UNIT II E Payment System
UNIT II E Payment System
E-payment System
Models and Methods of E-payment System:
E-commerce sites use electronic payment, where electronic payment refers to paperless monetary
transactions. Electronic payment has revolutionized the business processing by reducing the
paperwork, transaction costs, and labor cost. Being user friendly and less time-consuming than
manual processing, it helps business organization to expand its market reach/expansion. Listed
below are some of the modes of electronic payments −
Credit Card
Debit Card
Smart Card
E-Money
Electronic Fund Transfer (EFT)
Credit Card
Payment using credit card is one of most common mode of electronic payment. Credit card is
small plastic card with a unique number attached with an account. It has also a magnetic strip
embedded in it which is used to read credit card via card readers. When a customer purchases a
product via credit card, credit card issuer bank pays on behalf of the customer and customer has a
certain time period after which he/she can pay the credit card bill. It is usually credit card
monthly payment cycle. Following are the actors in the credit card system.
The card holder − Customer
The merchant − seller of product who can accept credit card payments.
The card issuer bank − card holder's bank
The acquirer bank − the merchant's bank
The card brand − for example , visa or Mastercard.
Credit Card Payment Proces
Step Description
Step 1 Bank issues and activates a credit card to the customer on his/her request.
Step 2 The customer presents the credit card information to the merchant site or
to the merchant from whom he/she wants to purchase a product/service.
Step 3 Merchant validates the customer's identity by asking for approval from the
card brand company.
Step 4 Card brand company authenticates the credit card and pays the transaction
by credit. Merchant keeps the sales slip.
Step 5 Merchant submits the sales slip to acquirer banks and gets the service
charges paid to him/her.
Step 6 Acquirer bank requests the card brand company to clear the credit amount
and gets the payment.
Step 6 Now the card brand company asks to clear the amount from the issuer
bank and the amount gets transferred to the card brand company.
Debit Card
Debit card, like credit card, is a small plastic card with a unique number mapped with the
bank account number. It is required to have a bank account before getting a debit card from the
bank. The major difference between a debit card and a credit card is that in case of payment
through debit card, the amount gets deducted from the card's bank account immediately and there
should be sufficient balance in the bank account for the transaction to get completed; whereas in
case of a credit card transaction, there is no such compulsion.
Smart Card
Smart card is again similar to a credit card or a debit card in appearance, but it has a small
microprocessor chip embedded in it. It has the capacity to store a customer’s work-related and/or
personal information. Smart cards are also used to store money and the amount gets deducted
after every transaction.
E-Money
E-Money transactions refer to situation where payment is done over the network and the
amount gets transferred from one financial body to another financial body without any
involvement of a middleman. E-money transactions are faster, convenient, and saves a lot of
time.
Electronic Fund Transfer
It is a very popular electronic payment method to transfer money from one bank account
to another bank account. Accounts can be in the same bank or different banks. Fund transfer can
be done using ATM (Automated Teller Machine) or using a computer.
Nowadays, internet-based EFT is getting popular. In this case, a customer uses the website
provided by the bank, logs in to the bank's website and registers another bank account. He/she
then places a request to transfer certain amount to that account. Customer's bank transfers the
amount to other account if it is in the same bank, otherwise the transfer request is forwarded to
an ACH (Automated Clearing House) to transfer the amount to other account and the amount is
deducted from the customer's account. Once the amount is transferred to other account, the
customer is notified of the fund transfer by the bank.
*****************
Digital Signatures
A digital signature is a specific type of e-signature that complies with the strictest legal
regulations and provides the highest level of assurance of a signer’s identity
Digital signatures are like electronic “fingerprints.” In the form of a coded message, the digital
signature securely associates a signer with a document in a recorded transaction. Digital
signatures use a standard, accepted format, called Public Key Infrastructure (PKI), to provide the
highest levels of security and universal acceptance.
Components of the Digital Signature:
Name
The name of the individual is the first and foremost thing that a digital signature includes.
Anyone who is using the signature or authorizing a digital document for distribution or access
must have a name in the signature. It reduces any chances of fraud that may be caused by another
person sharing the same name.
Personal Information
Apart from the full name of the user, it is must to have contact details and email address also
mentioned in the digital signature. It helps in easy locating of the person.
Public Key
Another important element of a digital signature is a public key. It is unique to each digital
signature generated or issued. This is a key used for encryption of the document being
authorized. It is essential for the verification process. The expiry date of the digital signature also
determined by its public key. It is also useful when there is a need to reset the signature.
Serial Number
It is another component that acts as a unique identifier of a digital signature. It is used by a
certification authority. It also holds prime importance to ensure the viability of a digital
signature.
Process/steps for Digital Signature Certificate:
In recent times, the application for Digital Signature Certificate (DSC) has been completely
digitized. Thereby, removing any hard copy flow of documents like signing of application form,
self attestation of documents etc. This has resulted in faster processing of application. The new
process of paperless DSC is explained below in detail.
Paperless DSC:
Under this method the manual form filling can be avoided and the complete process is online for
ease of the applicant. Various methods under Paperless DSC are covered below. The Aadhar
based DSC is the fastest process for getting a new DSC.
Aadhar-based e-KYC Verification DSC
Aadhaar based Paperless DSC is an easy and fastest way to make DSC. The whole process of
Paperless DSC will save your time, money, efforts and it is totally authenticated. Aadhaar
Paperless DSC is based on "Aadhaar Paperless Offline e-KYC".
PAN-based e-KYC Verification DSC
By opting for Paperless PAN-based E-KYC DSC, the applicant is able to significantly reduce
costs. The greatest advantage of this Pan-based E-KYC is that one can apply for this type of DSC
anytime or anywhere,
STEP 1: Log on and select your type of entity:
Log on to the website of a Certifying Authority licensed to issue Digital Certificates in India.
Having accessed the page, you will be guided to the Digital Certification Services’ section. Now
under the ‘Digital Certification Services’ section, click on the type of entity for which you want
to obtain the DSC:’ individual or organization’, etc.
In case you are applying for an individual DSC, click on ‘individual’. A new tab containing the
DSC Registration Form will appear. Download the DSC Registration Form on your PC.
STEP 2: Fill the necessary details
Once you have downloaded the form, fill in all the necessary details as required in the form:
Class of the DSC.
Validity.
Type: Only Sign or Sign & Encrypt.
Applicant Name & Contact Details.
Residential Address.
GST Number & Identity Details of Proof Documents.
Declaration.
Document as proof of identity.
Document as proof of address.
Attestation Officer.
Payment Details.
On filling up all the necessary details you must affix your recent photograph and put your
signature under the declaration. Check thoroughly for completion of the form. Take a print of the
completed form and preserve it.
STEP 3: Proof of identity and address
The supporting document provided as proof of identity and address must be attested by an
attesting officer. Ensure the sign and seal of the attesting officer is visibly clear on the supporting
proof documents.
STEP 4: Payment for DSC
A demand draft or cheque must be obtained towards payment for application of DSC in the
name of the Local Registration Authority where you are going to submit your application for
verification. You can find the details of the Local Registration Authority according to your city
of residence by searching for a Certifying Authority licensed to issue Digital Certificates online.
STEP 5: Post the documents required
Enclose the following in an envelope:
DSC Registration Form duly completed -Supporting document for Proof of Identity and proof of
address attested by the attesting officer.
Demand Draft / Cheque for payment.
Address the enclosed envelope to the Local Registration Authority (LRA) and post it to the
designated address of the LRA for further processing.
On completion of the above-mentioned steps by filling in the DSC Form and providing
necessary documents and payment, you have successfully completed the application process for
your Digital Signature Certificate.
********************
Working of Digital Signature:
How does a digital signature work?
The working of the digital signature is based on the combined functionality of both public and
private keys. The functionality of a digital signature is only a cryptography that forms the basis
of this system. The pairing of public or private keys is used to encrypt or decrypt a document
while sending it to a receiver to verify the signature. The private key has been kept with the
owner of the document and is confidential. On the other hand, public keys shared freely.
Every document has a unique hash and thus a unique signature. It is being done to ensure
that the document is unique to the owner and no one else can tamper, reproduce or make
duplicate copies of the document or the signature.
Digital signatures, like handwritten signatures, are unique to each signer. Digital signature
solution providers, such as DocuSign, follow a specific protocol, called PKI. PKI requires the
provider to use a mathematical algorithm to generate two long numbers, called keys. One key is
public, and one key is private.
When a signer electronically signs a document, the signature is created using the signer’s
private key, which is always securely kept by the signer. The signature is also marked with the
time that the document was signed. If the document changes after signing, the digital signature is
invalidated.
Legal position of Digital Signatures:
Which factors make e-signatures valid in India?
Here are the 5 criteria that e-signatures must satisfy to be valid and reliable, as per the
IT Act:
The signature creation data or the authentication data are, within the context in which
they are used, linked to the signatory or, as the case may be, the authenticator and to no
other person;
The signature creation data or the authentication data were, at the time of signing, under
the control of the signatory or, as the case may be, the authenticator and of no other
person;
Any alteration to the electronic signature made after affixing such signature is detectable;
Any alteration to the information made after its authentication by electronic signature is
detectable; and
It is issued by a Certifying Authority based on e-authentication; particulars specified in
Form C of Schedule IV of the Information Technology (Certifying Authorities) Rules,
2000 and as recognized by the Controller of Certifying Authorities (CCA) appointed
under the IT Act.
If each of the reliability conditions is satisfied, then there is a legal presumption in favor
of the validity of any document signed using an electronic signature.
*******************
Payment Gateways
A payment gateway is what keeps the payments ecosystem rolling smoothly, as it enables online
payments for consumers and businesses. If you’re an online merchant, you don’t need to be a
payment gateway expert, but it’s worth understanding the basics of how an online payment flows
from your customer to your bank account.
******************
You might want to send an EFT payment to someone. Or, you may give customers the option to
pay you via an electronic funds transfer.
To make an EFT payment, the sender must know the recipient’s bank account information. If
you’re making an EFT payment, you must authorize the funds transfer. Then, the money is taken
from your account and deposited into the recipient’s account.
There might be a fee for some EFT transactions. For example, you might have to pay for certain
ATM transactions. However, other transactions might be free.
Risks involved in E-payments:
Fraud: Fraud can be defined as the undesired activities taking place in an operational system.
Electronic payment systems are not immune to the risk of fraud. The system uses a
particularly vulnerable protocol to establish the identity of the person authorizing a payment.
Passwords and security questions aren’t foolproof in determining the identity of a person. So
long as the password and the answers to the security questions are correct, the system doesn’t
care who’s on the other side. If someone gains access to your password or the answers to your
security question, they will have gained access to your money and can steal it from you.
Tax Evasion: Businesses are required by law to provide the government with records of their
financial transactions so that their tax compliance can be checked. E-payment, however, can
thwart tax collection efforts. Until a company discloses the numerous e-payments it has made or
received during the tax period, the government will not know the truth that may lead to tax
evasion.
Payment Conflicts: Payment problems also occur because payments are not made manually, but
through an automated system that can cause errors. This is particularly important when payment
is made on a daily basis to several recipients. For example, if you do not review your pay slip at
the end of will pay period, you could end up in a dispute due to such technical issues or
anomalies.
Impulse Buying: E-payment systems promote pulse transactions, particularly online, and
consumers are likely to make a decision to buy an item they find on sale online, as it will cost
only a click to buy it via a credit card. The buying of impulses leads to disorganized budgets and
is one of the drawbacks of e-payment systems.
Dishonest providers and Merchants: Those who exploit and sell consumers 'personal data in
order to be used by advertisers in ads often use this data for fraud purposes.