Windows IT Pro is the authoritative and independent resource for windows nt, windows 2000, windows 2003, windows xp. Features a collection of resources and magazines for windows IT professionals.
  
  
  Advanced Search 


February 1999

Secure Online Credit Card Transactions


RSS
Subscribe to Windows IT Pro | See More Security Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!
SideBar    Obtaining and Installing a Digital Certificate

Facilitate E-Commerce with Cybercash and IIS

Chances are that your business has taken advantage of the Internet's marketing potential by registering a domain name and developing a Web site that promotes your products and services. People who seek product information by going online are primed for purchasing; the best time to encourage an online purchase is when Web surfers are visiting your site. But if these visitors must write down online order information and then call your fulfillment center, you stand to lose sales.

E-commerce lets you process payments in realtime for orders that customers place through your Web site, eliminating the need for your customers to take additional action, such as making a separate telephone or fax order. Your customers receive order confirmation immediately, and you no longer need to manually verify contact and payment information. In this article, I will give you an overview of the e-commerce payment process and describe a powerful freeware program—CyberCash, which you can use with Internet Information Server (IIS)—that lets you accept credit card payments over the Internet. (Although CyberCash works with previous versions of IIS, in this article, when I refer to IIS, I mean IIS 4.0.) After you're in business online, CyberCash's CashRegister administrative software helps you maintain your site transactions.

The E-Commerce Payment Process
E-commerce credit card purchases and traditional physical-store credit card purchases have the same result but differ notably in execution. Let's look at a typical payment scenario for each of these processes.

Physical-store purchase. A customer travels to and enters the physical storefront. The customer selects the items he wants to purchase from the store's display and places the items in a shopping cart. When he has all the items he wants, the customer takes the items to a store employee at a checkout counter for purchase. The checkout clerk adds the prices of the customer's items, calculates sales tax on the total, and asks for payment. The customer produces his credit card. The checkout clerk swipes the credit card through a credit card machine and requests an authorization from the credit card issuer to charge the amount of the sale to the customer's card.

The credit card machine automatically sends the authorization request to a credit card processor or to the merchant's bank electronically. The card processor verifies the merchant's identity and requests the authorization of the purchase from the card issuer. The card issuer compares the credit card and purchase information with the cardholder's current balance, credit limit, and card expiration date. Based on this comparison, the card issuer sends either an authorization code to OK the purchase or a decline code to refuse the purchase.

The card issuer's code travels back to the merchant's credit card machine electronically. Assuming the code authorizes purchase approval, the merchant's machine automatically prints a charge slip. The customer signs the charge slip, takes his copy, and departs the store with his cool new stuff.

If the merchant didn't request a funds transfer during the authorization process (an auth-only transaction), the merchant generates another transaction based on the authorization number the card issuer provided. This additional transaction requests that the card issuer transfer the amount of the customer's purchase from the customer's credit card account to the retailer's bank account. Retail stores don't usually execute auth-only transactions but rather authorize and capture funds in one transaction (an auth/capture transaction). In general, retailers use auth-only transactions when delivery of a product or service is not immediate upon purchase, such as when a customer registers for a training class or places an order for an item the retailer must back-order.

   Previous  [1]  2  3  4  Next 


Reader Comments

You must log on before posting a comment.

If you don't have a username & password, please register now.




Top Viewed ArticlesView all articles
PsExec

This freeware utility lets you execute processes on a remote system and redirect output to the local system. ...

Microsoft Delivers Service Pack 2 Beta 2 for Vista, Server 2008

Microsoft on Tuesday announced the availability of the Beta 2 version of Service Pack 2 (SP2) for Windows Vista and Windows Server 2008. Since both operating systems were developed from the same code base, they have a common servicing structure and thus ...

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...


Security Whitepapers The Impact of Messaging and Web Threats

Why SaaS is the Right Solution for Log Management

Protecting (You and) Your Data with Exchange Server 2007

Related Events How IE7 & The New Extended Validation SSL Certificates Impact Your Site

Top 10 Email Security Challenges and Solutions

Introduction to Identity Lifecycle Manager "2"

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Become a VIP member of the Windows IT Pro community!
Get it all with the VIP CD and VIP access. A $500+ value for only $279!

Subscribe to Windows IT Pro!
Solve your toughest technical problems with our experts and access 10,000 + articles online. 30% off

Monthly Online Pass - Only $5.95!
Get instant access to 10,000+ articles from Windows IT Pro Magazine!

TechNet Virtual Labs
Evaluate and test Microsoft's newest products.


Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro Windows Dev Pro IT Job Hound ITTV
IT Library Technology Resource Directory Connected Home Windows Excavator Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 Copyright © 2008 Penton Media, Inc., All rights reserved. Terms and Use | Privacy Statement | Reprints and Licensing