Credit Card Processing

Credit Card Processing Overview... 1 New Feature Implementation...1 Specific Data and Image Encryption and Redaction... 1 Using the Command Buttons... 3 Implementation of the Credit Card Workflow... 4 Specialized Captiva Credit Card Form... 4 Setting up the System for the Credit Card module...4 Configuration Setup... 5 Site Setup... 6 Operator Setup... 7 Bank Setup... 8 Lockbox Setup... 9 Form Setup... 10 Affected Modules...24 Item Processing Modules window... 24 Registration... 25 Image Capture... 25 Item Scheduler... 25 Queue Status... 26 Delete Lockbox... 27 Data Entry Send and Receive... 27 Research... 27 Report Modules... 27 Batch Dump and Lockbox Archive... 28 Check21 Module... 28

Credit Card Processing Overview This document is intended to outline the implementation of the RemitTrac Credit Card Module. The following points overview the basic methods that are used in processing credit cards: Capture of the Credit Card data from a document through the RemitTrac Item Processing Module Entering specific data through Data Entry as part of the Item Processing Workflow Usage of encryption and redaction of data to meet customer security requirements The input of the credit card information is implemented through two modules in the RemitTrac Item Processing Workflow that will capture specific types of credit card data. All other credit card information will be retrieved through the use of the Captiva Data Entry module to validate the information and return proper identification for the credit card data. New Feature Implementation The processing of the credit card information requires the implementation of new features in the RemitTrac system to handle the data security requirements. These features include specific field encryption and specific data field and image redaction, which based on the individual field specifications. As of this release, these features can only be used for credit card processing, but in the future may also be used in other areas for general security. Specific Data and Image Encryption and Redaction The usage of encryption and redaction of data has been implemented in order to meet certain PCI security standards. While RemitTrac has been revised to begin this security compliancy, the system can never be fully compliant without the site s attention to their own confidentiality needs. The site can become PCI compliant by following a workflow that divides the work amongst different operators, thus ensuring that no one operator can obtain confidential information. The encryption process ensures that the keyed data is secured within the system through a mask. Because of this mask, only operators that have a high access level can decrypt the data. For information on the encryption access levels for an operator, see Operator Setup on page 7. Credit Card Processing 1

The redaction process ensures that the images containing confidential fields will be partially concealed from each operator, thus ensuring that no one operator is able to gain full access to confidential information on an image. The item processing form setup in the Lockbox Setup enables an operator to specify the redaction format for the image and data field. The redaction format that an operator can define includes type, location, and redaction mask of the field. For information on how to redact this data, see Form Setup on page 10. Figure 1. Example of New Credit Card Processing Module Figure 2. Example of New Manual Redaction Module 2 RemitTrac Workflow Manual

Using the Command Buttons Table 1 summarizes the commands that can be used for the Credit Card Processing and Manual Redaction modules. Table 1. Commands on the Credit Card Processing and Manual Redaction Windows Command F1:Front/Rear Show Rear/Front Description Toggles between the front and rear image for the item displayed in the Image Viewer. Used in the Credit Card module only. Allows the operator to view the Rear of the document without moving the Redaction mask to the rear image. F2: Show Remit Function not applicable in these modules. F3:Size Adjusts the size of the image displayed in the Image Viewer. F4:Change Function not applicable in these modules. F5:Flip Rotate F6:Invert F7:Prior F8:Next F9:Reject ESC Amounts Alt + A: Alternate Images F10:Close Flips an image that is displayed upside down in the Image Viewer. Rotates an image 90 degrees in a clockwise direction. Reverses the colors of the item displayed in the Image Viewer. Not available if the image is displayed in color or grayscale. Function not applicable in these modules. Displays the next item to be processed. Rejects the item and removes the item from the workflow process. Function not applicable in these modules. Feature will be available in a future release. Closes the window and returns to the Item Processing Modules Window. Credit Card Processing 3

Implementation of the Credit Card Workflow The software will use a new form type to provide the capability to enter credit card data through the Item Processing module. This module will use the newly added Item Processing Form in the Lockbox Setup to process Credit Card data. The operator will identify that credit card data needs to be captured through the Registration module, allowing the RemitTrac system to enforce some rules of processing. After being captured, the batch containing the credit card information will be sent through the following workflow process: Re-Organize Repair Processes Credit Card Module Redaction Module General Item Processes Data Entry Specialized Captiva Credit Card Form The verification of credit card data is enabled through the Data Entry Module (Captiva), which occurs after the General Item Processes have been completed. This requires that a specific form is implemented to process the credit card information. This form will allow for the possibility of field entry and/or field verification. Setting up the System for the Credit Card module In order for the Credit Card module to work correctly, the following modules have received changes and will require certain options to be set up. These changes affect the permission, setup, evaluation, processing, and reporting of the new data. 4 RemitTrac Workflow Manual

Configuration Setup The Configuration Setup has a new feature to allow the site to import a set of flags for processing. To enable the Credit Card module in the Configuration Setup 1. Select Credit Card from the Purchasable Software area. 2. Select Redaction from the Purchasable Software area. Credit Card and Redaction Options Figure 3. Enabling the Credit Card options in Configuration Setup Credit Card Processing 5

Site Setup The Site Setup contains a new option to allow the site to perform the Credit Card processes. The Site Setup also contains an area of new options called the Encryption Options, but these features will not available until a feature release. At this time, all options in the Encryption Options area are being performed automatically. To enable the Credit Card module in the Site Setup Select Enable Credit Card from the Options tab. Enable Credit Card Option Figure 4. Enabling the Credit Card option in Site Setup 6 RemitTrac Workflow Manual

Operator Setup The operator setup contains new settings to provide an operator with the required security privileges to perform specified Encryption and Redaction processes. Without these privileges, the functions will not be enabled for the operator. To enable an operator with the required security privileges in the Operator Setup 1. To enable an operator to view an encrypted image, select Encryption from the Security area on the General tab. 2. To enable an operator to view a redacted image, select Redaction from the Security area on the General tab. NOTE: Selecting the Encryption and Redaction images from the General tab will not enable an operator to perform credit card processes. These are view-only options. Encryption and Redaction Options Figure 5. Enabling the Credit Card Options in Operator Setup 3. To allow an operator to enter Credit Card information through the Credit Card module, select Credit Card from the Item Processing button on the Functions tab. Credit Card Processing 7

4. To allow an operator to redact an image through the Redaction module, select Redaction from the Item Processing button on the Functions tab. Credit Card and Redaction Module Options Figure 6. Enabling the Operator's Access to Credit Card modules Bank Setup Bank Setup contains an area of new options called the Encryption Options, but these features will not available until a feature release. At this time, all options in the Encryption Options area are being performed automatically. 8 RemitTrac Workflow Manual

Lockbox Setup Lockbox Setup has an additional flag in the Archive area on the Options tab entitled Send Original Data if redacted. This option allows the original image to be sent to archive. This image can only be viewed if the operator has sufficient rights. If the Send Original Data if redacted option is not selected, only the redacted image will be archived. The Lockbox Setup also contains an area of new options called the Encryption Options, but these features will not available until a feature release. At this time, all options in the Encryption Options area are being performed automatically. To enable the Send original data if redacted option To archive both the original and redacted images, select Send original data if redacted option from the Archive area on the Options tab. Credit Card Archive Option Figure 7. Enabling Credit Card Archive Options in Lockbox Setup Credit Card Processing 9

Form Setup A new Item Processing Form setup is available on the Forms tab in Lockbox Setup. This form defines the type, location, and redaction mask of the redacted field. To set up a Credit Card processing form 1. Access the Item Processing tab through the Forms tab in Lockbox Setup. 2. Select Add to define a new Credit Card processing form. Select Add to define a new credit card form Figure 8. Adding a new Credit Card Form The Item Processing Form Setup window is displayed. 10 RemitTrac Workflow Manual

Field and Image Options Credit Card Processing Options MICR Repair Options Reporting Option Figure 9. Defining the Credit Card form Options Table 2 summarizes the elements of the Credit Card form options. Table 2. Credit Card form option elements Element Field & Image Options Credit Card Processing Options MICR Repair Options Reporting Option Description Not configurable by the operator. These options are automatically selected by the system, depending on the configurations that are defined in the Document Fields tab. Options to define the credit card processing. The Provide Credit Card Info option is not configurable by the operator. This option is automatically selected by the system, depending on the configurations that are defined in the Document Fields tab. The Credit Card Data Entry option defines if the batch containing credit card information should be sent to data entry and the Authorization Required option defines if and when the credit card information needs to be verified by the customer. Allow the operator to enable MICR Repair, to select which fields should undergo the Repair process, and to choose when to perform MICR Repair. Gives the option of overriding the Image Print settings in Lockbox Setup and not printing the images of the Credit Card items that are using this form Credit Card Processing 11

3. Select the required options from the Options tab. 4. Select the Transport tab. Figure 10. Selecting the Credit Card Transport Options The Transport tab allows the operator to select which images that use this specific form are captured and stored in the database. If the batch is set up for this Credit Card form, the options that are selected will override any Image Capture options that have been selected on the Transport Options tab in Lockbox Setup. 5. Select any document types of which an image is required from the Capture Pass area. NOTE: The Encode Pass options are a future enhancement. 6. Select the Document Fields tab. 7. From the Document Fields tab, select the Document Types tab. 8. Select Add to add a new document type. 12 RemitTrac Workflow Manual

Select Add to add a document type Figure 11. Adding a document type The Add Document Type window will be displayed. 9. Select the desired document type and select Save. Figure 12. Choosing a Document Type 10. Select Add to define the fields on the selected document type. Credit Card Processing 13

Select Add to add a Processing field Figure 13. Adding a Processing Field The Add an Item Processing Field window is displayed. 11. Select an Item Processing Field to define and select OK. Figure 14. Selecting an Item Processing Field to define 14 RemitTrac Workflow Manual

12. Select Edit to define the item processing field. Select Edit to edit a Processing field Figure 15. Defining an Item Processing field The Item Processing Field Setup window is displayed. Credit Card Processing 15

Figure 16. Understanding the Field Setup Window Table 3 summarizes the fields on the Field Setup window. Table 3. Field Setup options Element Field Num Field Name Classification Length Processing Types Description Number of the selected field. Not configurable by the operator. Name of the selected field. Not configurable by the operator. Type of field. Not configurable by the operator. Data length for the field. Represents the number of characters in the field. Specifies the type of processes for the field. Selecting Encryption will encrypt the data in the field, Mask Data will not allow an item to be viewed in Research Editor unless the operator has sufficient security rights, and Redaction of Image requires that the field be redacted. 16 RemitTrac Workflow Manual

Table 2. Field Setup options (continued) Element Description Redaction Mask Defines how the field will be redacted, or covered up. The number of characters in the redaction mask must equal the number of characters that is defined in the length field. Select the Instructions button for more information on defining a redaction mask. Display Mask Zones Area Defines how much of the field can be displayed to the operator after being keyed. Select the Instructions button for more information on defining a display mask. If a display mask is not defined, the mask will default to the redaction mask. Area to define and display the redaction zones on a document. 13. Define the length of the field, the required processes, and the redaction and display masks. Refer to Figure 17 for an example of a redaction mask. The following is an example of how a redaction mask could be made. If the field length is 5 characters long and only the last two characters could be displayed, the redaction mask field would be defined as ***XX. Credit Card Processing 17

14. Select Image Editor to define the redaction zones. Select Image Editor to define the redaction zones Figure 17. Accessing the Image Editor The Zone Image Editor window will be displayed. 18 RemitTrac Workflow Manual

15. Select Load Batches to display a sample document on which to define the redaction zones. NOTE: You will need to have previously run a sample batch that contains documents on which a redaction zone can be obtained. Select Load Batches Figure 18. Loading Batches The batches that meet the requirements will be displayed. Credit Card Processing 19

16. Select a batch. Double-click on the batch to view or choose a batch and select View Images Figure 19. Selecting a Batch Figure 20 shows an example of a document in the Zone Image Editor, which is accessed through the Batch Selection tab. Image Viewer Defined Zones List Figure 20. Zone Image Editor Using the Zone Image Editor, the operator has the ability to draw a boxed area 20 RemitTrac Workflow Manual

directly on the document, thereby automatically selecting the coordinates for the desired Zone. Multiple zones can be selected for one item. There are two types of zones that can be defined for an item. The first type is called the Redaction Zone, which is the default zone that is used in the Manual Redaction module. The second type of zone is the Display zone, which is the zone that will be used in the Credit Card Processing module. If this zone is not defined, the Redaction zone will be used. NOTE: The Redaction zone MUST be defined. 17. Choose which zone you would like to define. The Redaction zone type is chosen by default. Click the button to select a zone type Figure 21. Choosing a Zone Type to Draw The Change Draw Zone Type window is displayed. Credit Card Processing 21

18. Select the type of zone to define and click OK. Figure 22. Change Draw Zone Type Window 19. Using your mouse, draw a box around the field that you would like to be redacted. If the zone is a Display zone, this field will be apparent to an operator accessing the Credit Card module during Item Processing. Working similarly to the Mark Sense module, the zone that is marked will indicate the location of the field to the keying operator. If the zone is a Redaction zone, this will be apparent to an operator accessing the Manual Redaction module during Item Processing and will assist in the redaction of the item. If there is no Display zone defined, the Redaction zone will appear in the Credit Card module. Figure 23. Drawing a Zone After drawing the Redaction zone, the zone will turn a light blue color. After drawing the Display zone, the zone will turn a light green color. 22 RemitTrac Workflow Manual

Figure 24. Redaction Zone after Being Drawn Credit Card Processing 23

Affected Modules The following modules were identified as requiring changes to implement the Credit Card features. These changes affect the evaluation, processing and reporting of the new data. Item Processing Modules window The Item Processing Modules window contains two new options for the Credit Card Module and the Manual Redaction module in the Field Entry area. Through the Credit Card module, an operator can enter any required credit card information. Through the Redaction module, an operator can redact and cover up any required credit card information. NOTE: Operators must have sufficient privileges to be able to view encrypted images and perform the Credit Card and Redaction processes. These privileges are enabled through the Operator Setup. Credit Card and Redaction Modules Figure 25. New modules on the Item Processing Modules window 24 RemitTrac Workflow Manual

Registration Registration now contains a third form to select a Credit Card job. This third form is called the Item Processing form. The Item Processing form that is chosen will affect the credit card workflow options. Data Entry occurs before encode for a Credit Card job. New Item Processing Form Image Capture Figure 26. New form in Registration The software of any transport will encrypt the images as they are being captured and store the images as encrypted. These captured images can only be seen by the operator who has the ability to view and decode encrypted images. Item Scheduler The Item Scheduler processes data differently in order to account for Credit Card processing. The scheduler must allow for all repairs, including scanline, scanfield, and MICR, to be performed prior to credit card processing. Credit Card processing is performed after repair processing, followed by all other processes.. The credit card module allows for rejecting items, changing type, etc. Credit Card Processing 25

Queue Status The Queue Status module has two additional columns for the batches and trays that are related to credit card processing. Credit Card Payment and Redaction module status Figure 27. Queue / Batch Status with Credit Card and Redaction modules An operator can also choose to display the items that have undergone Credit Card Processing and the Redaction Process in the View Options window. Credit Card and Redaction view Options Figure 28. Credit Card Processing and Redaction Process View Options 26 RemitTrac Workflow Manual

Delete Lockbox The Delete Lockbox module has been updated to manage and delete the new records and files that are created for the Item Processing forms. Data Entry Send and Receive Research A new form is required in Captiva to handle the entry and/or the validation of the credit card data. This processing of the form will be inside the RemitTrac Item Processing workflow and will not conflict with the normal Data Entry workflow for the batch. The Data Entry Send / Receive module now connects to the item scheduler to send and receive work. This work contains a special form (creditcard.frm) and will entail the custom credit card entry of data for the customer. Research has been updated to be able to show both the original image and the redacted image of an item. The original image will only be displayed if the operator has sufficient rights to view redacted information. Research Editor also possesses the ability to display and change the encrypted data, if the operator has sufficient rights. Selecting the Show Redacted and Show Encrypted options will allow an operator to see the secured data Report Modules Figure 29. Selecting to view Redacted and Encrypted Images All report programs have been updated to handle the new item types in the database, if required. Credit Card Processing 27

Batch Dump and Lockbox Archive The Batch Dump software and the Lockbox Archive software has the ability to provide the unencrypted data if the operator has the required security access. Check21 Module The Check21 module has been updated to correctly handle the encryption process. The Check21 items are encrypted during the Item Processing and then decrypted when placed into the X9.37 file. 28 RemitTrac Workflow Manual