Online Authorisation
From Wikipedia, the free encyclopedia
Online Authorization (or OLA) is a system used to verify a transaction on a payment card (e.g. credit card). The term 'on-line' refers to the real-time nature of the verification. In other words, if the account is overdrawn, in most cases, the transaction will be refused.
OLA is already common place for credit card networks such as VISA or Mastercard and is now being implemented in others (such as fuel cards).
During on-line аuthorisation:
- PIN encrypted by ATM|POS PINpad secure module (HSM) and sent to an issuer bank.
- Card cryptogram sent to an issuer bank (Smart card, EMV).
- An issuer bank verify the PIN, check card cryptogram.
- An issuer bank make finance verification (on-time limit, credit limit, ...)
- An issuer bank send OK or !OK (+optinal command list for EMV card).
(The recrypt PIN block process do't included in list.)
The set of verification in an issuer bank depend on card type, paymen system requests and features of issuer bank processing system.
