Magensa - MagTek

eCommerce authentication stages
Stage 4: Hardware, User, Card, cardholder authentication
For maximum security, use the hardware token for mutual device/host
authentication and use a card swipe for card and user authentication. This
takes security to the highest level, providing “card present” authentication.
The username can be extracted directly from the authenticated card for
unparalleled transaction authentication, while at the same time
transparently and securely logging users into their stored accounts.
stage
PC Client WebSite Server Magensa
1.
User connects SCRA
to Internet device,
visits eCommerce
site, & activates the
Authentication Mode
2.
Website sends Challenge
Request to SCRA
3.
6.
SCRA transmits
Encrypted Reader
Challenge to Magensa
SCRA compares
Encrypted Activation
Response to expected
Encrypted Activation
Response
In the clear, no need to encrypt.
Secure via 3DES Encryption &
DUKPT key management
Secure via 3DES Encryption &
DUKPT key management
Magensa
4.
5.
Magensa Decrypts
SCRA Challenge &
formulates Encrypted
Activation Response
Magensa sends the
Encrypted Acitvation
Response to the SCRA
7.
Green blinking LED
on SCRA indicates
hardware token
validation
Card data: Secure via
3DES Encryption and
DUKPT key management;
User name & password:
Secure via SSL, Server
Certificates, IP Address
Secure via SSL, Server
Certificates, IP Address,
User name & password
8.
User swipes card in
SCRA. User Name
resides on card.
Secure via SSL, Server
Certificates, IP Address,
User name & password
9.
12.
Website sends Encrypted
Card Data to Magensa
Website verifies user name
and uses Magensa
data to authenticate the
customer
10.
11.
Magensa decrypts
card data & authenticates
MagnePrint Data
Magensa sends
Decrypted Card Data &
MagnePrint Score to
Website
14.
Enhanced User Experience:
User swipes card to auto
enter any form or payment
data, then submits.
13.
15.
Website sends validation.
Website sends Encrypted
“Card present” Card Data
to Magensa
16.
Magensa decrypts
card data & authenticates
MagnePrint Data
19.
Internet user receives
a response.
18.
Website authenticates the
customer and payment form
and completes service per
standard procedures.
17.
Magensa sends
Decrypted Card Data &
MagnePrint Score to
Website
Topology Key
Challenge Request
Encrypted Reader Challenge
Encrypted Activation Response
Card Data, User name & Password
MagnePrint Score
User
User time
SCRA hardware token
User card swipe
simply stops fraud
Magensa I 1710 Apollo Court, Seal Beach, CA 90740 I 562-546-6500 I info@magensa.net
© Copyright 2012 Magensa All rights reserved. Page 5 of 5 PN 99810012 rev 2.01 2/12