Gate2Bank EMV 3DSS is a software solution for acquiring service providers, who need to invoke 3D Secure verification for acquired transactions, according to 3D Secure 2.x protocol.
The solution supports the maintenance of card enrollment, the authentication of payment request, and cardholder notification.
¶ 3-D Secure version
If you are not familiar with 3-D Secure technology please check EMV 3-D Secure Protocol and Core Functions Specification.
The supported version of the 3-D Secure protocol is 2.2.
¶ Supported payment scheme programs
¶ Solution architecture
Depends on the project requirements 3DSS might be integrated with the following systems:
- DS (Directory Server) - Payment Schema (PS) server to perform 3DS, the part of the total 3DS infrastructure. The connection with DS establishes in an ordinary way via revers proxy server (like nginx or similar), because it is required certificates signed by PS placed on the proxy. But it is also possible to establish connection from the 3DSS application itself.
- Cardholder devices - it could be browser or mobile device, the connection establishes in the same way like for DS, but with appropriate certificates instead.
- Payment Gateway - As for payment or money transfer operation, required to authenticate cardholder with 3D-Secure, 3DSS is integrated with any Payment Gateway. In particular it may be integrated with D8 Payment Gateway (PGI). The appropriate API is developed and used to perform 3DS.
- ACS - It might be the situation when 3DSS is integrated directly with ACS of the same Bank or Service Provider. The most recent case is local operations when the Institution is the same for both parts, issuing and acquiring. For this purpose the direct integration and specific config is used.
¶ Certificate management
TLS client and server certificates are used in the communication between the 3DS Server and the DS.
¶ PA-DSS and PCI DSS compliance
D8 3DSS is compliant with PA DSS requirements and thus is ready for PCI 3DS and PCI DSS audits.
¶ Metrics
Metrics are quantitative indicators of events in D8 3DSS.
Metrics can be used for the monitoring and analysis of system availability and performance.
D8 3DSS provides all necessary information and data for monitoring to such popular tools as Prometheus and Grafana as a GUI and reporting tool.
¶ Technological stack
Java
PostgreSQL / Oracle