TransNet XML API: Information for Developers

About TransNet

The TransNet payment engine software is designed to integrate easily with any POS application, delivering PCI PA-DSS validated processing of credit, debit, gift, loyalty, and other payment types. Housed on the secure POSLynx220 payment router and managed by the NetVu/MerchantVu management server, TransNet uses an Extensible Markup Language (XML) Application Programming Interface (API).

Key benefits of this solution for POS application developers include:

• Eliminates or reduces cost and effort involved in achieving PCI PA-DSS validation. • Pre-certified to a wide range of payment processors, eliminating costly and lengthy certification process. • Simple integration, with multiple methods of interfacing to the API. • Easy to support, with the NetVu/MerchantVu management suite delivering transaction data in real-time 24/7. • Rich menu of tools available to merchants and partners, from reports to alerts. • SSL encrypted POSLynx220 payment router with firewalling protects cardholder data.

Precidia’s TransNet XML API offers a simple way for Developers to attain PA-DSS validation. Essentially, by integrating the TransNet software into your POS system, it will take control of the payment function, taking you out of scope of PA-DSS. With your application no longer Dial touching credit card data, it does not require certification by an external PCI auditor.

How it Works

The TransNet XML API is easily integrated with POS applications. Developers start by writing to Precidia’s simple XML interface. The request consists of a few parameters, including sale type, ie. credit card, and the transaction amount. TransNet then takes control of the interface to the mag stripe reader and or pinpad, and collects the information needed to run a payment request. Once this data is collected, it is transported securely to the POSLynx220 payment router. The POSLynx220 has a critical role in the TransNet solution, acting as a’fortress’ for cardholder data and ensuring that this data is not stored on the POS system.

Featuring SSL encryption and a built-in firewall, the POSLynx220 is a highly secure payment router. Acting as the gateway, with a direct connection to the transaction processor, the POSLynx220 eliminates dependence on a central switch, which can be unreliable and cause failure at merchant sites.

The POSLynx220 is remotely managed and monitored by the NetVu management server, ensuring automatic securityupdates, alerts and transaction reporting. To minimize downtime, the POSLynx220 also features automatic dial back-up in case of a network failure.

www.precidia.com

POSLynx220with TransNet

MERCHANT SITE

NetVu/MerchantVu Management Server

Payment Processors

IP withAutomatic Dial Back-Up to Processor Host

Internet

Back-Up

www.precidia.com

Interfacing to the TransNet XML API

Precidia offers 3 different methods to integrate with the TransNet payment engine:

ActiveX OCX ControlThe most simple method of interfacing to TransNet, the ActiveX OCX Control allows the developer to install the TransnetPOS-CG application on a PC. The function calls are all there to allow the developer to integrate from a C+, Visual Basic application. Precidia provides the developer with sample code to simplify this process.

File Drop Using the file drop system, the developer selects a folder on the PC that TransNet will monitor. Once TransNet sees a file with a payment request, it will process it and return another file with the completed payment request. The developer will load the TransNetPOS-CG application and it runs in the background.

Direct Secure SocketThis method involves a direct secure socket interface with the POSLynx220 router. Using this method, the developer does not need the TransNetPOS-CG application, but instead sets up a direct socket connection to the POSLynx220.

DEVICES •Magtek21040108

US PINPad•1000se•SC5000CAD PINPad•i3070

TransNetPOS-CG POS (loaded onto POS system)handles all transaction data,taking POS application outof scope for PA-DSS.

POSLynx220 Processors

Card data is accepted by PINPador Mag stripe reader.

Transaction data is sent to the secure POSLynx220 router with TransNet. No data is stored in the POS system.

Transactions are routed to multiple credit, debit, gift, loaylty processors. The TransNet solution is pre-certified to transaction processors.

Security

Management and Monitoring

The TransNet solution offers a comprehensive approach to cardholder data security, and offer two approaches to system set-up. The peripherals which accept card transactions, such as mag stripe readers and PINPads, can be connected to the merchant’s POS system, or can be connected to the POSLynx220.

If the developer chooses to have these peripherals connected to the POSLynx220, a separate PA-DSS validation is not necessary, eliminating this burden. In addition, the POSLynx220 with TransNet can handle newer technologies such as signature capture, which the existing system may not be ready for.

Should the developer wish to connect these peripherals to the POS system, there are certain PCI-related requirements which must be met by the developer or the merchant, such as the PCI SAQ (Self Assesment Questionnaire), maintaining virus updates, and limiting access/applications on the system.

The POSLynx220 payment router, is managed by the NetVu management server, and its merchant-level derivative, MerchantVu. Periodically, the POSLynx220 calls ‘home’ to NetVu for any changes or updates. This ensures that when security mandates change, TransNet is automatically updated. Since TransNet is certified with nearly every major processor in North America, the merchant can select the processor offering the best rates.

NetVu allows merchants to better understand and manage transactions. Collecting transaction statistics in real time, NetVu displays all transactions via a web portal, from refunds to gift card transactions. A unique feature of the TransNet API is the ability to log cash transaction data, displaying this data alongside card-based transactions for analysis and settlement. Transaction data can be viewed by date, site, region or franchise. To manage risk and prevent fraud, NetVu can also generate email/pager alerts for suspicious events such as manual transactions over a certain dollar amount. The extensive list of alerts NetVu provides can help users manage their business and react early to problems. All data collected in NetVu and MerchantVu can be exported to Excel.

TransNetPOS-CG

For More Information:info@precidia.com1.877.998.2747