Technology Evaluation

Intended Audience

This demonstration is intended for Technical Strategists and Technologists who wish to evaluate ON-LINE CARD (sm) for possible use in their e-commerce applications. ON-LINE CARD (sm) is a standalone, On Demand, web-based payments processing and billing service.

Please follow the instructions below. We appreciate your interest and value your opinion. Please feel free to give us feedback.

Note: You may walk through the entire demonstration as described below or select one of the CATEGORIES to the right.

Software requirements

The demonstration software requires Microsoft Windows® XP or Windows® 2000 and Microsoft® Internet Explorer 5 or higher.

Payment Demonstration

The demonstration uses a  dummy merchant web site with a Sample Check-out Page, a Sample Delivery Page, a Sample Cancel Page, and a Sample Log-in Page.

Scenario

• A Customer making a purchase on a registered merchant's website reaches the checkout page, Sample Check-out Page.
• The Customer clicks the Click-to-Buy (sm) button.
• If the Customer is a registered client ON-LINE CARD (sm) (with the client application installed) he or she is prompted to commit payment. Otherwise, the Customer is sent to an ON-LINE CARD (sm) enrollment page.

The following sections will guide you through various points of this scenario.

New Customer

Action: Please click the Click-to-Buy (sm) button on the Sample Check-out Page, then return here.

This Customer is not a registered ON-LINE CARD (tm) client, so he or she is sent to a secure ON-LINE CARD (tm) enrollment page.

This page shows the merchant, the merchandise ordered, and the requested payment amount. All of these parameters are reconstructed by ON-LINE CARD (tm) from the Merchant Payment Request and passed on to the Customer by the Check-out Page.

This is an example of  how ON-LINE CARD (sm) intercepts new customers on a pre-registered merchant’s checkout pages.

New Customer Orders a Promotional Card

Action: Please order a Promo Card on the "Promo Card Signup Page ."

A promotional card with a fictitious value is distributed by an imaginary company, Demo Issuer, Inc., registered with ON-LINE CARD (sm).

Action: Please check your email inbox for your promotional card.

Note:  If your card is not there, please make sure it was sent to your Junk Mail folder.

Installing ON-LINE CARD ™ Software / Enrolling in the Service

After placing your order for Promo Card you arrive at another page.

Action:  Please click “Install ON-LINE CARD ^TM and apply for the Service” to download the software and "Click for installation instructions" for detailed download and installation information.

The installation utility is seamlessly integrated with the Application/Enrollment utility.  After the software installs, the enrollment will automatically start.

If you skipped to this section using the CATEGORIES link, you may download the software by clicking here.  The installation instructions are here.

Note: If you have Microsoft® Anti-Spyware or other anti-spyware software installed on your computer, please allow the “Browser Helper Object” to install.

Customer payment - ON-LINE CARD ™ application not running.

Note: Do not launch the ON-LINE CARD ^TM application or close it if you've already launched it. Close Microsoft ® Internet Explorer. ^TM Internet Explorer ^TM must be restarted for this demo to work correctly.

Action: Return to the Sample Check-out Page and click the “Click to Buy ^TM” button. You will be presented with a Merchant Verification Page with the name of the merchant, the order number, and the requested amount of to be charged. Click the “Pay” button.

Action: The ON-LINE CARD ^TM Application will launch automatically and prompt you to input your Card Verification Code (CVC) on the “back” of the card. Enter your CVC. Click “Enter,” when it appears, or press 'Enter' on your keyboard.

The application connects to an ON-LINE CARD^SM server and displays the ON-LINE CARD ^TM logo and the available balance on the Card. In a real life situation, this could also be the credit limit.

The PIN panel rolls out.

Action: Enter your Personal Identification Number (PIN) using your mouse. Click the 'Enter' button. Notice the available balance displayed on the card changes.

Click the “Return to Merchant’s site” button. This brings you to the “Success URL” on the merchant's site.  At this point the Merchant System validates the security token and displays a “Successful Payment” page, if the token proves genuine. This page is located on the merchant's system and has a “Delivery button” which will initiate whatever actions are required to deliver the merchandise (file download, etc).

You've just seen:

• The Merchant Payment Request from Merchants' web-page was intercepted by the ON-LINE CARD ^TM Application and validated on the ON-LINE CARD^SM server.
• The results of the Merchant Validation displayed to the customer (preventing “phishing” and fake requests).
• The two-factor authentication of the customer (strong encryption and the CVC code).
• The customer authorizing payment by entering his or her PIN with the mouse (foils key loggers).
• NO SENSITIVE INFORMATION WAS PASSED TO THE MERCHANT DURING THE COURSE OF THE TRANSACTION. The merchant was presented with a security token, which was validated on the ON-LINE CARD^SM server or locally (depending on pre-arranged options). The brief time between the submission of the token to the merchant's system and delivery minimizes security threats.

Customer payment - ON-LINE CARD ™ application running.

Action:  Launch the ON-LINE CARD ^TM Application, if you have not already done so, and enter your CVC code.

Return to the Sample Check-out Page and click the “Click to Buy ^SM” button. Click  “Pay.”

Enter your Personal Identification Number (PIN) using your mouse when the PIN panel rolls out. Click the “Enter” button. Click the 'Return to Merchant’s site' button.

You've just seen how the pre-launched application makes the payment process even more straightforward and intuitive.

Authenticated login to Statement secure web site - ON-LINE CARD ™ application running.

Action: Launch the ON-LINE CARD ^TM Application, if you have not already done so, and enter your CVC code.

Right-click on the OC icon in the Microsoft Windows® System Tray. Choose “Statement” from the menu.

You've just seen how the pre-launched ON-LINE CARD^TM authenticates a client logging in to the secure Statement web site.

Authenticated login to Statement web site - ON-LINE CARD ™ application not running.

Action: Please close the ON-LINE CARD ^TM Application. Click here or open Cardholder Services in the Favorites ON-LINE CARD Folder. Click “Log-in.” Enter the Card Verification Code (CVC) when prompted.

You've just seen how the application launches automatically, requests the CVC, and authenticates the customer for login on the secure Statement web site. You've also seen a strong two-factor authentication during the login to a secure web site.

 

Important! This feature can be used as a strong anti-phishing measure on Issuers’ web sites and Merchant web sites serviced by Issuers. The client application passes the request, generated by a link or html button in an email, to the Service. The Service interacts with the client application and the web site in a way that provides the highest level of security, while keeping the authentication business-process easy and intuitively understandable for the customer.