Wiz-ePay 3-D Secure MPI

Download Brochure (1 MB)

Contact Us

Overview

Online credit card frauds have been have heavily reported in recent years with innocent victims suffering financial losses due to illegal usage of their credit card information. In a survey done by VISA International (March 2002), more than 75% of consumers across key Asia Pacific have concerns with online purchases.

On the other hand, little has been reported about merchants who are the victims of such fraudulent purchases.

Besides having to write off goods and services, these merchants also suffer from financial losses and damages to their reputation. Online credit card fraud losses consist not only the possible revenue losses, there are other hidden costs that impact negatively on business bottom-lines. Some examples are man-hours, chargeback fines, fraudulent payouts and higher credit card discount fees.

“With U.S. business-to-consumer online sales are expected to approach $100 billion in 2003, total online revenues lost to fraud are likely to exceed $1.6 billion for the year …

The number of merchants citing online credit card fraud as a 'serious' or 'very serious' issue for their business increased significantly to almost two thirds of merchants [surveyed] …”

CyberSource 2004 Online Fraud Report

Need for Authentication

:User Authentication Process:

The latest authentication technology, 3-D Secure^TM is a new model designed to enhance and validate payments made through the Internet, through Secure Sockets Layer (SSL) encryption.

Wiz-ePay 3-D Secure MPI (Merchant Plug-in) is an off-the-shelf Java based application that provides payer authentication platform for merchants, acquiring banks and Payment Service Providers (PSP). Wiz-ePay 3-D Secure MPI can be deployed in conjunction with WizVision's payment gateway or any other existing third party 3-D Secure ready payment gateway.

*MPI can run on any application server that supports JSP/Java and can accept HTTP POST.

Addressing The Key Security Requirements

Wiz-ePay 3-D Secure MPI

• Confirm cardholder identity prior to authentication process

• Enable secure and reliable communication channels between cardholder and issuer using a server certificate and the strongest cryptography the cardholder browser support

• Ensure the person presenting a payment card is entitled to use that card via 'two-way authentication'

• Established authenticated, secure communication channels among all non-cardholder entitles using cryptographically strong facilities

• Provide confidentiality of payment and order information by using underlying transport-level strong cryptographic facilities

• Ensure integrity of authentication response and confirmation that the response originated from the card issuer

Client Edition

:Demo:

The MPI Client Edition is a standalone model that supports the needs of a single merchant and resides at the Merchant where the authentication process takes place.

Benefits

• Easy Installation

• Seamless integration with web store front and back office environment

• User-friendly web-based administration

Features

• Real time authentication for cardholder

• Comprehensive query and reporting

Server Edition

:Demo:

The MPI Server Edition can be installed at a hosted location which allows several sites to use it as an ASP model.

It supports the needs of multiple merchants and operates at the Acquirer's server to conduct the authentication process with the ACS at the Issuer.

Benefits

• Minimized operations and administration through a centralized administration

• Seamless integration with any payment gateway.

• User friendly web-based management for system administrators and merchants.

Key Features

• Instant sign-ups for participating merchants.

• Scalable to multiple physical servers.

• Multiple merchant supports on a single platform.

• Flexible implementation across multiple operating systems and hardware platforms.

• Comprehensive reporting with business and trend analysis.

• Detailed Request, Response, Access and CRCache log reports.

• ‘Add-on’ for Merchant A/c, Validation Server IP Address Access Control, Visa Directory, Bin Server Mapping can be done easily on site.

Technical Requirements

Wiz-ePay 3-D Secure MPI Software Specifications

Operating System

• Microsoft Windows 2000 / 2003 / XP
• Sun Solaris
• Linux

Database Server

• Microsoft SQL Server 2000
• Oracle 8i / 9i / 10g

Application Server

• BEA Web Logic
• Macromedia JRun 4.0 Updater 6
• Apache Tomcat 4.x / 5.x

Web Server

• Microsoft IIS version 5.0 / 6.0
• Apache Web Server

Virtual Machine

• Java Runtime Version 1.3 / 1.4 / 1.5

Wiz-ePay 3-D Secure MPI Hardware Specifications

The specifications of server hardware are highly dependent on the choice of software applications selected to run Wiz-ePay 3-D Secure MPI.

FAQs About Wiz-ePay 3-D Secure MPI

Qn 1.  Wiz-3-D Secure ensures e-payment security for merchants and online customers.

Wiz-ePay 3-D Secure Merchant Plug-In (MPI) focused on making e-payment security process as easy as possible for merchants and online customers while still addressing key concerns.

Most importantly, Wiz-ePay 3-D Secure MPI offers merchants added security for guaranteed payment and provides business with increased protection from fraudulent transactions and disputes, thus enabling business to grow more profitably.

It works by having issuing banks authenticate their individual cardholders and qualify the online transactions for protection against “cardholder authorized” or “cardholder not recognized” chargeback.

This technology can be used by all Visa, Master and JCB credit card holders.

Qn 2.  I am already using Secure Sockets Layer technology.  Why do I need Wiz-ePay 3-D Secure Merchant Plug-In (MPI)?

Wiz-ePay 3-D Secure MPI provides protection from “cardholder authorized” chargeback for fully compliant transactions.  It is designed to reduce your chargeback exposure and processing expenses.

While Wiz-ePay 3-D Secure MPI uses SSL to securely transmit data, it also adds another very important layer of protection by confirming the identity of the cardholder during the transaction process.

This authentication process creates a virtual card present environment.  It is this important additional function that enables card issuers to provide your business with guaranteed payment for the most common types of internet disputes.

Qn 3.  What is involved in implementing Wiz-ePay 3-D Secure MPI?

You only need to install Wiz-ePay 3-D Secure Merchant Plug-In (MPI) to your existing online payment system. The software is designed to have minimal impact on your existing payment process.

Qn 4.  How much time does it take to implement Wiz-ePay 3-D Secure MPI?

It depends on the size and complexity of your e-commerce setup, as well as the implementation option that you choose. It varies from a few days to a few weeks.

Qn 5.  What if I do not have Wiz-ePay 3-D Secure MPI security measure?

Without it, you will not benefit from the fraud and dispute protection schemes provided by Verified by Visa^TM, Mastercard Securecode^TM and JCB J/Secure^TM.

It is estimated that the costs associated with e-commerce fraud and disputes can be reduced by up to 50 percent with Wiz-ePay 3-D Secure MPI.

Qn 6.  How will cardholders know that I have Wiz-ePay 3-D Secure MPI security measure?

You will display the Verified by Visa^TM, Mastercard Securecode^TM , and JCB J/Secure^TM logos on your website.  

Qn 7.  How does the Wiz-ePay 3-D Secure MPI work?

When a cardholder submits their online order at a participating merchant, Wiz-ePay 3-D Secure MPI performs the following to ensure that the cardholder is authorized to make this transaction:

1. It initiates an in-line window from the card issuer prompting the cardholder to  

     enter their unique personal code.

Cardholders simply enter their private PIN number in an in-line window provided by their card issuer on their PC before their online transaction can be completed.

b.       The issuer validates the personal code and approves the transaction.

The card issuer is responsible for validating and safekeeping this code.

Qn 8.  After Wiz-ePay 3-D Secure MPI is installed, what do I have to do?

Once you have implemented Wiz-ePay 3-D Secure MPl, it does most of the work.  You will need to maintain the MPI software as required.  It is also recommended that you continue with your existing risk management and transaction monitoring practices.

Qn 9.  How much maintenance is required for Wiz-ePay 3-D Secure Merchant Plug-In?

Like any software package, Wiz-ePay 3-D Secure MPI requires maintenance from time-to-time.  Upgrades may be required to our customers on a regular basis.

Qn10.  How much longer does a transaction take when it uses Wiz-ePay 3-D Secure MPI?

On average, Wiz-ePay 3-D Secure MPI process adds just 10 to 20 seconds to the total transaction time.

Processing time may also vary depending on the usage conditions of your computers or those that cardholders use.

Qn11.  How do I recognize a 3-D Secure registered credit card?

Wiz-ePay 3-D Secure MPI automates this process for you by checking with the financial institution that issued the credit card to see if the card is registered before automating the process for authentication.

Qn12.  How do I treat credit cards that are not registered?

You should process transactions with the same precautions that you are currently using.

If you have any questions on how we can help secure your e-commerce and assist with providing you with top of the range, best practice solutions, please contact the WizVision Sales team either through our website www.wizvision.com, email: info@wizvision.com or by phone +65 6392 0542.  We have dedicated specialists who can assist in every aspect to provide the most cost effective, complete solution to meet your business’ requirements.

Back to top