Two-Factor Authentication: An essential guide in the fight against Internet fraud
The paper is designed for those who require a better understanding of two-factor authentication concepts and products. It provides information for business and technical personnel who are involved in the decision making process regarding the authentication strategy of an organization.
An essential guide in the fight against Internet fraud (153 KB)
Bank of America - A Perfect Target for Man in the Middle Attack
The aim of this article is to highlight the inadequacy of software solutions in the prevention of online fraud.
Bank of America - A Perfect Target.pdf (10.4 KB)
Two Factor Authentication: An Industry Wide Solution
The aim of this paper is to discuss the reasons for adoption of a two factor authentication solution, what are the problems associated with implementing such a solution and how many of these problems can be overcome with the provision of an industry wide two factor authentication solution. The paper lists organisational groups who would benefit from such an initiative and proposes business models which could be employed to benefit those organisations supporting the solution.
2FA-An Industry Wide Solution.pdf (180 KB)
Verified by Visa Overview
The 3-D Secure Authentication Standard
This whitepaper provides a basic overview of what is involved in an authenticated online transaction under Verified by Visa.
GPayments_VbV_Overview.pdf (137 KB)
GPayments_VbV_Overview.zip (131 KB)
An Introduction to Authentication
The solution to online payment fraud
Through a series of questions and answers this fact sheet describes the problems surrounding authentication and provides a brief overview of authentication from the 3-D Secure and SPA perspective.
GPayments_Introduction_to_Authentication_Whitepaper.pdf (83 KB)
GPayments_Introduction_to_Authentication_Whitepaper.zip (79 KB)
Authentication
The missing element in online payment security
This paper outlines the need for increased security, integrity and authenticity in online transactions. It briefly covers the existing standard of performing online transactions using the SSL protocol and highlights some of the shortcomings of this method. It revisits the first attempts to introduce authentication into online payments using the SET protocol and 3-D SET implementations. The focus of the paper is the new generation of authentication standards introduced in 2001 - Visa's 3-D Secure, MasterCard's Secure Payment Application (SPA) and Maestro's Online Debit Solution - which have been designed to introduce consumer confidence while reducing fraud and chargebacks in online payment transactions. The high level operation of these new models is detailed with a brief comparative analysis.
GPayments_Authentication_Whitepaper.pdf (203 KB)
GPayments_Authentication_Whitepaper.zip (189 KB)
Visa 3-D Secure vs. MasterCard SPA
A comparison of online authentication standards
This paper is designed to provide a comparative analysis of the the new generation of authentication standards - Visa 3-D Secure and MasterCard's Secure Payment Application (SPA). It is written from the perspective of a software company which has developed and implemented issuer, cardholder, acquirer and merchant products for secure electronic commerce payments. It draws upon experiences as an early developer and implementer of SET, a founding member of the Visa 3-D Secure Forum, a developer of a 3-D Secure Access Control Server, a developer of a 3-D Secure Merchant Plug-in, a participant in the 3-D Secure compliance testing process, a supplier of 3-D Secure products and services to Visa and a provider of a 3-D Secure test environment to merchants. It also draws upon experiences as a developer of a SPA cardholder plug-in, a developer of a server-based electronic wallet product, a MasterCard SPA draft specification reviewer, a licenced MasterCard SPA implementer, a Maestro MIGS draft specification reviewer and a supplier of demonstration SPA software to MasterCard. This whitepaper is designed to convey the first-hand experience of working with these standards. It also seeks to bring clarity to the strengths and weaknesses of each standard while maintaining an independent perspective.
Smart Payment Technology
Form filling techniques designed to expedite online payment transactions
There is currently confusion in the market over a range of "smart" technologies used by payment vendors. These include profile-based form-filling, ECML, intelligent form population and agent/bot technology. This fact sheet is designed to highlight the capabilities of each of these technologies along with the advantages and disadvantages of each technique.
GPayments_Smart_Payment_Technology_Whitepaper.pdf (90 KB)
GPayments_Smart_Payment_Technology_Whitepaper.zip (85 KB)
Electronic Wallets: Past, Present and Future
A means to authentication and payment for device-independent electronic payment instructions
This whitepaper outlines the background of the wallet concept, the role of wallets in society and the need for electronic wallets as we enter the Information age. A focus is the need for individual identification and the ability to exchange value which is now converging in the single process of authentication and payment. Identification mechanisms are explored culminating in the need for device-independent authentication from any Internet access point. Similarly, the exchange of value is exaddddmined reinforcing the need for payment in business and highlighting the expected trends for future payment methods. The whitepaper also provides insights into the future capabilities of electronic wallets and the role they will play in eCommerce.
GPayments_eWallet_Whitepaper.pdf (390 KB)
GPayments_eWallet_Whitepaper.zip (377 KB)
Pseudo Card Numbers
A new weapon to combat fraud in eCommerce
This whitepaper outlines the concept, benefits and a high-level overview of a pseudo credit card architecture. A number of variations on the basic concept have arisen and it is important to contrast the different approaches to disposable card numbers, single-issue card numbers, pseudo card numbers and virtual credit cards in the market. This whitepaper examines the processes of pseudo card number authentication and integrity matching and the role that these processes can play in authenticating cardholders and reducing fraud in eCommerce. A major aim is to introduce clarity in the market as to the capabilities of current technologies to perform these processes. The whitepaper also covers the benefits of integrating a pseudo card implementation with a digital wallet strategy and the option of providing debit payment capability utilizing existing credit card infrastructure.
GPayments_Pseudo_Card_Numbers_Whitepaper.pdf (134 KB)
GPayments_Pseudo_Card_Numbers_Whitepaper.zip (124 KB)
