Secure Online Payment

1
Secure Online Payment

• Presented by Tom Hun
• Web Developer

2
Objectives

• Convenience
• Centralization
• PCI (Payment Card Industry) Compliance
• Follow Security Practice

3
Technology Tools

• ASP.NET
• VeriSigns PayFlow Pro API (Application
  Programming Interface)
• MS SQL Database
• SSL Encryption

4
Payment Flow
Secure Payment Page
Web Form 1
Web Form 2 Confirm payment
PayFlow Pro API
5
Design

• Secure Payment

Secure Payment Page
Takes GUID as request query string and checks
against the database
GUID (uniqueidentifier type auto-generated by
default in db)
Payment DB
IP
DateTime (varchar)
Return URL (varchar)
Other Payment data
6
Design

• Web Forms

Tuition Payment Confirmation page
Tuition Payment
Takes GUID as request query string
GUID (uniqueidentifier type, null by default)
Tuition DB
IP (varchar)
DateTime (varchar)
Other Tuition Data
7
Design
Tuition Payment
Credit Card Payment Page
Redirects to Credit Card page by passing GUID
Go To Pay
GUID (auto generated)
Payment DB
IP
IP
Tuition DB
DateTime
DateTime
Return URL
Other Tuition Data
Other Payment data
8
Design
Credit Card Payment Page
Submit Credit Card Info.
PayFlow Pro API
Returns payment result
Submit Payment
9
Design
If successful, get returns URL string and
redirect here
Credit Card Payment Page
Tuition Payment Confirmation Page
If unsuccessful, display error message
Email confirmation
Check and get payment result
Update and retrieve data
Update GUID and other Data
Retrieve Data
Payment DB
Tuition DB