Our comprehensive glossary of fraud prevention term glossary
In the issuer domain of 3-D Secure protocols, which involves banks, the Access Control Server (ACS) plays a crucial role. Each card issuer is mandated to maintain an ACS to support cardholder authentication. Customers authenticate to the ACS by providing their username and password, and the ACS then generates a signature indicating whether the authentication is valid or invalid. This signature is transmitted to the Merchant Plug-in (MPI) via the customer’s browser. The MPI, in turn, verifies the ACS signature and determines whether the transaction should proceed.
To ensure transaction confidentiality, the cardholder is redirected to the website of the issuing bank during the 3-D Secure process. Once the information is provided to the bank, the MPI receives the verification result to either approve or reject the user’s authenticity. The MPI facilitates communication between card servers and merchant servers for verification purposes.
In the issuer domain of 3-D Secure protocols, which involves banks, the Access Control Server (ACS) plays a crucial role. Each card issuer is mandated to maintain an ACS to support cardholder authentication. Customers authenticate to the ACS by providing their username and password, and the ACS then generates a signature indicating whether the authentication is valid or invalid. This signature is transmitted to the Merchant Plug-in (MPI) via the customer’s browser. The MPI, in turn, verifies the ACS signature and determines whether the transaction should proceed.
To ensure transaction confidentiality, the cardholder is redirected to the website of the issuing bank during the 3-D Secure process. Once the information is provided to the bank, the MPI receives the verification result to either approve or reject the user’s authenticity. The MPI facilitates communication between card servers and merchant servers for verification purposes.
Biometric authentication is a process of confirming an individual’s identity through their distinctive biological characteristics, such as facial features or voice patterns. Biometric authentication systems compare the captured biometric data with verified authentic data stored in a database. For authentication to be confirmed, both samples of biometric data must match, providing a secure and reliable means of identity verification.
When a customer manually inputs credit card details in a transaction without physically handing the card to the merchant, it is categorized as card-not-present (CNP) fraud. This form of fraud typically takes place in online transactions, where the unauthorized party gains access to the cardholder’s information, including the three-digit security code, without their consent. Commonly, CNP fraud is perpetrated through methods like phishing, where deceptive tactics are employed to trick individuals into revealing sensitive financial information.
A Directory Server serves as a centralized storage and management system for data, encompassing identity profiles. It functions to authenticate and authorize users, ensuring secure access to an organization, internet services, and applications. The Directory Server is versatile as it can be seamlessly integrated into existing systems and allows for the consolidation of data related to employees, customers, suppliers, and associates. This integration facilitates efficient and secure identity management within an organizational framework.
Originally known as EMV, this international standard for credit and debit card payments is rooted in chip card technology. It derived its name from the founding card schemes, Europay, MasterCard, and Visa. The regulation and oversight of this standard have been taken over by EMVCo, a collaborative effort involving major financial institutions such as Visa, Mastercard, American Express, China Union Pay, JCB, Discover/Diners Club International, and Rupay. EMVCo is also responsible for the development of EMV Three-Domain Secure (3DS). The primary mission of EMVCo is to advocate for global interoperability and ensure the security of all online payment transactions.
Implemented through risk-based authentication conducted in the Access Control Server (ACS), this feature allows issuers to authorize a payment without requiring interaction with the cardholder. When a customer confirms an online purchase, all pertinent shopping details, such as device information, purchased items, and transaction value, are forwarded to the ACS for identity verification using risk-based elements. As this process takes place seamlessly, without explicit notification to the customers, it is regarded as frictionless. Customers are smoothly directed to the order confirmation page without being explicitly informed that their transaction has undergone screening.
Commonly referred to as 3DS1, 3-D Secure 1.0 is a Visa-designed XML protocol designed to enhance the security of online credit card transactions. Customers experience this service under the name Verified by Visa. Other major card networks such as Mastercard, JCB, American Express, and Diners Club International have also adopted this protocol, incorporating it into their respective services, namely SecureCode, J/Secure, SafeKey, and ProtectBuy.
The system facilitates the transmission of comprehensive information during transactions, enabling risk-based decisions. Compared to 3-D Secure 1.0, the consumer experience is enhanced by eliminating the initial enrollment process and the need for cardholders to memorize static passwords. Additionally, this protocol version supports non-payment authentication and is compatible with native mobile devices.
Often abbreviated as 3DS2, this protocol empowers site owners to customize the page and offer authentication methods such as biometrics, SMS messages, and passwords. Developed with a focus on mobile devices, 3DS2 is more customer-centric than its predecessor, 3DS1.
In the issuer domain of 3-D Secure protocols, which involves banks, the Access Control Server (ACS) plays a crucial role. Each card issuer is mandated to maintain an ACS to support cardholder authentication. Customers authenticate to the ACS by providing their username and password, and the ACS then generates a signature indicating whether the authentication is valid or invalid. This signature is transmitted to the Merchant Plug-in (MPI) via the customer’s browser. The MPI, in turn, verifies the ACS signature and determines whether the transaction should proceed.
To ensure transaction confidentiality, the cardholder is redirected to the website of the issuing bank during the 3-D Secure process. Once the information is provided to the bank, the MPI receives the verification result to either approve or reject the user’s authenticity. The MPI facilitates communication between card servers and merchant servers for verification purposes.
In the issuer domain of 3-D Secure protocols, which involves banks, the Access Control Server (ACS) plays a crucial role. Each card issuer is mandated to maintain an ACS to support cardholder authentication. Customers authenticate to the ACS by providing their username and password, and the ACS then generates a signature indicating whether the authentication is valid or invalid. This signature is transmitted to the Merchant Plug-in (MPI) via the customer’s browser. The MPI, in turn, verifies the ACS signature and determines whether the transaction should proceed.
To ensure transaction confidentiality, the cardholder is redirected to the website of the issuing bank during the 3-D Secure process. Once the information is provided to the bank, the MPI receives the verification result to either approve or reject the user’s authenticity. The MPI facilitates communication between card servers and merchant servers for verification purposes.
Biometric authentication is a process of confirming an individual’s identity through their distinctive biological characteristics, such as facial features or voice patterns. Biometric authentication systems compare the captured biometric data with verified authentic data stored in a database. For authentication to be confirmed, both samples of biometric data must match, providing a secure and reliable means of identity verification.
When a customer manually inputs credit card details in a transaction without physically handing the card to the merchant, it is categorized as card-not-present (CNP) fraud. This form of fraud typically takes place in online transactions, where the unauthorized party gains access to the cardholder’s information, including the three-digit security code, without their consent. Commonly, CNP fraud is perpetrated through methods like phishing, where deceptive tactics are employed to trick individuals into revealing sensitive financial information.
A Directory Server serves as a centralized storage and management system for data, encompassing identity profiles. It functions to authenticate and authorize users, ensuring secure access to an organization, internet services, and applications. The Directory Server is versatile as it can be seamlessly integrated into existing systems and allows for the consolidation of data related to employees, customers, suppliers, and associates. This integration facilitates efficient and secure identity management within an organizational framework.
Originally known as EMV, this international standard for credit and debit card payments is rooted in chip card technology. It derived its name from the founding card schemes, Europay, MasterCard, and Visa. The regulation and oversight of this standard have been taken over by EMVCo, a collaborative effort involving major financial institutions such as Visa, Mastercard, American Express, China Union Pay, JCB, Discover/Diners Club International, and Rupay. EMVCo is also responsible for the development of EMV Three-Domain Secure (3DS). The primary mission of EMVCo is to advocate for global interoperability and ensure the security of all online payment transactions.
Implemented through risk-based authentication conducted in the Access Control Server (ACS), this feature allows issuers to authorize a payment without requiring interaction with the cardholder. When a customer confirms an online purchase, all pertinent shopping details, such as device information, purchased items, and transaction value, are forwarded to the ACS for identity verification using risk-based elements. As this process takes place seamlessly, without explicit notification to the customers, it is regarded as frictionless. Customers are smoothly directed to the order confirmation page without being explicitly informed that their transaction has undergone screening.
We provide Tailored Payment Solutions for PSPs, Payment Gateways, Banks and Merchants with a complete range of top-tier payment gateway platforms, robust authentication solutions, and cutting-edge testing tools.
We’ll update you on our upcoming events, newsand publications.
Try our solutions for free! Sign up now and see how we can help you.
Explore our comprehensive services. Download our brochure for detailed information on our offerings and solutions.
The 3DS Server provides a functional interface between the Directory Server (DS) and the 3DS Requestor Environment flows. 3DS Server is responsible for gathering necessary data elements for 3-D Secure messages, authenticating the DS, validating the DS, the 3DS SDK, and the 3DS Requestor, safeguarding the message contents. The 3DS Server also helps to protect the message content while it is being transferred to DS and vice versa.
