iPAY Documentation and description

iPAYServlet functions and features summary
iPAYServlet system requirements
iPAYServlet as e-commerce payment gateway
iPAYServlet as POS replacement

iPayServlet is a product designed especially for payment processor/gateway, bank or enterprise.

Summary of iPAYServlet's features
- Authorization and reversal request using https protocol over internet or in LAN (WEB-POS)
- Forward authorization request to acquirer network through tcp/ip ISO8583 network
- Browse reports of your transactions in detailed or summary form
- Change your password
- ISO8583 version 1997 and 1993 authorization protocols, can be customized for any ISO8583 based network (incl BASE 24)
- Periodic transfer of transaction file to acquirer/processor system
- Simple (real time) fraud, dos, spammer transaction filter for e-commerce function
- Customizable screen layouts/design based on html templates
- Processing e-commerce order payments from e-commerce site and confirming payment to e-commerce site
New features since version 4:
- multilanguage support, templates can be virtually in any major language, by default supported English, Estonian
- RSA and DSA PKI signatures for e-commerce interface (1024 bit keys) from merchant to processor, from processor to merchant
- Open interfaces for custom key storage implementation.
- Improved performance and caching.
New features since version 5.2.x:
- many updates related to ISO-8583 interface
- internal refactoring, preformance improvements
- ThreeDSecure 1.0.1/1.0.2 (Merchant plugin) support for secure e-com transactions
- MasterCard SecureCode

iPAYServlet has been successfully tested and deployed with following technologies:
tomcat 4.x, Apache web server and MySQL (Oracle, Postgres) as SQL server.

iPAYServlet system requirements
- Java jdk 1.3, 1.4 or 1.5
- Java Servlet technology compatible application server - Apache tomcat, Sun J2EE server, iPlanet, BEA WebLogic etc.
- JDBC supported RDBM such as Oracle, MySQL, MSSQL, PostgresSQL, etc.
- Operating system any supporting Java, such as Linux, Solaris, Windows, OS-X or HP-UX.

---

iPAYServlet as e-commerce payment gateway
iPAYSservlet can be used as e-commerce payment gateway server for e-shops and other e-services where credit card payments needs to be processed. iPAYServlet works on principle that cardholder will enter his card number and other card related data. Then the authorization request with given information will performed through acquirer system in local bank or VISA or MasterCard network. In case of positive result the system saves a new transaction record and user will be informed about successful transaction and merchant system will be sent digitally signed confirmation.
The real iPAY advantage is high security that it supports that credit card payment data processing will be done only at processor or bank premises and therefore eliminates merchant e-shop system risk to be vulnerable to hackers seeking credit card data. Credit card data is directly submitted by customer to secure system at bank or processor premises, merchant will send digitally the order information to iPAY that will enable internet customer to submit the order payment for processing. In return iPAY will give digitally signed payment receipt that will confirm the order payment to merchant system. This also eliminates possible merchant abuse of customer credit card information or merchant fraud because merchant does not have access credit card data is unable to use it for transaction without customer interaction. Digital signatures can be calculated and verified using standard DSA or RSA asymmetric algorithms.
Estonian Union Bank and Estonian Bank Card Center have been licensed to use iPAYServlet as e-commerce service provider.

iPAYServlet as POS replacement (WEB-POS)
iPAYServlet can also be used as replacement of POS device everywhere where is present a PC or network terminal with internet connection, magnetic card reader and web browser. It is recommended to have a permanent network connection of ISDN for quick operation. Only if you have very few transaction you may use dial-up. With modem dial-up the whole process can take up to 1..2 minutes depending of connection speed of your modem. In case of permanent connection normal authorization processing will delay from 5 to 15 seconds. The most convenient way to use WEB-POS is do it through service provider (acquirer or processor) who has installed iPAYServlet and related databases. The first WEB-POS service provider in Estonia is Pankade Kaardikeskus (Card Centre of Banks). To use WEB-POS at service provider first you need to make a contract and then you may enter to service provider WEB-POS web site and enter username and password to login. After login you can start easily to make authorizations, reversals and check status and summary of your transactions.


iPAYServlet can also be used in personal system but in this case you need to install a servlet engine and an SQL database (Oracle, MS-SQL, PostgreSQL, MYSQL or other JDBC enabled SQL server). You will also need to have a connection to acquirer system via TCP/IP network.

In both cases you will save lot of money so you don’t need to buy expensive and dummy POS terminal device and you have more features and better quality of service.



iPAYServlet screen shots
iPAYServlet login


iPAYServlet menu of services and authorization form (enter card number or swipe card)


iPAYServlet authorization wait page while iPAYServlet is processing the authorization


iPAYServlet transaction receipt of completed transaction (ready to print)


iPAYServlet transaction reporting options


iPAYServlet transaction detail review from report