How does 3D secure authentication work?
It requires the card holder to enter a password (only if the card holder is enrolled) as an additional step to entering their credit card details that is verified by the issuing bank. Once the issuing bank has verified the password, the user is then redirected back to the merchants web site.
我给你查了下。。可以肯定。。。
Westpac require all customers to be 3D secure.
Online authentication of purchasers
The primary risk facing merchants accepting Internet transactions is the difficulty
faced confirming the purchaser is the genuine cardholder. Where a cardholder
disputes having made an online purchase, irrespective of whether this is actually
the case, the merchant is generally liable for the chargeback.
Visa and MasterCard have jointly attempted to overcome this burden placed on
Internet merchants by developing an online cardholder authentication service
known as ‘Verified by Visa’ and ‘MasterCard SecureCode’. A term called ‘3D
Secure’ refers to the technology platform through which this service is offered.
Verified by Visa and MasterCard SecureCode works as follows:
A cardholder r • egisters with their bank
13
The cardholder creates a password ( • similar to an ATM pin number)
• Cardholder browses merchant website and selects goods/services to purchase
• When a cardholder attempts to make a purchase, the cardholder is asked to
enter the password they previously created when registering with their bank.
The 3D Secure software can detect if a card is enrolled or needs to be enrolled.
The standard authorisation process is followed for cards that are not able to
support this service
• When the cardholder enters the password, the information is routed to the
cardholder’s bank for verification. The result of the password verification check
is then sent to the merchant, advising whether the purchaser entered the
correct password. If the wrong password is entered, it is likely that the purchaser
is not the rightful cardholder and the merchant should not proceed with the
transaction as liability then shifts back to the merchant.
The primary benefit to merchants of these verification processes is the
chargeback liability shift that occurs. Subject to a few exceptions, if a merchant
attempts to authenticate a purchaser using 3D Secure, both the cardholder and
their bank lose the right to make a chargeback claiming the cardholder did not
make the transaction. This is irrespective of whether the cardholder or their bank
subscribe to 3D Secure – all that matters is that the merchant has implemented
3D Secure, and attempted to verify the cardholder’s password.
Of course, if the password verification check fails (the purchaser entered the
wrong password), you should not proceed with the transaction. If you proceed
with the transaction after a cardholder has failed the verification check, you will
incur the liability should a chargeback result.作者: shoegal 时间: 2010-10-15 02:25:38
