支付平台Paypal在线支付流程分析

IntroductiontoPayPalPaymentSolutions**Source:PayPalsurveyofsmalltomid-sizedbusinesses,November200751%PercentageofconsumerswhowouldhaveabandonedtheirpurchaseifPayPalpaymentswerenotavailable**14%Increaseinsalesforsmalltomid-sizedbusinessesthataddedPayPalExpressCheckout**Source:PayPalstudyofsmall-andmedium-sizedbusinesses,2006141MNumberofPayPalaccountsworldwidePayPalis:SecureSimpleFastPayPalHelpsBringYouNewCustomers2DriversofConsumerDemandforPayPalOpportunitiesforMerchantsThePayPalOpportunity3PayPalGrowthPayPalhelpsyougrowyourbusiness►141Maccounts►31%yoyvolumegrowth►190countries►70+currencies►1000sofmerchantsaddPayPaleveryyearPayPalisthesafer,easierwaytogetpaidbyonlineshoppersaroundtheworld.PayPalShoppingCartSoftwareUnderstandingthePaymentProcessingNetwork4Individuals►Merchant–sellerofgoods►Customer–buyerofgoodsInstitutions►Customer’sIssuingBank–providescustomer’screditcardinformationandverification►Merchant’sAcquiringBank–providesinternetmerchantaccount►Processor–authorizescreditcardtransactionsandsettlesfundsformerchantsPayPalShoppingCartSoftwareThePaymentNetworkProvidesProcessesandServices5Processes►Authorization–theprocessofverifyingacustomer’screditcard►Settlement–theprocessofcollectingfundsfromthecustomer’saccountServices►PaymentProcessingService–connectsmerchants,customers,andbanksthroughsecureonlinetransactions.►Gateway–thesecurepipebetweenthebanksandtheprocessorPayPalShoppingCartSoftware2PaymentProcessingServiceAuthorizationProcess1.Customerdecidestomakeanonlinepurchaseandinputscreditcardinformation765CustomerMerchant1Processor3Customer’sissuingbank42.Merchant’swebsitereceivescustomerinformationandsendsittoapaymentprocessingservice3.Paymentprocessingserviceroutesinformationtoprocessor4.Processorroutesinformationtobankthatissuedcustomer’screditcard(issuingbank)5.Issuingbanksendsauthorization(ordeclination)toprocessor6.Processorroutestransactionresultstopaymentprocessingservice7.Paymentprocessingservicesendsresultstomerchant68.Merchantdecidestoacceptorrejectpurchase8PayPalShoppingCartSoftware2PaymentProcessingServiceProcessorSettlementProcess71.Merchantinformsthepaymentprocessingservicetosettletransactions2.Paymentprocessingservicesendstransactioninformationtotheprocessor3.Processorcheckstheinformationandforwardssettledtransactioninformationtotheissuingbank4.Issuingbanktransfersfundstotheprocessor5.Processorroutesfundstotheacquiringbank6.Acquiringbankcreditsmerchant’sbankaccount7.Issuingbankincludesmerchant’schargeoncustomer’screditcardaccount64Merchant’sacquiringbank5MerchantCustomer1Customer’sissuingbank37PayPalShoppingCartSoftwarePayPalProvidesanAll-in-OneSolutionforOnlineMerchants8Customer’sissuingbankMerchant’sacquiringbankCustomerMerchantProcessorPaymentProcessingServiceProtectingthesecurityofamerchant’sinformationisthetoppriorityatPayPal..PayPalShoppingCartSoftwareUnderstandingtheRisksofInternetFraud9►Anestimated$2.8BUSDwaslosttoonlinefraudintheU.S.andCanadain2005►Therateofcreditcardfraudforonlinesalesisthreetofourtimeshigherthantheoverallfraudrate►Authenticationisachallenge►Hackerscanbreakintoamerchant’snetwork►Hackerscanalsostealcustomeridentities►Multipleaccesspointsforbreak-insVulnerabilitiesabound……leadingtolossesPayPalShoppingCartSoftwareCommonFraud-RelatedRisks10UsingstoleninformationtoopennewcreditcardsIssuingunauthorizedcreditsorpaymentsIdentitytheftCashtheftAccessingapaymentnetworktocompletefraudAccessingpaymentnetworksUsingastolencreditcardtopurchasegoodsandservicesProducttheftChargebacksAcardholderdisputesacreditcardpurchasePayPalShoppingCartSoftwareHowtoProtectYourBusinessAgainstFraud11TransactionLevelEnsureeachtransactionyouacceptandprocessisvalid,andbecarefulinreviewingsuspicioustransactionsbecausesomemaybevalid.AccountLevelMakesureonlyauthorizedusershaveaccesstoyourpaymentgatewayaccount,andbealertforsuspiciousaccountaccesspatterns.NetworkLevelEnsureyourperimeterisdefendedagainstunauthorizedaccess.123PayPalShoppingCartSoftwareYourDisclosurePolicyTellsCustomersthatYouAreHonestandDependable121BusinessDescription–Explainswhatthecompanydoes3ShippingPolicy–Detailsshippingterms,shippingclassesoffered,&expecteddeliverytimeframe2PrivacyPolicy–Describeshowthecompanytreatsandprotectscustomers’information4ReturnPolicy–Providesclearguidelinesonhowareturnishandled5ContactInformation–MakesiteasyforcustomerstogetintouchwiththemerchantviadifferentcommunicationchannelsPayPalShoppingCartSoftwareCompliancewithPCIDataSecurityStandardsMustBeFollowed13ProtectCardholderDataMaintainaVulnerabilityManagementProgramImplementStrongAccessControlMeasuresRegularlyMonitorandTestNetworksMaintainanInformationSecurityPolicyControlObjectiveRequirementBuildandMaintainaSecureNetwork1.Installandmaintainafirewallconfigurationtoprotectcardholderdata2.Donotusevendor-supplieddefaultsforsystempasswordsandothersecurityparameters3.Protectstoredcardholderdata4.Encrypttransmissionofcardholderdataacrossopen,publicnetworks5.Useandregularlyupdateanti-virussoftware6.Developandmaintainsecuresystemsandapplications7.Restrictaccesstocar