Transaction Security

Overview of Transaction Security Technology Solutions
Consumer Authentication Through 3-D Secure
1
Consumer
Authentication
3-D Secure represents a set of protocols for connecting the consumer / cardholder directly to the
issuing bank so information can be shared to improve authentication in online transactions
• Has been in use for more than 10 years and offered by most card brands; each brand has its own name
for 3-D Secure (i.e. Verified by Visa, MasterCard SecureCode, American Express SafeKey)
• 3-D Secure is based on a 3 domain model (hence the 3-D in the name)
Acquirer Domain
Interoperability Domain
Issuer Domain
• The merchant and acquiring
bank initiating the payment
and to which funds are paid
• A Merchant Integrator (MI) is
used to connect to the
Interoperability Domain and
share information
• The infrastructure and
components provided by the
card scheme (debit, credit or
other type of payment card) to
support the 3-D Secure
protocols
• Connects to the MI and ACS
• The financial institutions that
issued the card being used
• An ACS (Access Control
Server) is a server with
registered cardholder account
and access information used
in authentication
Source: Visa, MasterCard, CardinalCommerce.
20