Java – no credit card processing for Google Checkout / Amazon / paypal
If I want to process payment directly instead of through Google / Amazon / paypal, what should I do? Is there a Java API or some reference implementation that shows how to do this, or do I need to choose a provider like Google or Amazon?
I currently use Google Checkout because the implementation is very simple and I can easily generate reports containing any information I want If I implement the solution internally, I can access all this information directly anyway
Solution
I have never used google checkout or PayPal APIs to process payments If there is a way, you can bypass "touch" any part of the credit card information and outsource it to their network interface. You will hope that unless there is a clear reason, I will explain it below
Before launching your own credit card payment gateway, you must consider some factors
First, is this for internal use only? Does it mean that it will be used for non-commercial internal use? The reason I ask is because if this is a commercial product, you will have to accept PA-DSS certification (previous PABP or payment application best practices) This is because visa has required its acquirers and merchants to use only PA-DSS / PCI compliant software Therefore, it forces software developers to develop compatible software To obtain official certification and be on the PA-DSS list, you must pay a high fee to an external auditor (such as Verizon business cybertrust) to fully comply with the PA-DSS standard To give you a rough figure, the audit may cost you about $15000
It all depends on the structure of your application and environment We use icverify (now owned by first data) for credit card processing ICVERIFY 4.0. 3 on the approved list Since our application touches track1, 2, 3, pan, exp date, etc. of credit cards, we must also obtain approval Prosperity – 0700 and the annual "go to market" fee is PCI Security Council
Our application connects to icverify through its req - ans file interface, which is very simple It is not expensive and can work with multiple customers at the same time If you decide to go this way, I suggest you use icverify
If you have no reason to process credit cards through your application or server, I suggest you "outsource" credit card processing to PayPal, Google or some other large entities and obtain confirmation that the fee has been successfully processed If you have this function, it will make your life easier