

$undled RateDisount rate that inlu$es ommuniations osts as well as transation .ees lso re.erre$ to as a .latrate

CaptureProess o. a+turing .un$s .rom an authori8ation

Card-not-present

Situation where the ar$hol$er /an$ the ar$1 is not +hysially +resent at the time o. +urhase%y+ial ar$?not?+resent transations ta:e +lae in businesses .ouse$ on mail or$er>tele+hone or$er,business to business, an$ nternet?base$ transations

Card-presentSituation where the ar$hol$er /an$ the ar$1 is +hysially +resent at the time o. +urhase, .oream+le at gas stations an$ restaurantsC%arge=ackt o. ta:ing ba: .un$s that have been +ai$ to a merhant .or a $is+ute$ or im+ro+er re$it ar$transation %he issuer an initiate this +roe$ure 30 $ays a.ter the settlement

C%arge=ack Periodumber o. alen$ar $ays in whih a member may harge sales ba: to the merhant, beginning withthe $ay a.ter the $ate the reor$ is .irst reeive$ by the member or agent an$ ontinuing until the en$

o. the $ay on whih it is $is+athe$ as a hargeba: item

C%arge=ack Reason Code%wo $igit o$e i$enti.ying the s+ei.i reason .or the hargeba:

C%eck GuaranteeServie whih guarantees he: +ayment /u+ to the limit $e.ine$ .or the aount1, +rovi$e$ that themerhant .ollows orret +roe$ures in ae+ting the he: %he servie $etermines whether the he:writer has +reviously written $elin@uent he:s Com+anies li:e %eleChe: +rovi$e this ty+e o. servie

Clearing

Pronto *+eration Su++ort System V30 Page ))


23/28


Proess o. ehanging .inanial $etails between an a@uirer an$ an issuer to .ailitate +osting o. aar$hol$erBs aount an$ reoniliation o. a merhantBs settlement +osition

Common Gateway 6nterface ? CG6Protool that s+ei.ies how a =eb server eeutes an$ ehanges $ata with a +rogram lso re.erre$to as gateways or CG sri+ts, these +rotool +rograms generally onsist o. a set o. instrutionswritten in a +rogramming language li:e C or Perl that +roess re@uests .rom a browser, eeute a

+rogram an$ .ormat the results in T%;9 so they an be $is+laye$ in the browser Gateway sri+tso.ten a$$ interativity to a=eb +age by enabling users to .ill out an$ submit .orms .or +roessing

Confirmation #etter9etter sent by a +roessor to a merhant on a $aily or wee:ly basis to veri.y bath $e+osits

Credit%ransation ty+e su++orte$ by VeriSign that trans.ers .un$s .rom the merhantBs aount ba: to austomerBs re$it ar$ t is the only way to han$le a re.un$ a.ter a transation has been settle$ %histy+e o. transation is usually +er.orme$ when a +ro$ut is returne$ to the merhant re$it an be+er.orme$ in the %ransation %erminal area o. VeriSign ;anager or through a merhantBs store.ronta++liation Che: re.un$s an only be $one via re$it ar$ or through a non?eletroni, +a+er he: re$it an only be issue$ to an aount that has not ha$ a +revious authori8ation

Credit Card "ssociation .inanial institution that +rovi$es re$it ar$ servies that are bran$e$ an$ $istribute$ by Customerssuing an:s Fam+les inlu$e VisaU an$ ;asterCar$U

Customer%he hol$er o. the +ayment instrument?suh as re$it ar$, $ebit ar$, or eletroni he:

Customer 6ssuing $ank .inanial institution that +rovi$es a ustomer with a re$it ar$ or other +ayment instrumentFam+les inlu$e Citiban:, Suntrust, et During a +urhase, the Customer ssuing an: veri.ies thatthe +ayment in.ormation submitte$ to the merhant is vali$ an$ that the ustomer has the .un$s orre$it limit to ma:e the +ro+ose$ +urhase

De=it Card

%; ban:ar$ use$ to +urhase goo$s an$ servies an$ to obtain ash $ebit ar$ $ebits thear$hol$erBs +ersonal $e+osit aount an$ re@uires a Personal $enti.iation umber /P1 .or useDebit ar$s bran$e$ with a ban:ar$ logo /eg Visa1 an be ae+te$ in nternet transations withouta P

Decline transation in whih the issuing ban: will not authori8e the transation

Delayed Capture%ransation ty+e that uses the in.ormation .rom an authori8ation transation to bill a re$it ar$/a+ture .un$s1 %his is the seon$ ste+ in the $elaye$ settlement +roess an$ shoul$ be use$ bymerhants who $o not +rovi$e imme$iate shi+ment o. goo$s

Delayed Settlement

%his is a two?+hase +roess that utili8es an authori8ation transation an$ a $elaye$ a+turetransation in +lae o. a sale transation Cre$it ar$ assoiations re@uire that this +roe$ure be use$when a merhant $elivers goo$s or servies more than 4" hours a.ter they are or$ere$

Demand Deposit "ccount ? DD"Stan$ar$ he:ing or savings aount into whih eletroni .un$s an be trans.erre$

Discount Ratemount harge$ to a merhant by the a@uiring ban: .or +roessing a transation t is usually a+erentage o. the transation amount %he rate is ty+ially base$ on monthly transation volume/total $ollars1 an$ average ti:et



24/28


9lectronic Cas% Register - 9CRCombination o. a ash register an$ a P*S terminal, o.ten PC?base$

9lectronic 8unds ransfer ? 98Pa+erless at o. transmitting money through a om+uter networ:

8loor #imit

Preset limit establishe$ by an issuer that allowe$ merhants to ae+t re$it ar$ sales withoutauthori8ation +rovi$e$ the merhant he:e$ to see that the ar$ number was not liste$ on a warningbulletin .or lost or stolen ar$s loor limits are now rarely use$

Host "ddressVeriSign server a$$ress that is use$ to +roess transation re@uests or +ro$ution transations thehost a$$ress is M+ay.lowverisignomN, .or test transations it is Mtest?+ay.lowverisignomN

Host PortPort a$$ress that is use$ in onAuntion with the host a$$ress when using the VeriSign lient inonAuntion with a ustom integration or store.ront so.tware a++liation .or transation +roessinglways use host +ort 443

HP Protocol

Tar$ware an$>or so.tware that onnets om+uter networ:s an$ allows them to ommuniate

6ndependent Sales 2rgani5ation - 6S2Visa term .or a om+any that is s+onsore$ by an a@uiring ban: to soliit an$ sometimes su++ortmerhants

6nterc%angelow o. in.ormation between issuers an$ a@uirers, eg transations, retrieval re@uests, hargeba:s

6nterc%ange 8eeee harge$ by Visa an$ ;asterCar$ .or eah re$it ar$ transation %his .ee is +art o. the $isountrate

6nternet


25/28


servie that +rovi$es onnetivity among merhants, ustomers,an$ .inanial networ:s to +roess authori8ations an$ +ayments%he servie is usually o+erate$ by athir$?+arty +rovi$er suh as VeriSign



26/28


P6NPersonal $enti.iation umber use$ by a ar$hol$er to authentiate ar$ ownershi+ .or %; or Debitar$ transations %he ar$hol$er enters his>her P into a P +a$ %he P is re@uire$ to om+letean %;>Debit ar$ transation

PNR98

%he Payment etwor: e.erene D /PF1 .iel$ is a uni@ue transation i$enti.iation number issue$by VeriSign %he PF is use$ to i$enti.y the transation .or billing an$ re+orting +ur+oses

Point 2f Sale - P2SPlae an$ time at whih a transation ours Point o. Sale /P*S1 also re.ers to the $evies or so.twareuse$ to a+ture transations

Post "ut%ori5ation%ransation .or whih a voie authori8ation was reeive$

PostingProess o. reor$ing $ebits an$ re$its to in$ivi$ual ar$hol$er aount balanes

Pre-Notification

Prior to the initiation o. the .irst CT entry to an CT reeiver or the CT reeiverEs aount with anD, an CT originator may, at its o+tion, $eliver or sen$ a +re?noti.iation through an *D to itsCT o+erator .or transmittal to the a++ro+riate D %he +re?noti.iation shall +rovi$e notie to theD that the originator inten$s to initiate one or more entries to that reeiverEs aount in aor$aneto the reeiverEs authori8ation

Prior "ut%ori5ed Sale %ransation .or whih authori8ation was obtaine$ at an earlier time, eg whena merhant has to all .or authori8ation be.ore servies are ren$ere$ /hotel reservation, auto rental,et1

Private #a=el Cardan: ar$ that an be use$ only in a s+ei.i merhantBs store %y+ially not a ban:ar$

Processor

9arge $ata enter that +roesses re$it ar$ transations an$ settles .un$s to merhants +roessoronnets to the merhant on behal. o. an a@uirer via a gateway or P*S system to +roess +aymentseletronially Proessors e$it an$ .ormat messages an$ swith to ban:ar$ networ:s %hey +rovi$e.iles .or learing an$ settlement an$ other value?a$$e$ servies

ualification9evel at whih a transation interhanges 9evel o. @uali.iation is $e+en$ent on how re$it ar$number is entere$, how @ui:ly a transation is settle$, the ty+e o. in$ustry, s+ei.i in.ormation, et

ReceiptTar$ o+y $esri+tion o. the transation that ourre$ at the +oint o. sale ;inimum in.ormationontaine$ on a reei+t is $ate, merhant name an$ loation, aount number, ty+e o. aount use$/eg Visa, ;asterCar$, mF, et1, amount, re.erene number an$>or authori8ation number, an$ation o$e

ReceiverConsumer, ustomer, em+loyee, or business who has authori8e$ CT +ayments by Diret De+osit orDiret Payment to be a++lie$ against a $e+ository aount

Receiving Depository 8inancial 6nstitution - RD86inanial institution that +rovi$es $e+ository aount servies to onsumers, em+loyees, an$businesses an$ ae+ts eletroni $ebits an$ re$its to an$ .rom those aounts

Recurring ransaction%ransation in whih a ar$hol$er has given a merhant +ermission to +erio$ially harge thear$hol$erBs aount



27/28


Response Code*ne?letter o$e that in$iates whether a transation was a++rove$ or $eline$ es+onse o$es areuse$ in versions o. VeriSignBs SDO be.ore )(0

Result Code*ne to three?$igit number that in$iates the result o. a transation ++rove$ transations reeive a

W0B, while there are a variety o. o$es .or $eline$ transations, whih may have .aile$ .or a variety o.reasons

Retrieval Requeste@uest to a merhant .or $oumentation onerning a transation, usually initiate$ by a ar$hol$er$is+ute or sus+iious sale>return retrieval re@uest an lea$ to a hargeba:

Return Codeny o. the o$es returne$ by VeriSign when a transation is +roesse$

Sale%ransation ty+e su++orte$ by VeriSign that a++roves a transation an$ settles it at the netsettlement +erio$

Secure Sockets #ayer - SS#Fnry+tion system that allows merhants to seurely +roess eletroni transations to +roessors

SettlementProess by whih transations with authori8ation o$es are sent to the +roessor .or +ayment to themerhant Settlement is a sort o. eletroni boo::ee+ing +roe$ure that auses all .un$s .roma+ture$ transations to be route$ to the merhantBs a@uiring ban: .or $e+osit VeriSignautomatially submits all a+ture$ transations .or settlement on a $aily basis %he time that it ta:es.or these .un$s to reah the merhant aount a.ter settlement is (?5 $ays, but varies by themerhantBs agreement with their ar$ +roessing om+any

S6C Codee.ers to Stan$ar$ n$ustry Classi.iation %hese o$es are .our $igit numbers use$ to i$enti.ybusiness ty+e

Standard9owest @uali.iation level at whih a Visa or ;asterCar$ transation may interhange %his ourswhen a transation is $e+osite$ several $ays a.ter the original authori8ation an$ is not swi+e$

Surc%argesny a$$itional harges to a merhantBs stan$ar$ +roessing .ees %hey are a result o. [email protected]$transations o. $i..erent ommuniations metho$s

SuspenseState in whih a bath o. transations is not release$ to interhange beause o. +roblems notie$ bythe host om+uter e@uires human intervention to .i the +roblem an$ settle the bath

Swiped Card

Cre$it ar$ in.ormation that is trans.erre$ $iretly as a result o. swi+ing or sli$ing the re$it ar$through a ar$ rea$er Swi+e$ ar$s are use$ in retail an$ other ar$?+resent situations %hein.ormation magnetially eno$e$ in the magneti stri+e inlu$es seret $ata that hel+s vali$ate thear$

Sync%ronous;etho$ o. transmitting $ata in whih the $ata elements are sent at a s+ei.i rate so that start an$sto+ haraters are not nee$e$ #se$ by ol$er mo$ems, mF PP terminals, et Com+are to

ender ype%y+e o. MmoneyN to be use$ when +roessing a transation& re$it ar$, he:, CT, Purhase Car$,et



28/28


%ird Party Processoron?member agent, em+loye$ by an a@uiring ban:, whih +rovi$es authori8ation, settlement an$merhant servies to the ban:Bs merhant

ransactiontion between a ar$hol$er an$ a merhant that results in ativity on the ar$hol$erBs aount

ransaction 8eePer transation harge inurre$ by merhants who are on sale +riing %his is in a$$ition to the+erentage $isount .ees

ransaction 6De.erene number that VeriSign assigns to every transation that is +roesse$ t is a ()?harateral+hanumeri string that always starts with a MVN

ravel and 9ntertainment CardCre$it ar$s that ty+ially re@uire +ayment in .ull eah month, eg merian F+ress, DinerBs Club,an$ Carte lanhe

:nsettled ransactions

ll transations must be settle$ be.ore any money hanges han$s VeriSign automatially settlesa+ture$ transations on a $aily basis Please note that authori8ation transations are not a+ture$until they are om+lete$ by a $elaye$ a+ture transation

!isassoiation o. ban:s that governs the issuing an$ a@uiring o. Visa re$it ar$ transations

!oice "ut%ori5ation%ransation ty+e su++orte$ by VeriSign where +ayment in.ormation is submitte$ over the tele+honeSometimes +roessing networ:s $eline transations with a re.erral message in$iating that themerhant must all the ar$hol$erBs issuing ban: to om+lete the transation . the transation isa++rove$, the merhant is +rovi$e$ with an authori8ation o$e /#%TC*DF1 .or the transation %his#%TC*DF must then be sent to the VeriSign server as +art o. a voie authori8ation transation usingVeriSign ;anagerBs %ransation %erminal n Pay.low Pro this transation is s+ei.ie$ with an MN

!oideversal o. an a++rove$ transation, one that has been authori8e$ but not settle$ Settle$transations re@uire +roessing o. a re$it in or$er to be reverse$ voi$ $oes not remove any hol$on the ustomerBs o+en?to?buy /available re$it1

Fn$ o. $oument

Ver i Sign Payment Gateway Interface Guide

Documents

Transcript of Ver i Sign Payment Gateway Interface Guide