quick-reference guide: changes in msi cloudpm to …€¦ ·  · 2017-01-26card tokenization also...

8
MSI CloudPM v5.3: Quick-Reference: Summary of EMV Changes for MSI CloudPM September 15, 2016 | CONFIDENTIAL | Multi-Systems, Inc. 7600 N. 15 TH Street w Suite # 250 w Phoenix, AZ 85020 www.msisolutions.com Quick-Reference Guide: Changes in MSI CloudPM to Support EMV Credit Card Processing (v5.3) “EMV” Definition EMV stands for Europay, MasterCard, and Visa, the three companies that originally created the standard. The standard is now managed by EMVCo, a consortium with control split equally among Visa, Mastercard, JCB, American Express, China UnionPay, and Discover. The EMV standard covers the processing of credit and debit card payments using a card that contains a microprocessor chip. Chip and PIN Definition These transactions are often referred to as "Chip and PIN" because PIN entry is required to verify the customer is the genuine cardholder. This is a simplification since the EMV specifications include other cardholder verification methods as well, and do not necessarily require the manual entry of a PIN number. EMV vs. Magnetic Stripe Transactions Unlike magnetic stripe transactions, where typically only the card's track 2 data containing the card number and expiry date is processed, every chip card transaction contains numerous items of information to be exchanged between the card, the terminal and the acquiring bank or Processor’s host. This requires the EMV card reader device / terminal to perform many stages of complex processing, including cryptographic authentication, to successfully complete a transaction. CloudPM Changes Required for EMV Features EMV activation is managed and performed by MSI Solutions’ Cloud Services Team. EMV can not be activated by a hotel user. Device configuration, however, is managed in CloudPM GM Functions. Summary of CloudPM UI changes: Configuration: o New Device Type – EMV-Enabled Credit Card Reader may now be added in Devices in [GM Functions à Property Settings à Interfaces à Devices] o A Lane ID will be defined in Device to Station assignments

Upload: lythu

Post on 31-Mar-2018

214 views

Category:

Documents


1 download

TRANSCRIPT

MSICloudPMv5.3:Quick-Reference:

SummaryofEMVChangesforMSICloudPM

September15,2016

|CONFIDENTIAL|Multi-Systems,Inc.

7600N.15THStreetwSuite#250wPhoenix,AZ85020www.msisolutions.com

Quick-ReferenceGuide:ChangesinMSICloudPMto

SupportEMVCreditCardProcessing(v5.3)

“EMV”Definition

EMVstandsforEuropay,MasterCard,andVisa,thethreecompaniesthatoriginallycreatedthestandard.ThestandardisnowmanagedbyEMVCo,aconsortiumwithcontrolsplitequallyamongVisa,Mastercard,JCB,AmericanExpress,ChinaUnionPay,andDiscover.

TheEMVstandardcoverstheprocessingofcreditanddebitcardpaymentsusingacardthatcontainsamicroprocessorchip.ChipandPINDefinition

Thesetransactionsareoftenreferredtoas"ChipandPIN"becausePINentryisrequiredtoverifythecustomeristhegenuinecardholder.ThisisasimplificationsincetheEMVspecificationsincludeothercardholderverificationmethodsaswell,anddonotnecessarilyrequirethemanualentryofaPINnumber.EMVvs.MagneticStripeTransactions

Unlikemagneticstripetransactions,wheretypicallyonlythecard'strack2datacontainingthecardnumberandexpirydateisprocessed,everychipcardtransactioncontainsnumerousitemsofinformationtobeexchangedbetweenthecard,theterminalandtheacquiringbankorProcessor’shost.ThisrequirestheEMVcardreaderdevice/terminaltoperformmanystagesofcomplexprocessing,includingcryptographicauthentication,tosuccessfullycompleteatransaction.

CloudPMChangesRequiredforEMVFeatures

EMVactivationismanagedandperformedbyMSISolutions’CloudServicesTeam.EMVcannotbeactivatedbyahoteluser.Deviceconfiguration,however,ismanagedinCloudPMGMFunctions.

SummaryofCloudPMUIchanges:

Configuration:

o NewDeviceType–EMV-EnabledCreditCardReadermaynowbeaddedinDevicesin[GMFunctionsàPropertySettingsàInterfacesàDevices]

o ALaneIDwillbedefinedinDevicetoStationassignments

MSICloudPMv5.3:Quick-Reference:

SummaryofEMVChangesforMSICloudPM

September15,2016

|CONFIDENTIAL|Multi-Systems,Inc.

7600N.15THStreetwSuite#250wPhoenix,AZ85020www.msisolutions.com

o Anindicatorof“guestfacing”or“agentfacing”device/stationconfigurationwillbeaddedtotheDevicetoStationassignmentsgrid

AuthorizationFormChanges:

o RemoveCC#,Expiry,andrelatedCCfieldso Adjustworkflowforauthorizationwithoutexistingtokeno AdjustworkflowforCCcapture/TokenduringaVoiceAuthorizationo AdjustworkflowforSavingaCCtokenwithoutauthorizationo ExistingfunctionscontinuetoallowforchoiceofusingexistingTokenor

Swipe/Chip,withadjustmentsnoted

MSICloudPMv5.3:Quick-Reference:SummaryofEMVChangesforMSICloudPM

September15,2016

|CONFIDENTIAL|Multi-Systems,Inc.

7600N.15THStreetwSuite#250wPhoenix,AZ85020www.msisolutions.com

EMVDeviceConfigurationinMSICloudPM

MSICloudPMv5.3:Quick-Reference:SummaryofEMVChangesforMSICloudPM

September15,2016

|CONFIDENTIAL|Multi-Systems,Inc.

7600N.15THStreetwSuite#250wPhoenix,AZ85020www.msisolutions.com

AuthorizationProcess:AuthorizationwithNewCreditCard(noexistingtoken)

MSICloudPMv5.3:Quick-Reference:SummaryofEMVChangesforMSICloudPM

September15,2016

|CONFIDENTIAL|Multi-Systems,Inc.

7600N.15THStreetwSuite#250wPhoenix,AZ85020www.msisolutions.com

AuthorizationProcess:VoiceAuthorizationwithnoexistingToken/CaptureCC&AssignVoiceAuthorization

MSICloudPMv5.3:Quick-Reference:SummaryofEMVChangesforMSICloudPM

September15,2016

|CONFIDENTIAL|Multi-Systems,Inc.

7600N.15THStreetwSuite#250wPhoenix,AZ85020www.msisolutions.com

AuthorizationProcess:AcquireTokenfromCreditCardwithoutAuthorization(SaveCCInfoOnly)

MSICloudPMv5.3:Quick-Reference:SummaryofEMVChangesforMSICloudPM

September15,2016

|CONFIDENTIAL|Multi-Systems,Inc.

7600N.15THStreetwSuite#250wPhoenix,AZ85020www.msisolutions.com

CreditCardCapture:Accept/TokenizeCreditCardNumberforReservationsàPMSuserdoesnotmanuallyenterCC#;AnInsert/Swipepromptreplacestheexisting‘EnterCreditCard’dialogboxthatisusedinReservation

bookinginpriorCloudPMversionswithoutEMVorP2PEconfigurations.

MSICloudPMv5.3:Quick-Reference:SummaryofEMVChangesforMSICloudPM

September15,2016

|CONFIDENTIAL|Multi-Systems,Inc.

7600N.15THStreetwSuite#250wPhoenix,AZ85020www.msisolutions.com

Notes:

ChangesdepictedinthisdocumentareintendedtorepresentonlyupdatestoexistingworkflowsintheMSI

CloudPMproductastheyrelateto:

o CreditCardTokenization–theprocessofsecuringauniquedatatokenthatissubstitutedfor

actualcardholdertrackdata(magneticswipe)oraccountnumbersandotherdatastoredonan

EMVchip;thisistypicallyused(withoutAuthorization)inreservationbookingprocesses.Credit

cardtokenizationalsooccursinstoringactivepaymenttypesonCloudPMguestfolios,house

accounts,Groupfolios,andCityLedgeraccounts(tobeusedforinvoice(A/R)payments).

o Authorization(withorwithoutTokenizationprocess)–theprocessofauthorizingacreditcard

atcheck-in,applyingperiodpayments,orapplyingpaymentstoaCloudPMguestfolioatthe

timeofcheck-out.

§ Itisassumedthatauthorizationsareperformedthroughanintegratedonlinegateway

suchasMerchantLink.

§ ThisdocumentalsocoversVoiceAuthorizations,whichisdefinedastheprocessof

obtainingacreditcardauthorizationthroughanagentcalltotheProcessorwhenan

onlineauthorizationisnotpossibleduetocommunicationfailure,systemstatus,or

cardholderaccountstatus.