eCommerce

This document describes how to establish an ecommerce site with credit card payment processing

Websites that store, process, or transmit credit card data should follow the Payment Card Industry (PCI) Data Security "best practices" standard as implemented in
Visa's Cardholder Information Security Program (CISP) and
MasterCard's Site Data Protection (SDP) program standards, which include
Self Assessments and audits by assessment companies such as Ambiron

Topics this page:

Site Map  
About this site  

Related Topics:

Workflow Summary

A payment Processor such as Merchant e-Solutions takes consumer transactions to the Federal Reserve Bank for clearing with the merchant's own acquirer bank.

Real-time payments are individually processed immediately over the Internet. b>Offline processing (such as COD) is handled manually by keying into a POS terminal.

Payment Processor Comparisons

Option	Package	Setup	Package	Monthly	Per Trans.	Percentage
Verisign	Payflow Pro	Email support	$249	$60	$.10 after 1,000 trans.
	Payflow Link	Email support	$179	$20	$.10 after 500 trans.
Paypal	domestic payments	-	-	-	$0.30	2.9% to $3,000 2,5% to $10,000 2.2% to $100,000 1.9% above $100,000 per month
InfoDial	Free	Free	Free	$10	$.25	2.29%

Others include o Authorize.Net (SIM) o Ka Chinng o LinkPoint (CardService International's gateway) o UTCI o IntelliPay o National Secure o UsaEPay o 2CheckOut o GoEMerchant o RoboCharge o PayByCheck o QuickCommercePro o Yahoo PayDirect o CyberCash o Planet Payment o WorldPay o PayByCheck o Transaction Central o SecureTrading o Protx o IonGate o SecPay o Military Star Card o Bank of America o While Label o PlugNPay o SkipJack o Wells Fargo o BeanStream o Moneris o Viborgnet o Echonline o PaySystems o MoneyBookers o EPDQ o AsiaDebit PayZip

PayPal

Paypal Merchant Tools is perhaps the easiest to add to your website.

Since it was purchased by eBay in 2002 (as perhaps the best example of offering free internet services until the owner got money from a sale of the company), its fees have gone up. (eBay's BillPay was its only competition).

VeriSign

VeriSign's Pay Flow Pro software on a client web server encrypts and sends internet transactions to Payment Processors.

However, installing their software is tricky. After downloading from manager.verisign.com, copy their pfpro.dll file and the certs folder (containing public key file f73e89fd.0) into the your web server's WINNT/System32 folder. Next, executing file PFProCOMSetup.exe installs and registers file pfpro.dll. Finally, create a SYSTEM Administrator environment variable named PFPRO_CERT_PATH with the full path name of the public key file:

c:\WINNT\System32\Certs

VeriSign provides sample client and server examples in ASP, VB, CGI, Perl, VS C and a test.bat file that invokes the pfpro.exe program to emulate what a web server does during connection testing.

Following Fraud Prevention Best Practices, transactions are reviewed on VeriSign's Payment Services gateway manager.verisign.com

Electronic Checks

Telecheck

Shopping Cart Apps

Here are the major shopping cart and e-commerce software applications:

Company	Product	OS Version	Cost	Scripting
Comersus	Sophisticated Back Office Lite (Open Source)	-	GPL	ASP using MS-Access, mySQL, MS-SQL
Macromedia (formerly Allaire)	Cold Fusion, Spectra	WinNT	_	Java
IBM	Payment Manager 2.X	WinNT
Microsoft	Commerce Server 2000/2002 Site Server 3.0 Commerce Edition	WinNT, 2000
Intershop Germany	Intershop 3.0 Enterprise, Intershop 4.2 (Unified Commerce Management)	WinNT, Solaris, Linux	-	J2EE, .NET, legacy systems
Oracle	Oracle iPayment 11i	WinNT
BEA	BEA WebLogic Commerce Server 3.5	WinNT, 2000, Solaris
webMethods	Integration Server 4.6, 6.0	WinNT4, Win2000, WinXP, Solaris, HP-UX, AS/400, AIX, Linux	-	J2EE, .NET, legacy systems
Miva San Diego	Merchant Pro	-	$2,635	Mira Script compiled for Mira Virtual Machine Syncho with Quick Books

VeriSign's Pro package provides pre-integrated interfaces with these apps.

-

Payment Processors

These financial institutions
• American Express
• FDMS Nashville (Envoy)
• FDMS South
• Global Payments East (NDC East)
• Global Payments Central (MAPP)
• Wells Fargo (previous CyberCash customers only)
• EDS Aurora
• Nova
• NorWest (ACH)
• Paymentech
• TeleCheck
• Vital (Visa Net)

-

Credit Card Types

VeriSign processes Automated Clearing House (ACH) checks and major credit card types: Visa, MasterCard, American Express (AmEx), Novus/Discover, (Japanese) JCB, Diner's Club, Enroute.
Level I (consumer)
Level II (corporate purchase / procurement cards), and
Level III

-

Best Practices for Online Sales

• Personalization and Internationalization
• Guided Selling
• Loyalty Programs
• Customer Service
• Campaign Management
• Integrated Content Management
• Business Analysis
• Product Configuration
• Product Customization
• Siebel Call Center Integration
• Wireless Access
• Comprehensive Load Balancing and Cluster Management

Commerce Server Architecture

Microsoft's Commerce Server makes use of other Microsoft technologies.

USPS Web Services API

The US Postal Service (USPS) provides several web tools.

Apps call the USPS-supplied COM wrapper function GetResponse (supplied in httpcom.dll) to make WinSock connections to the USPS XML web service.

GetResponse calls the http client function httpGetResponse (supplied in httpClient.dll).

storefront.net has USPS interfaces built into its storefront product for FrontPage users.

Amazon's Web Services API

Amazon.com/webservices (AWS)
• obtain a developer token

• Browse the Amazon API forum

  Amazon Web Services 4.0 provides access to Amazon product information from all Amazon product categories, including images, customer reviews, and product featu res.