-
PKN
– a personal key numberGenerated, printed, distributed,
activated in a secure environment
-
Not
stored in any of the servers
-
Stringent
employee contracts
-
SSL
encryption
-
Using
digital certificates from VeriSign to encrypt data from
consumers desktop to payment workstation.
-
All
communication from consumer’s web browser to Payment Gateway
is SSL encrypted.Firewall server to protect access to payment
workstation from the Internet
-
Merchant
authentication
-
Based
on public/private key concept
-
Data
transfer form merchant server to payment workstation is signed
by merchant’s digital signature Data integrity
-
Data
like order number, amount, etc. from merchant is checked for its
integrity against attempted alteration
-
PKN
Issuance
-
PKN
request form physically filled and signed by cardholder
alongwith documentation :
-
A
photocopy of the card (both sides) for number, validity and
signature verification.