3 - Process

Process

Initially the customer is redirected from the merchant's online store to Rapyd Web Payments Page. There, the customer inputs payment information and finalizes payment for goods or services.

Please note that if payment is unsuccessful, Rapyd will not inform the merchant.

If the payment is successful, an itemized receipt for the purchase is shown to the customer on Rapyd's Web Payment Page and the merchant is informed of the successful purchase using three methods: Rapyd calls an URL specified by the merchant, Rapyd sends an e-mail to the merchant (optional) and Merchant logs on to Rapyd's Saga and sees a list of transactions.

3.1 - Security steps

Each merchant is assigned a verification code and an identifier on registration which are used to create a digital signature. When a transaction takes place, information about the goods purchased, the price, quantity and any discounts are sent over https to the Rapyd Web Payments Page along with the digital signature, which ensures the validity of the data. It is important to make sure that users can not access the verification code (do not include it in any html page).

If the transaction is completed a call is made to a merchant URL (PaymentSuccessfulServerSideURL) to let him know. Rapyd sends additional parameters with the URL, including DigitalSignatureResponse and it is important to check the value of this parameter to guarantee the validity of the sale.

3.2 - Notification of payment

3.2.1 - Rapyd calls URL specified by merchant

Rapyd calls the value stored in PaymentSuccessfulServerSideURL, more information on that here.

Uses HTTP GET method and the URL is called as soon as authorization is granted.

3.2.1.1 - Example

Below the parameters that are automatically added to the URL by Rapyd are shown in bold while other parameters are provided by the merchant's URL. More information on these bold query values can be found here.

It is important that the value of DigitalSignatureResponse is calculated on the page that Rapyd requests and that the value is compared with the value sent by Rapyd to ensure that this is not a case of theft, i.e. an attempt to create a fraudulent sales link. More information on DigitalSignatureResponse can be found here.

http://www.netverslun.is/?
CustomerID=12345&
SalesID=123&
CardType=VISA&
CardNumberMasked=453987******4232&
Date=17.09.2012&
AuthorizationNumber=2234&
TransactionNumber=123&
SaleID={C9E5B0E5-3055-452a-A09F-D5E86C29C7CD}
ReferenceNumber=321&
DigitalSignatureResponse=fjklsdjfsdklfjsldk&
ContractNumber=12345&
ContractType=ORUGGS&
CardLoanNumber=60000-047104&
CardTypeCode=400&
SSN=1234567890
Name=Jón&
Address=Laugavegur 1&
PostalCode=101&
City=Reykjavík&
Country=Ísland&
Phone=5252000&
Email=email@email.is&
Comments=þetta er athugasemd

3.2.2 - Rapyd sends an email to merchant

An email is sent to each email address registered with Rapyd when the Rapyd Web Payments Page is set up.

Receiving this email is optional.

3.2.2.1 - Example

Greiðsla barst 2.9.2011 16:26:02
Upplýsingar:
------------------------
  Vefverslun: Fataverslunin RGB
  Heildarupphæð: 490 ISK
  Kortnúmer: ****-****-****-9999
  Heimildarnúmer: 123450
  Færslunúmer: 32918
  Samningsnúmer: 0000122
  Kortategund: VISA


Vörur:
------------------------
  Stuttermabolur, Litur: Blár, Stærð: S - 1 stk. - 490 ISK - Samtals 490 ISK
  Samtals 490 ISK


Auðkenni færslu í kerfi seljanda (tilvísunarnúmer):
------------------------
  1898772670


Upplýsingar um kaupanda
------------------------
  Kennitala: 123456-7890
  Nafn: Jón Jónsson<
  Heimilisfang: Laugavegur 77
  Póstnúmer: 101
  Staður: Reykjavík
  Land: Ísland
  Sími: 525-2000
  Netfang: jon.jonsson@jonson.is
  Athugasemdir: Athugasemd frá kaupanda

3.2.3 - Merchant logs on to Rapyd's Saga

Merchants that use Rapyd's Web Payments Page can access the new service web, Saga.

In Saga, merchants can access sale summaries and payment history. They can also make refunds and see an overview of batches and transactions.

To access the sales overview in Saga the merchant logs in, clicks 'Payment Page' and then 'Sales Overview'.

3.2.3.1 - Access to Saga

To gain access to Saga, merchants need to fill out the application form found here (https://www.valitor.is/umsoknir/thjonustuvefur/).

3.2.3.2 - Saga URL

URL to Saga: https://saga.valitor.is