Page History
...
In this case, the enterprise should form generate an HTML iFrame object on the payment page and send an HTTP POST request for the card holder verification to the specified URL (block 11). This iFrame displays the ACS page of the issuing bank and the customer enters a one-time password received from the bank.
...