Jump to content

Merchant plug-in

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Sydius (talk | contribs) at 00:59, 26 September 2008 (moved Merchant Plug In to Merchant Plug-In: Forgot the dash). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

A Merchant Plug-In (MPI) in the context of payment processing, is a piece of software designed to facilitate 3D-Secure verifications to help prevent credit card fraud. The MPI identifies the account number and queries card issuer (Visa, MasterCard, or JCB International) servers to determine if it is enrolled in a 3D-Secure program and returns the web site address of the issuer Access Control Server (ACS) if it is found.[1] Merchants are responsible for installing an SSL/TLS MPI at their servers.[2]

Each card issuer is required to maintain an ACS used to support cardholder authentication.[2] A customer authenticates to this ACS by providing their username and password and the ACS signs the result (success or failure). This signature is then passed through the customer's browser and to the MPI. The plug-in verifies the ACS signature and decides if it wishes to proceed with the transaction.[3]

Commercial MPI software is available from a number of merchants.

References

  1. ^ Bidgoli, Hossein (2004). The Internet Encyclopedia. John Wiley and Sons. ISBN 0471222038.
  2. ^ a b Jarupunphol, Pita. "MEASURING 3-D SECURE AND 3D SET AGAINST E-COMMERCE END-USER REQUIREMENTS" (PDF). Retrieved 2008-09-25. {{cite journal}}: Cite journal requires |journal= (help); Unknown parameter |coauthors= ignored (|author= suggested) (help)
  3. ^ Balfe, Shane. "Augmenting Internet-based Card Not Present Transactions with Trusted Computing" (PDF). Retrieved 2008-09-25. {{cite journal}}: Cite journal requires |journal= (help); Unknown parameter |coauthors= ignored (|author= suggested) (help)