PAYMENT PLATFORM ARCHITECTURE
DIXIPAY Payment Platform is a J2EE, multi-tiered application, designed to work under
heavy loads, on a high-availability cluster to archive near 100% system uptime for
business-critical needs.
Since all stages of transaction processing are persisted into RDBMS, transaction can
be handled without any problems whatsoever for the customer even in event of a
hardware or software failure.
SOA enabled based on ESB technology.
Multiple deployment configurations can be made for different business needs.
Certified, off-the shelf interfaces with all major core vendors and networks.
Fast customization and rapid rollout of new functionalities, using the underlying
modular architecture.
PAYMENT PLATFORM ARCHITECTURE
Payment Platform scheme for DIXIPAY consist of 2 interchangeable nodes (Physical
layout). Each node includes the following components:
• Cisco ASA.
• Frontend Server.
• Payment Application Server.
• Key Server.
Both nodes are in online mode at the same time. Each node could use components
from other node (Logical scheme).
Cisco ASA
Used as router and firewall to filter access and manage routes between Payment
Platform components.
Frontend server
This is a start point for end-user interaction (shoppers and managers). To login
into Payment Platform backend, users will use User Interface on this server.
PAYMENT PLATFORM ARCHITECTURE
Payment Application Server
This is a core component of payment solution and includes all data and business
logic to serve as Payment Platform.
Key Server
This server store keys, which used to encrypt critical card data on Payment
Application Server.
Access to this server available for Payment Application Servers ONLY.
Current deployment scheme also includes Zabbix software installed on 1 monitoring
server. It will be used to monitor server’s performance and availability on both
nodes. Monitoring server is not used in payment process.
PHYSICAL LAYOUT
LOGICAL SCHEME AND DATAFLOW
PAYMENT PLATFORM ARCHITECTURE
SYSTEM CONFIGURATION
Operating Systems Firewall
Linux Cisco ASA
Web Servers Web Browsers
Apache Internet Explorer
Data Base Chrome
MySql Firefox
Servers Opera
12 Physical Servers Safari
HSM
2 KeyAppliance
PAYMENT TRANSACTION FLOW
PAYMENT TRANSACTION FLOW
PAYMENT PLATFORM FEATURES 1
Different payment methods
Visa, MasterCard and many more alternative payment methods and virtual
currencies
Multiple currencies
USD, EUR, GBP, CAD and more than 20 currencies support.
Accounting and Invoicing
Save time and money with automatic invoice generation and complete transactions
accounting.
Recurring and 1-Click Buy
Get full control over your customer payments with different transaction types and
methods.
Powerful reporting
Get customized reports and watch “live” stats with User Dashboard.
.
PAYMENT PLATFORM FEATURES 2
CRM / ERP integration
Feel the power of online integration with your Back office software in 24/7
business operation
Multi-language support
Increase customer satisfaction with user's native language interface.
Fault tolerance
Get zero-level downtime with load balancing and distributed servers scheme.
User roles and permissions
Control your staff access to sensitive cardholder data and allowed operations
execution.
PAYMENT PLATFORM FEATURES 3
PCI DSS ready
Get easy PCI DSS certification with secure cardholder data storage.
Anti-fraud control
Use scoring systems integration and customizable rules to minimize your risks.
Secure transactions
Fully integrated 3-D Secure protocol support and 100% HTTPS coverage
MERCHANT ONBOARDING
Merchant Application Processing
Merchant Profiling
Creating Acquiring Contracts
Merchant Account Setup
PAYMENT PLATFORM ANALYTICS
Analytics application intercepts in real-time every incoming transaction to the
gateway and then starts the analysis pipeline. Inside the analysis pipeline users
may set up the following metrics and rules:
Fraud trends.
Detection of significant variables that may represent an unusual behavioral
pattern.
Create variables accumulators for later usage against platform parameters.
Set transaction performance and report unusual time responses.
Execute rules to retrieve or feed business metrics
PAYMENT ANALYTICS BENEFITS
Improvement in productivity and efficiency of platform configuration.
Improvement of the effectiveness of configuration changes.
Significant simplification of problem solving isolating transactions and detecting
unusual transaction behavior.
Improvement of resource usage getting real time performance variables.
Rich reports and metrics for business performance improvement.
PAYMENT PLATFORM SECURITY
SSL support for client and server
Authorization phase and transaction is safe-guarded by the SSL server certificate with at least
128-bit encryption supported. Certificates are issued by one of the global trusted SSL
certificate issuers.
Data encryption using HSM
If hardware security model is used, database encryption is provided for secure cardholder and
other customer's sensitive data.
Sophisticated cryptographic support
Complies with all payments industry cryptographic standards, including full support for remote key
delivery.
Sophisticated cryptographic support
Excessive and erroneous service usage can trigger a defensive mechanism, included to safe-
guard the back-end systems for faulty use from the merchant side.
PAYMENT PLATFORM INTEGRATION
Using the benefits of the Service Oriented Architecture and design, the platform offers
several integration points.
The platform is fully based on standards, thus it does not introduce proprietary black
boxes that could create a vendor dependency.
ISO 8583 in all its variants and dialects is supported as an integration protocol as
well as IFX over TCP/IP.
HTTP/POST, Web Services (WSDL, SOAP), XML/RPC.
Complex integration with mainframe queue and messaging systems.
JMS (Java Message Queue).
JCA custom connectors.
INTELLIGENT MULTI-ROUTING
Dynamic Currency Conversion
POS Management
Key Management
Multi-language statements
Multi-language Interface
Multi-currency accounting
REAL-TIME RISK MANAGEMENT
Risk management by individual client, client segment, product, service, channel
On-line risk monitoring and fraud prevention
Real-time customer-level liability and risk control
Real-time service terms validation
Stop list processing
Suspicious transaction reports
Sophisticated terminal-level velocity controls
PIN-based transactions support
EMV VSDC, M/Chip 4 Pre-authorized
POS key management, dynamic key change
MAC (Message Authentication Code)
Secure ISO8583 (Line encryption)
CARD ISSUANCE
Magnetic Cards
EMV
Cards
Contactless Cards
Preparing data and transferring it to the personalization system for issuing
magnetic and EMV smart cards
Reissuing expired, lost and stolen cards with a current or a new PIN
Magnetic and smart card personalization system interface
CARD TYPES ACCEPTED
Credit Card Debit Card Prepaid Card Gift Card Local Card Loyalty Card
Visa X X X X X
MasterCard X X X X X
Amex X X
Diners Club X X
CUP X X
JCB X X
Local Debit X X
Local Credit X X
PAYMENT CARD SCHEMES
AMEX
Visa (in process)
MasterCard (in process)
PAYMENT PLATFORM INTERFACES
Host-to-Host
Hosted Payment
iFrame Payment
Domestic Switch
AMEX
Visa (in process)
MasterCard (in process)
CHANNEL MANAGEMENT
POS Management
mPOS Management
eWallet & Mobile Wallet
SMS
M-POS MANAGEMENT
Real-time POS activity monitoring
Sophisticated terminal-level acceptance policy definition
Terminal-level reconciliation and accounting
Remote configuration and stop-list download (vendor-specific)
LOYALTY PROGRAM
Loyalty Campaigns
Discount Program
Bonus Program
Miles Program
Gift Cards
Activate Loyalty Programs
Automatic cardholder enrolment
Self-enrolment through multiple delivery channels
LOYALTY PROGRAM 2
Customer Behavior Analysis
Purchase Amount
Turnover
Average Amount
Date / Time of Transaction
Product and Service Type
Payment History
Frequency of Purchase
Transaction Location
Delivery channel
Merchant Details
LOYALTY PROGRAM 3
Benefits for Merchants
Join to merchant club
Collect customer behavior data
Receive data for program efficiency analysis
Upgrade to better terms and conditions
LOYALTY PROGRAM 4
Benefits for Cardholders
Selection of various loyalty programs
Flexible reward and redemption schemes
Club memberships and personalized service
Choice of enrolment and information delivery channels