The document discusses 3D Secure passwords, which provide an additional layer of security for online credit and debit card transactions. 3D Secure is an XML-based protocol that uses passwords to authenticate customers during online purchases. It involves three domains - the acquirer (merchant), issuer (card-issuing bank), and an interoperability domain to facilitate communication between the other two. The protocol requires customers to register with their bank and answer security questions to establish a unique password for making online payments. This process helps reduce fraud by verifying customers' identities for each transaction.

1. Prepared by:
ACHINTYA KUMAR ROY
DSSD ,C-DAC HYDERABAD
Prepared by ACHINTYA KUMAR ROY 111-04-2015

2. WHAT IS 3D SECURE
PASSWORD
Prepared by ACHINTYA KUMAR ROY 2
* It is an E-commerce application for payment system.
* To know about 3D secure password , we need to know about 3D
and then 3D secure.
* 3D stands for 3 Domains here.
* 3D secure is an XML based protocol to implement the better
security to the credit & Debit cards transaction.
* so the password formed by 3D secure protocol is called
3D secure password.
11-04-2015

3. WHAT ARE THE 3
DOMAINS
1. ACQUIRER DOMAIN
The merchant to which money is being paid.The merchant to which money is being paid.
2. ISSUER DOMAIN
The bank which issued the card being used .The bank which issued the card being used .
3. INTEROPERABILITY DOMAIN
The infrastructure provided by the credit or debit cardThe infrastructure provided by the credit or debit card
company to support 3D protocol.company to support 3D protocol.
Prepared by ACHINTYA KUMAR ROY 311-04-2015

4. ACQUIRER DOMAIN..
Prepared by ACHINTYA KUMAR ROY 411-04-2015

5. ISSUER DOMAIN..
Prepared by ACHINTYA KUMAR ROY 511-04-2015

6. WHO DEVELPOED THIS 3D
SECURE PASSWORD??
Prepared by ACHINTYA KUMAR ROY 6
** It was firstly developed by the company ‘It was firstly developed by the company ‘VISAVISA’ and gave the name’ and gave the name
““ Verified by VISA”.Verified by VISA”.
* Now it is adopted by ‘* Now it is adopted by ‘Master CardMaster Card ‘ they give it the name‘ they give it the name
““Master Card SecureMaster Card Secure””
11-04-2015

7. INTEROPERABILITY DOMAIN…
Prepared by ACHINTYA KUMAR ROY 711-04-2015

8. PURPOSE FOR USING OF3D
PASSWORD…….
• Basically 3-D secure password is used to provide the better security to theBasically 3-D secure password is used to provide the better security to the
Customers for Transactions in theCustomers for Transactions in the Online Payment SystemOnline Payment System..
•• For online purchasing mostly we have to payFor online purchasing mostly we have to pay Digital cashDigital cash so we have to dealso we have to deal
online then it includesonline then it includes BankBank ,, MerchantMerchant andand CustomerCustomer. So there is requirement of. So there is requirement of
security from fraud and money theft.security from fraud and money theft.
•• It is being used for removing the risk over the Internet so that the customer canIt is being used for removing the risk over the Internet so that the customer can
feel free in doingfeel free in doing Online transactionOnline transaction..
Prepared by ACHINTYA KUMAR ROY 811-04-2015

9. HOW 3-D SECUREPASSWORD
WORKS??
• This protocol usesThis protocol uses XML messagesXML messages sent oversent over SSL connectionsSSL connections withwith
client authentication .client authentication .
• This is a one time process which takes place on the card issuer’sThis is a one time process which takes place on the card issuer’s
website involves the cardholder answering severalwebsite involves the cardholder answering several security questionssecurity questions toto
which only the card will know the answer .which only the card will know the answer .
•• The cardholder selects a password and agrees on secret phrase , whichThe cardholder selects a password and agrees on secret phrase , which
will be used by the card issuer during each online transection.will be used by the card issuer during each online transection.
Prepared by ACHINTYA KUMAR ROY 911-04-2015

10. THIS IS HOW XML MESSAGES ARE
SENT IN 3D SECUREPROTOCOL
Prepared by ACHINTYA KUMAR ROY 1011-04-2015

11. IMPLEMENTATION OF 3DSECURE
PROTOCOLS BY BANKS
n order to use this service, and andn order to use this service, and and
ember bank has to operate a compliment software thatember bank has to operate a compliment software that
supports the latest 3D Secure protocol specifications . Oncesupports the latest 3D Secure protocol specifications . Once
compliment software is installed , the member bank willcompliment software is installed , the member bank will
perform product integration testing with the payment systemperform product integration testing with the payment system
server before it rolls out the system.server before it rolls out the system.
Prepared by ACHINTYA KUMAR ROY 1111-04-2015

12. 3-DSECURECOMPONENTS…
1.1. ACS Providers (Access Control Server).ACS Providers (Access Control Server).
2. MPI Providers (Merchant Control Server).2. MPI Providers (Merchant Control Server).
Prepared by ACHINTYA KUMAR ROY 1211-04-2015

13. ACS PROVIDES:
In 3D Secure protocol ,In 3D Secure protocol ,ACS (Access Control ServerACS (Access Control Server) is on the) is on the
issuer side(banks).Currently , most of the banks outsourceissuer side(banks).Currently , most of the banks outsource
ACSACS to a third party. Commonly on customers web browserto a third party. Commonly on customers web browser
shows the domain name of theshows the domain name of the ACSACS provider , rather thanprovider , rather than
bank’s domain name. Dependent onbank’s domain name. Dependent on ACSACS provides ,it isprovides ,it is
possible to specify a bank owned domain name for the use bypossible to specify a bank owned domain name for the use by
thethe ACSACS..
Prepared by ACHINTYA KUMAR ROY 1311-04-2015

14. MPIPROVIDES..
isa and MasterCard don’t allow merchants for sending requestisa and MasterCard don’t allow merchants for sending request
to their server. So merchants isolate their servers by licensingto their server. So merchants isolate their servers by licensing
software providers which are calledsoftware providers which are called MPI (merchant plug in)MPI (merchant plug in)
providers.providers.
Prepared by ACHINTYA KUMAR ROY 1411-04-2015

15. Prepared by ACHINTYA KUMAR ROY 1511-04-2015

16. PROCESS TO GET3D
PASSWORD
o get 3D password you have to registero get 3D password you have to register
yourself with your bank before shopping. It hasyourself with your bank before shopping. It has
2 steps.2 steps.
Prepared by ACHINTYA KUMAR ROY 1611-04-2015

17. Prepared by ACHINTYA KUMAR ROY 17
Step 1Step 1
11-04-2015

18. Prepared by ACHINTYA KUMAR ROY 18
Step 2Step 2
11-04-2015

19. HOW TO MAKE PAYMENTUSING
3D PASSWORD
Prepared by ACHINTYA KUMAR ROY 1911-04-2015

20. ADVANTAGES FOR
MERCHANTS
eduction in “ Unauthorized transactions”eduction in “ Unauthorized transactions” CHARGECHARGE
BACKBACK..
oreore securitysecurity andand reliabilityreliability..
ore security means more of the customers ,moreore security means more of the customers ,more
Prepared by ACHINTYA KUMAR ROY 2011-04-2015

21. ADVANTAGES FOR CUSTOMERS
ecreased Risk of Fraud for Online Payments.ecreased Risk of Fraud for Online Payments.
etter Password Security.etter Password Security.
etter Online Shopping Experience.etter Online Shopping Experience.
Prepared by ACHINTYA KUMAR ROY 2111-04-2015

22. LIMITATIONS
or the Merchant it can be too expensive because in
purchasing Software , monthly fee , setup fee , per transaction
fee so Customer has also face these expenses .
here may be more phishing attacks with unfamiliar domains
because of vendor’s MCS and outsourced ACS
implementations by issuing banks.
Prepared by ACHINTYA KUMAR ROY 2211-04-2015

23. PERFORMANCE
t was officially launched int was officially launched in 20072007 and now most of the banksand now most of the banks
are working with this.are working with this.
CICICICI and more banks are working on implementing on 3Dand more banks are working on implementing on 3D
secure.secure.
s now more than 100 vendors are developing 3D secure.s now more than 100 vendors are developing 3D secure.
urrent version 1.0.2urrent version 1.0.2 is running with high performance.is running with high performance.
Prepared by ACHINTYA KUMAR ROY 2311-04-2015

24. BIBLIOGRAPHY
Prepared by ACHINTYA KUMAR ROY 24
• www.wekipediawww.wekipedia .org.org
• www.google.comwww.google.com
• www.authorstream.comwww.authorstream.com
• www.ijesit.comwww.ijesit.com
11-04-2015

25. Prepared by ACHINTYA KUMAR ROY 2511-04-2015