Card management in 3D Secure scheme
BORICA AD enables the financial institutions that are card issuers to provide their cardholders with secure internet payments through the schemes b-secured for cards bcard, Visa Secure for Visa cards and Mastercard Identity Check for Mastercard cards.
BORICA AD is certified for processing secure payments on the internet using 3D protocols EMV 3DS (v. 2.1 and v. 2.2). The service is fully compliant with current regulatory requirements. Through 3D Secure internet payments, cardholders of bank cards with the VISA, Mastercard and bcard logos gain greater control when using their cards online. The risk of unauthorized use of cards is minimized and user security is increased when shopping online. The service requires that when shopping online at merchants that participate in secure payment schemes, the cardholder use a two-factor method to confirm the payment - entering a static and dynamic password or using a biometric feature for authentication (fingerprint or facial recognition).
The following options for authentication by biometric features are offered:
- B-Token through the mobile application B-Trust Mobile; It is possible to use B-Token not only for card transactions, but also for identification in internet banking and other operations selected by the financial institution
- SDK for authentication of card transactions that allows integration into the issuer's mobile application. This solution enables the issuer to integrate the authentication of card transactions into their mobile banking or other application
- Integration with external solutions for biometric authentication
BORICA provides a wide range of technical solutions for card registration for 3D Secure and their subsequent management; generation and distribution of static and dynamic passwords; cardholder access to a website (Customer Portal) where they can change their password and manage their profile.
The 3D Secure service facilitates card payments on the internet through so-called frictionless transactions, which do not require authentication from the customer in cases approved by the issuer.
