Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Depending on the content of the received threedsdata block (units 3, 4, 5), the authentication proceeds differently.

Main work scenarios:

  • For version 3D-Secure 2.0 (unit 3), if there is the issuing bank URL threeDSMethodURL (unit 5), the enterprise generates hidden HTML iFrame on the payment page (unit 8) and sends a POST request with one parameter threeDSMethodData to the received address threeDSMethodURL, and then calls the get3dsecver2 service (unit 9).
  • For version 3D-Secure 2.0 (unit 3), if there is the issuing bank URL threeDSMethodURL (units 5, 8, 9), without the additional interaction with the card holder (unit 4), - Frictionless Flow (F), IPS Assist immediately executes a transaction in processing or completes the operation with an error (unit 12).
  • For version 3D-Secure 2.0 (unit 3), if there is the issuing bank URL threeDSMethodURL (units 5, 8, 9), and the additional interaction with the card holder is necessary (unit 10), the enterprise generates hidden HTML iFrame on the payment page (unit 8) and sends an HTTP POST request for the card holder verification to the specified challengeurl URL (unit 11). This iFrame displays the issuer's bank ACS page and the customer enters a one-time password received from the bank.
  • For version 3D-Secure 2.0 (unit 3) with no issuing bank URL threeDSMethodURL and without the additional interaction with the card holder, - Frictionless Flow (F), the transaction will be processed immediately and the payment process will be completed (unit 12).
  • For version 3D-Secure 2.0 (unit 3), if the additional interaction with the card holder is necessary (unit 4), but with no issuing bank URL threeDSMethodURL, the enterprise should generate an HTML iFrame object on the payment page and send an HTTP POST request for the card holder verification to the specified challengeurl URL (unit 11). This iFrame displays the issuer's bank ACS page and the customer enters a one-time password received from the bank.

get3dserver2 – web service of the 3D-Secure authentication continuation