|
DERFEN HAS CHOSEN PAYBOX 
THE PRINCIPLE OF SECURE ONLINE PAYMENTS Thanks to the technology used and the absence of a printout containing the unencrypted bankcard number, we can confirm that it is safer to pay by bankcard on PAYBOX affiliated websites than in the majority of local shops. The various stages of the payment process between the purchaser and PAYBOX are fully encrypted and protected and the protocol used is SSL. This means that information linked to the order and the bankcard number do not circulate unencrypted on the internet. - The bankcard number is not printed out onto documents, invoices, credit card receipts or other printouts. - The retailer does not have access to card numbers. - PAYBOX does not keep card numbers once the payment transaction has been transmitted to the retailer’s bank. This means that nobody has access to purchasers’ card details either electronically or via printouts. The risk of a client’s bankcard number being “hacked” when purchasing on a PAYBOX SYSTEM affiliated website is nil. The various security phases when paying online:
For each payment request, the purchaser is switched over from the retailer site to the PAYBOX SYSTEM server, which is connected to the banking world. 1. The purchaser comes to an encrypted SSL payment page 2. The purchaser enters the card number, expiry date, the visual cryptogram and an authorisation request is made. The link between the purchaser and the PAYBOX SYSTEM server is established in HTTPS, the secure protocol with SSL, which encrypts all the data being exchanged. This protects data sent over the web and guarantees that the purchaser’s card number cannot be intercepted unencrypted by a third party during transfer to the PAYBOX SYSTEM secure server. The PAYBOX SYSTEM home page provides the purchaser with information about the purchase: the name of the retailer (with this guaranteeing that the company has been authenticated) 3. Once the card number has gone through a preliminary level of checks (Luhn formula, list of stopped cards etc.), the PAYBOX SYSTEM server makes an authorisation request to the banking centre to which the retailer is affiliated. This request is carried out using standardised banking protocols on a specialised telecommunications network. 4. The bank’s authorisation centre transmits an authorisation number or declines the card. If the payment is accepted, PAYBOX SYSTEM then carries out the following operations: displays payment confirmation on the purchaser’s screen (option), sends payment confirmation by e-mail to the purchaser and retailer. The card number is NEVER transmitted to the retailer. 5. The purchaser is then automatically redirected to the retailer’s server where s/he can continue browsing.
|