Securing online purchases
Additional security for online purchases: 3D Secure
In an e-commerce transaction, the customer must provide at least the number of their CB card, its date of expiry and the 3 figures shown on the back of the card.
An additional layer of security has been introduced for online transactions with "3D Secure": this is a set of procedures for authenticating the holder of the card who ordered the payment.
Specific authentication procedures have been implemented in three areas (3-D): the relationship between the bank and its cardholder customer, the relationship between the bank and its e-merchant customer, and the relationship between the customer’s bank and the e-merchant’s bank.
In concrete terms, for the holder who makes a "3D-S" e-commerce purchase, this results in procedures that may vary from one bank to another:
- A non-replayable code sent by SMS to the portable telephone number given to your bank
- A procedure of the "battleship" type, during which, using a grid supplied by your bank, you enter the code located in the box specified during the transaction
- Portable smartcard reader, which calculates a cryptogram specific to the transaction
- A token, a screen dedicated to calculating a value
- Request to enter data chosen by the holder of the card
How does an on-line payment proceed?