Credit Card Processing

Credit Card Processing

Overview ... 1

New Feature Implementation ... 1

Specific Data and Image Encryption and Redaction ... 1

Using the Command Buttons ... 3

Implementation of the Credit Card Workflow... 4

Specialized Captiva Credit Card Form ... 4

Setting up the System for the Credit Card module... 4

Configuration Setup ... 5 Site Setup ... 6 Operator Setup ... 7 Bank Setup ... 8 Lockbox Setup ... 9 Form Setup ... 10

Affected Modules ... 24

Item Processing Modules window... 24

Registration... 25

Image Capture ... 25

Item Scheduler... 25

Queue Status ... 26

Delete Lockbox ... 27

Data Entry Send and Receive... 27

Research... 27

Report Modules... 27

Batch Dump and Lockbox Archive ... 28

Credit Card Processing

Overview

This document is intended to outline the implementation of the RemitTrac Credit Card Module. The following points overview the basic methods that are used in processing credit cards:

• Capture of the Credit Card data from a document through the RemitTrac Item Processing Module

• Entering specific data through Data Entry as part of the Item Processing Workflow

• Usage of encryption and redaction of data to meet customer security requirements

The input of the credit card information is implemented through two modules in the RemitTrac Item Processing Workflow that will capture specific types of credit card data. All other credit card information will be retrieved through the use of the Captiva Data Entry module to validate the information and return proper identification for the credit card data.

New Feature Implementation

The processing of the credit card information requires the implementation of new features in the RemitTrac system to handle the data security requirements. These features include specific field encryption and specific data field and image redaction, which based on the individual field specifications. As of this release, these features can only be used for credit card processing, but in the future may also be used in other areas for general security.

Specific Data and Image Encryption and Redaction

The usage of encryption and redaction of data has been implemented in order to meet certain PCI security standards. While RemitTrac has been revised to begin this security compliancy, the system can never be fully compliant without the site’s attention to their own confidentiality needs. The site can become PCI compliant by following a workflow that divides the work amongst different operators, thus ensuring that no one operator can obtain confidential information.

The encryption process ensures that the keyed data is secured within the system through a mask. Because of this mask, only operators that have a high access level can decrypt the data. For information on the encryption access levels for an operator, see “Operator Setup” on page 7.

The redaction process ensures that the images containing confidential fields will be partially concealed from each operator, thus ensuring that no one operator is able to gain full access to confidential information on an image. The item processing form setup in the Lockbox Setup enables an operator to specify the redaction format for the image and data field. The redaction format that an operator can define includes type, location, and redaction mask of the field. For information on how to redact this data, see “Form Setup” on page 10.

Using the Command Buttons

Table 1 summarizes the commands that can be used for the Credit Card Processing and Manual Redaction modules.

Table 1. Commands on the Credit Card Processing and Manual Redaction Windows

Command Description

F1:Front/Rear Toggles between the front and rear image for the item displayed in the Image Viewer.

Show Rear/Front Used in the Credit Card module only. Allows the operator to view the Rear of the document without moving the Redaction mask to the rear image.

F2: Show Remit Function not applicable in these modules.

F3:Size Adjusts the size of the image displayed in the Image Viewer. F4:Change Function not applicable in these modules.

F5:Flip Flips an image that is displayed upside down in the Image Viewer.

Rotate Rotates an image 90 degrees in a clockwise direction.

F6:Invert Reverses the colors of the item displayed in the Image Viewer. Not available if the image is displayed in color or grayscale. F7:Prior Function not applicable in these modules.

F8:Next Displays the next item to be processed.

F9:Reject Rejects the item and removes the item from the workflow process.

ESC Amounts Function not applicable in these modules. Alt + A: Alternate

Images

Feature will be available in a future release.

F10:Close Closes the window and returns to the Item Processing Modules Window.

Implementation of the Credit Card Workflow

The software will use a new form type to provide the capability to enter credit card data through the Item Processing module. This module will use the newly added Item Processing Form in the Lockbox Setup to process Credit Card data. The operator will identify that credit card data needs to be captured through the Registration module, allowing the RemitTrac system to enforce some rules of processing.

After being captured, the batch containing the credit card information will be sent through the following workflow process:

• Re-Organize • Repair Processes • Credit Card Module • Redaction Module • General Item Processes • Data Entry

Specialized Captiva Credit Card Form

The verification of credit card data is enabled through the Data Entry Module (Captiva), which occurs after the General Item Processes have been completed. This requires that a specific form is implemented to process the credit card information. This form will allow for the possibility of field entry and/or field verification.

Setting up the System for the Credit Card module

In order for the Credit Card module to work correctly, the following modules have received changes and will require certain options to be set up. These changes affect the permission, setup, evaluation, processing, and reporting of the new data.

Configuration Setup

The Configuration Setup has a new feature to allow the site to import a set of flags for processing.

1. Select Credit Card from the Purchasable Software area. 2. Select Redaction from the Purchasable Software area.

Figure 3. Enabling the Credit Card options in Configuration Setup

Credit Card and Redaction Options

Site Setup

The Site Setup contains a new option to allow the site to perform the Credit Card processes. The Site Setup also contains an area of new options called the Encryption Options, but these features will not available until a feature release. At this time, all options in the Encryption Options area are being performed automatically.

• Select Enable Credit Card from the Options tab.

Figure 4. Enabling the Credit Card option in Site Setup

Enable Credit Card Option

Operator Setup

The operator setup contains new settings to provide an operator with the required security privileges to perform specified Encryption and Redaction processes. Without these privileges, the functions will not be enabled for the operator.

1. To enable an operator to view an encrypted image, select Encryption from the Security area on the General tab.

2. To enable an operator to view a redacted image, select Redaction from the Security area on the General tab.

NOTE: Selecting the Encryption and Redaction images from the General tab will not enable an operator to perform credit card processes. These are view-only options.

Figure 5. Enabling the Credit Card Options in Operator Setup

3. To allow an operator to enter Credit Card information through the Credit Card module, select Credit Card from the Item Processing button on the Functions tab.

Encryption and Redaction Options

4. To allow an operator to redact an image through the Redaction module, select Redaction from the Item Processing button on the Functions tab.

Figure 6. Enabling the Operator's Access to Credit Card modules

Bank Setup

Bank Setup contains an area of new options called the Encryption Options, but these features will not available until a feature release. At this time, all options in the Encryption Options area are being performed automatically.

Credit Card and Redaction Module Options

Lockbox Setup

Lockbox Setup has an additional flag in the Archive area on the Options tab entitled “Send Original Data if redacted”. This option allows the original image to be sent to archive. This image can only be viewed if the operator has sufficient rights. If the “Send Original Data if redacted” option is not selected, only the redacted image will be

archived.

The Lockbox Setup also contains an area of new options called the Encryption Options, but these features will not available until a feature release. At this time, all options in the Encryption Options area are being performed automatically.

• To archive both the original and redacted images, select “Send original data if redacted” option from the Archive area on the Options tab.

Figure 7. Enabling Credit Card Archive Options in Lockbox Setup

Credit Card Archive Option

Form Setup

A new Item Processing Form setup is available on the Forms tab in Lockbox Setup. This form defines the type, location, and redaction mask of the redacted field.

1. Access the Item Processing tab through the Forms tab in Lockbox Setup. 2. Select Add to define a new Credit Card processing form.

Figure 8. Adding a new Credit Card Form

The Item Processing Form Setup window is displayed.

Select Add to define a new credit card form

Figure 9. Defining the Credit Card form Options

Table 2 summarizes the elements of the Credit Card form options.

Table 2. Credit Card form option elements

Element Description

Field & Image Options

Not configurable by the operator. These options are automatically selected by the system, depending on the configurations that are defined in the Document Fields tab. Credit Card

Processing Options

Options to define the credit card processing. The Provide Credit Card Info option is not configurable by the operator. This option is automatically selected by the system, depending on the configurations that are defined in the Document Fields tab. The Credit Card Data Entry option defines if the batch containing credit card information should be sent to data entry and the Authorization Required option defines if and when the credit card information needs to be verified by the customer. MICR Repair

Options

Allow the operator to enable MICR Repair, to select which fields should undergo the Repair process, and to choose when to perform MICR Repair.

Reporting Option

Gives the option of overriding the Image Print settings in Lockbox Setup and not printing the images of the Credit Card items that are using this form

Field and Image Options Credit Card Processing Options MICR Repair Options Reporting Option

3. Select the required options from the Options tab. 4. Select the Transport tab.

Figure 10. Selecting the Credit Card Transport Options

The Transport tab allows the operator to select which images that use this specific form are captured and stored in the database. If the batch is set up for this Credit Card form, the options that are selected will override any Image Capture options that have been selected on the Transport Options tab in Lockbox Setup.

Figure 11. Adding a document type

The Add Document Type window will be displayed. 9. Select the desired document type and select Save.

Figure 12. Choosing a Document Type

10.Select Add to define the fields on the selected document type. Select Add

to add a document type

Figure 13. Adding a Processing Field

The Add an Item Processing Field window is displayed. 11. Select an Item Processing Field to define and select OK.

Select Add to add a Processing field

12. Select Edit to define the item processing field.

Figure 15. Defining an Item Processing field

The Item Processing Field Setup window is displayed.

Select Edit to edit a Processing field

Figure 16. Understanding the Field Setup Window

Table 3 summarizes the fields on the Field Setup window.

Table 3. Field Setup options

Element Description

Field Num Number of the selected field. Not configurable by the operator.

Field Name Name of the selected field. Not configurable by the operator.

Table 2. Field Setup options (continued)

Element Description

Redaction Mask Defines how the field will be redacted, or “covered up”. The number of characters in the redaction mask must equal the number of characters that is defined in the length field. Select the Instructions button for more information on defining a redaction mask.

Display Mask Defines how much of the field can be displayed to the operator after being keyed. Select the Instructions button for more information on defining a display mask. If a display mask is not defined, the mask will default to the redaction mask.

Zones Area Area to define and display the redaction zones on a document.

13. Define the length of the field, the required processes, and the redaction and display masks. Refer to Figure 17 for an example of a redaction mask. The following is an example of how a redaction mask could be made.

If the field length is 5 characters long and only the last two characters could be displayed, the redaction mask field would be defined as “***XX”.

14. Select Image Editor to define the redaction zones.

Figure 17. Accessing the Image Editor

The Zone Image Editor window will be displayed. Select Image

Editor to define the redaction zones

15. Select Load Batches to display a sample document on which to define the redaction zones.

NOTE: You will need to have previously run a sample batch that contains documents on which a redaction zone can be obtained.

Figure 18. Loading Batches

The batches that meet the requirements will be displayed.

Select Load Batches

16. Select a batch.

Figure 19. Selecting a Batch

Figure 20 shows an example of a document in the Zone Image Editor, which is accessed through the Batch Selection tab.

Double-click on the batch to view…

… or choose a batch and select View Images

directly on the document, thereby automatically selecting the coordinates for the desired Zone. Multiple zones can be selected for one item.

There are two types of zones that can be defined for an item. The first type is called the Redaction Zone, which is the default zone that is used in the Manual Redaction module. The second type of zone is the Display zone, which is the zone that will be used in the Credit Card Processing module. If this zone is not defined, the Redaction zone will be used.

NOTE: The Redaction zone MUST be defined.

17. Choose which zone you would like to define. The Redaction zone type is chosen by default.

Figure 21. Choosing a Zone Type to Draw

The Change Draw Zone Type window is displayed.

Click the “…” button to select a zone type

18. Select the type of zone to define and click OK.

Figure 22. Change Draw Zone Type Window

19. Using your mouse, draw a box around the field that you would like to be redacted. If the zone is a Display zone, this field will be apparent to an operator accessing the Credit Card module during Item Processing. Working similarly to the Mark Sense module, the zone that is marked will indicate the location of the field to the keying operator. If the zone is a Redaction zone, this will be apparent to an operator accessing the Manual Redaction module during Item Processing and will assist in the redaction of the item. If there is no Display zone defined, the Redaction zone will appear in the Credit Card module.

Affected Modules

The following modules were identified as requiring changes to implement the Credit Card features. These changes affect the evaluation, processing and reporting of the new data.

Item Processing Modules window

The Item Processing Modules window contains two new options for the Credit Card Module and the Manual Redaction module in the Field Entry area. Through the Credit Card module, an operator can enter any required credit card information. Through the Redaction module, an operator can redact and cover up any required credit card information.

NOTE: Operators must have sufficient privileges to be able to view encrypted images and perform the Credit Card and Redaction processes. These privileges are enabled through the Operator Setup.

Credit Card and Redaction Modules

Registration

Registration now contains a third form to select a Credit Card job. This third form is called the Item Processing form. The Item Processing form that is chosen will affect the credit card workflow options. Data Entry occurs before encode for a Credit Card job.

Figure 26. New form in Registration

Image Capture

The software of any transport will encrypt the images as they are being captured and store the images as encrypted. These captured images can only be seen by the operator who has the ability to view and decode encrypted images.

Item Scheduler

The Item Scheduler processes data differently in order to account for Credit Card processing. The scheduler must allow for all repairs, including scanline, scanfield, and MICR, to be performed prior to credit card processing. Credit Card processing is performed after repair processing, followed by all other processes.. The credit card module allows for rejecting items, changing type, etc.

New Item Processing Form

Queue Status

The Queue Status module has two additional columns for the batches and trays that are related to credit card processing.

Figure 27. Queue / Batch Status with Credit Card and Redaction modules

An operator can also choose to display the items that have undergone Credit Card Processing and the Redaction Process in the View Options window.

Credit Card Payment and Redaction module status

Delete Lockbox

The Delete Lockbox module has been updated to manage and delete the new records and files that are created for the Item Processing forms.

Data Entry Send and Receive

A new form is required in Captiva to handle the entry and/or the validation of the credit card data. This processing of the form will be inside the RemitTrac Item Processing workflow and will not conflict with the normal Data Entry workflow for the batch. The Data Entry Send / Receive module now connects to the item scheduler to send and receive work. This work contains a special form (creditcard.frm) and will entail the custom credit card entry of data for the customer.

Research

Research has been updated to be able to show both the original image and the redacted image of an item. The original image will only be displayed if the operator has sufficient rights to view redacted information. Research Editor also possesses the ability to display and change the encrypted data, if the operator has sufficient rights.

Figure 29. Selecting to view Redacted and Encrypted Images

Report Modules

All report programs have been updated to handle the new item types in the database, if required. Selecting the Show Redacted and Show Encrypted options will allow an operator to see the secured data

Batch Dump and Lockbox Archive

The Batch Dump software and the Lockbox Archive software has the ability to provide the unencrypted data if the operator has the required security access.

Check21 Module

The Check21 module has been updated to correctly handle the encryption process. The Check21 items are encrypted during the Item Processing and then decrypted when placed into the X9.37 file.