Payment card for dummies sddc presentation @buet

Copyright © 2015 Kona Software Lab Ltd. All Rights Reserved.
Welcome to
System Design and Development Contest
Web Application Development Track
Rafiqunnabi Nayan
6 May 2015

Copyright ⓒ 1999-2013 Kona I Co., Ltd All Rights Reserved.
CONTENTS
II
Judging CriteriaIII
IV QA
Topics to Study
I Problem Domain

What is this?
Smart Card
4
• Payment Cards
• Discount Cards
• ID Cards
• Others

How do we get it?
Various organizations may issue Smart Cards. Most common issuer of payment cards are Banks.
Issuer Bank
Other Organizations
o As part of Bank Account
o Credit Card Service
o Financial Institutions
o Restaurants, Stores as discount card
o National ID e.g NID of Thailand
5

Where do we use it?

Where do we use it?
ATM Booth
7

Where do we use it?
Point of Service Terminal
8

Where do we use it?
Online Payments
9

Card Information
Each Smart Card contains some information either in the Magnetic Stripe or in the EMV Chip.
Card Data Elements
10
• Primary Account Number (PAN)
• Expiry Date
• Card Holder Name
• CVC/CVV

Types of Cards
Two most commonly used cards are issued by Banks.
Debit Card
Credit Card
o As like pre-paid phones
o Maximum allowed amount is equal to account balance
o As like post-paid phones
o Each card has a credit limit
o Maximum allowed amount to expense is equal to credit limit
11

Card Technologies
Most commonly used cards are of two types
Magnetic Stripe
EMV
o No electronic chip
o Unsecured
o Electronic chip embedded
o More secured
12

Payment Networks
Responsible for performing inter bank communications
13
• VISA
• MasterCard
• Discover
• JCB
Most Common Networks

Transaction Flow
14

Simplified Responsibility of Components

Merchant
16
• Opens account with Acquirer Bank
• Installs POS Terminal

Acquiring Bank
17
• Detects the card type e.g Visa, MasterCard, American Express etc
• Forwards the request to corresponding Payment Network e.g Visa, MasterCar
d network
• After receiving successful message from Payment Network, performs a transa
ction in Merchant’s account

Payment Networks
18
• Detects the Card issuer from the PAN
• Verifies the request data format
• Forwards the request to the Card Issuer Bank

Issuer Bank
19
• Receives transaction request from Payment Network
• Verifies the card validity and transaction eligibility
• Processes the transaction
• Sends response back to Payment Network

Considerations
20
• High Security
• High Availability
• Transaction Time
• Usability

Study Materials

Topics to Study
22
• How to manage authentication
• How to develop API
• How to manage transaction in DB
• How to validate inputs
• How to test API endpoints

HTTP Status Code
23
• Indicates response status
• Standard
• http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html
Example Status Codes
• 200 OK
• 404 Not Found
• 500 Internal Server Error
• 400 Bad Request

Sending Data to Web Server
24
POST
• Used for sending data to server
• Example: Login, Signup
GET
• Used for getting resources
• Example: view user profile

URL Parameters
25
Notes
• Separate with &
• Sent in key=value format
• Open to all
• Mostly used in GET
http://localhost/home.php?id=23&name=john

POST Parameters
26
<form action="submit.php" method="post">
<label>Name: </label>
<input type="text" name="my_name" />
<input type="submit" value= "Submit" />
</form>
http://localhost/home.php?id=23&name=john
User Interface
HTML Front End Back End API
<?php
if (isset($_POST['my_name'])) {
http_response_code(200);
$name = $_POST['my_name'];
echo "Hello $name";
} else {
http_response_code(400);
echo "Please send your name";
}
?>

API Testing Tools
27
As there is no UI, we need some tools to test Web API

Postman
28
A Chrome app for testing API

Version Controlling System
29
Benefits
• Code merging becomes easier
• Code backup
• History of changes
• Easy to revert changes
Usage of VCS makes life of a developer lot more easier
Choices
• Git - preferred
• SVN
Free Git Hosting
• Github
• Gitlab
• Bitbucket

Judging Criteria

Judging Criteria
Criteria Marks
DB Design, ERD, Use Case Diagram 15%
Transaction Management 10%
Code Quality (OOP, MVC and Documentation) 10%
Intuitive User Interface 10%
Implementation 30%
User Authentication 5%
Input Validation 10%
Team Collaboration and Version Control System 10%
31

Rafiqunnabi Nayan
CSE(06), BUET
Engineer - R&D
KONA Software Lab Ltd.
https://bd.linkedin.com/in/rafiqnayan
32
About Me

QA
33

Payment card for dummies sddc presentation @buet

Recommended

Recommended

More Related Content

What's hot

What's hot (19)

Similar to Payment card for dummies sddc presentation @buet

Similar to Payment card for dummies sddc presentation @buet (20)

Recently uploaded

Recently uploaded (20)

Payment card for dummies sddc presentation @buet