We are starting a series of articles on security in payment technologies. The topic is big, this article will be the first, introductory. We decided to talk about security with Igor Goldovsky, the chief architect and director of the department, a man who knows everything about payment systems and their protection.
Security issues in card payment technologies play a key role. By itself, a bank card is a tool that provides remote authentication of its holder when making a cashless purchase or cash transaction. The security of card operations as a whole, and, consequently, the trust of users in cards as a means of payment, depends to a large extent on the reliability of the authentication methods used by the cardholder.
On the other hand, payment technologies do not blindly follow the slogan "There is never too much security." Technologies that provide a high level of security, but at the same time are inconvenient to use and / or require significant costs / efforts for implementation, are in practice unclaimed.
,
, , Secure Electronic Transaction (SET), . 1998 . , 2001 . , - , - , . , SET / 3-D Secure.
« » — , , . – , , .
. 90- , , . Card Present- , , 2- . , CNP (Card Not Present)-, , . , , Card-on-File . , CNP-, . 3-D Secure 2.0, in-app , , Secure Remote Commerce.
Secure Remote Commerce
() 3D-Secure (v.1.0 v.2.0) , . . 3-D- Secure v.2.0 , , ( .. frictionless mode). 3-D Secure v.2.0 . , , , .
3-D Secure , ( ) . , . — , . Secure Remote Commerce (SRC) — , .
SRC - () .
EMVCo . SRC . SRC , « » (one-click checkout). , SRC (, ) .
SRC « » , . SRC , , , . SRC , . SRC.
SRC.
- ( , ) SRC Triger SRC (, , , ), (, MAC- , , , ) (, , ..). , SRC. SRC, , .
- SRC, , () . , (, )
- SRC , SRC () . SRC DCF (Digital Card Facilitator). , ( ), . DCF .
- SRC , ,
- SRC ,
- SRC DCF,
- DCF
- DCF SRC , . ,
- SRC , ,
- , SRC, .
SRC :
- « » (One click purchase): SRC / , ,
- , SRC
- ( , )
- ( ).
SRC , . SRC, SRC. , - Card-on-File , SRC. (abandonment rates) - .
SRC . ( EMV Chip, ), abandonment rates.
, SRC , , .