Banesto Easy SET Project

1
BanestoEasy SET Project
6th of July, 2,000 víspera de San Fermín
Julián Inza jinza_at_banesto.es Technological
Strategy Director http//www.banesto.es
2
Agenda

• Banesto early involvement in SET
• Some criticism to SET
• SET trends
• SET flavours (Classic, MIA, Easy)
• Easy SET project standard and alternate
  hierarchies
• Payment scenarios
• Banesto Virtual POS and SET in VPOS
• Wath EasySET working for you
• Action plan
• Fee arrangement proposal
• EasySET portal www.easy-set.org

3
Early involvement in SET
4
SET Criticism

• SET is complex
• Wallets usually weights 4-6 Mb
• Users need to install software in their PC
• Certificates are hard to get and take some time
• Versions are not easily maintained
• SET infrastructure is expensive
• Interoperability is not guaranteed
• Issuer banks dont support SET

5
SET Trends

• SET can be easy (in fact it is easier to use than
  SSL, once you have the certificate)
• Light Wallets and Plug-ins for Server Wallets
  weight under 600Kb
• Users still need to install software in their PC,
  but this include additional features
• You should get your Certificate in a 1-step
  process
• Versions should be updated transparently
• SET infrastructure is expensive ( but for some
  projects you can use Easy SET alternate root)
• Interoperability is not guaranteed
• Issuer banks dont support SET

6
Classic SET
7
MIA SET
8
Easy SET

Safelayer Wallet (500k)
Issuing Bank
Card Clearing Network
Catalog selection and shopping carrt
SET Payment
CA hosted by
Classic Authorisation and Settlement transaction
Merchant Storefront
Payment Server
SET transaction
Payment Server and Payment Gateway hosted by
9
SET Hierarchy
Hosted by
10
Alternate SET Hierarchy
11
Classic B2C payment scenario
Linear B2C payment scenario
Catalog browsing
Auth request
Secure form
Card is stored in merchant DB
12
Spanish B2C payment scenario
Triangular B2C payment scenario
Catalog browsing
Payment triangle
Secure form
Internal secure communication
Gateway
13
Spanish SET payment scenario
Triangular B2C payment scenario allows
transparentSET deployment in the merchant side
Catalog browsing
Secure form
Internal secure communication
Wallet allows SET payment with or without
certificates
SET Gateway
14
Banesto SET payment scenario
Easy SET is a brand in the merchant side and a
special RA-wallet communication enhacement to
allow easy certificate download
Catalog browsing
Secure form
Internal secure communication
Easy SET Wallet allows easy certificate download
SET Gateway
Payment Server
15
SET Facil - Easy SET

• 1,500 sites SET enabled by end Y2K (most of them
  at http//www.escaparate.com)
• 500 Kb Wallet (Alternate SET root available)
• Merchant can be unaware they are SET enabled
• 50,000 potential cardholders with SET access
• 1-step certificate download
• Easy SET Wallet allows remote transparent upgrade
• Easy SET Wallet will include ECML extensions to
  allow automatic form filling (Name, address,...)
• Merchant benefits lower fees, no chargebacks
• Cardholder benefit better security perception

16
Banesto Easy SET Registration Scenario
The bank shows card list to the user in an
authenticated internet banking system. User Click
on one of then and get inmediatelly the
certificate
Card selection in Banesto Internet banking service
Wake up message redirection
Internal secure communication with card data
Extended wake up message
Easy SET Wallet allows easy certificate download
Extended wake-up message includes PAN card
number, expiration date and one-time password.
The wallet doesnt need to ask known data to the
user and proceeds according to standard SET
registration process
CA hosted by
17
SET Registration in the Internet Banking system
18
Choose the card, click and you are done
Several cards
19
Where to buy www.escaparate.com
20
Choose the shop (www.bookonhand.com)
21
Standard SSL form at Banesto
Click to enterSET Portal(www.easy-set.org) -
get info - download walet - get certificate
Download the wallet
You can choose either SET payment,eitherSSL
payment
22
SET form at Banesto
When you click on the button you wake up the Easy
SET wallet
23
Wallet wakes up
Several users can share the wallet on the same
computer
24
Whatch everything flowing
Choose the card with which you want to pay
25
SET End of transaction
26
Action Plan

• 300 merchants by summer 2000
• 1,500 merchants by end 2000
• 50,000 potential cardholders by summer 2000
• Easy SET downloadable wallet for everybody
• Banesto Merchants could allow SET initiated
  transaction without cardholder certificate
  (Wallet mandatory)
• SET Portal www.easy-set.org (EasySET demo inside)

27
Fee arrangement proposal

• SET enabled merchants should benefit from SET
  fees and no-chargeback even for SSL transactions
• SSL transactions should not pay fee to issuer
• SSL-only merchants should pay the higher fees and
  suffer chargebacks

28
More Info about Easy SET

• You can get the wallet and try Easy SET in our
  EasySET Portal
• The demo allows you to get the Tiger Card and
  purchase some goods (sorry, it is a demo and the
  goods will not be delivered)

• http//www.easy-set.org