Technical specification of the Bank Link queries

Transcription

1 Date of preparation: Technical specification of the Bank Link queries Queries... 2 Payment queries... 3 Query Query Query Query Authentication queries... 5 Query Query Query Query

2 Queries In the queries, in the amounts dot is used as decimal separator. Thousands separator is not used. Date and time are presented in the DATETIME format with the precision of second, e.g T07:21: The receiver of the query must check the value in the DATETIME field, whereby the value of the field may not differ from the current time at the moment of checking more than ± 5 minutes. The length of the value of the parameter must not exceed what is described in the specifications. Upon exceeding the length, a query is not processed. The length of the value of the parameter is in symbols. The length of the value of the parameter can be shorter than the permitted maximum length. An error message is sent in reply to queries that do not match the specifications. It is not allowed to use URL with parameters in the fields VK_RETURN and VK_CANCEL. NB! Field VK_ENCODING is mandatory in the query. NB! Danske Bank s VK_SND_ID is SAMPOPANK Queries can be divided as follows: 1. on the basis of originator: queries of merchant or queries of bank 2. on the basis of reply: requiring reply, not requiring reply 3. on the basis of purpose: 1xxx initiation of transactions 3xxx identification queries Queries can be devided: 1. On the basis of initiator: Merchant or Bank s queries. 2. On the basis of response: Response is required Response is not required. 3. On the basis of purpose: 1xxx payment initiation 3xxx authentication queries Calculation of digital signature VK_MAC on the basis of version 008 Signature MAC008 (VK_MAC) is calculated using public key algoritm RSA and ning hash algoritm SHA1. MAC008(x1,x2,..., xn):= RSA (SHA-1(p(x1) x1 p(x2) x2... p(xn) xn),d,n) Explanations: - is the string concatenation x1, x2,..., xn - are the parameters of the query (numbered in specification). p - is a function of the length of the parameter. The output is in the form of a three-digit string d RSA - is the secret exponent n RSA modulus 2(6)

3 Specifications of queries Payment queries Query 1011 The merchant sends to the bank the data of a signed payment order, which the customer cannot change in Danske Internet Bank. After a successful payment, query "1111" is compiled for the merchant; after a failed payment, query "1911" is compiled to the merchant. 1 VK_SERVICE 4 Service No (1011) 4 VK_STAMP 20 Query ID 5 VK_AMOUNT 12 Amount payable 6 VK_CURR 3 Name of currency (EUR) 7 VK_ACC 34 Beneficiary s account No in Danske Bank 8 VK_NAME 70 Beneficiary s name 9 VK_REF 35 Reference number of payment order 10 VK_MSG 95 Details of payment. The following symbols may be used: letters of the Latin alphabet dotted letters õ, ä, ö, ü digits symbols + - ( )., ;! & / space 11 VK_RETURN 255 URL, to which response is sent in performing the transaction 12 VK_CANCEL 255 URL, to which response is sent in case of failed transaction 13 VK_DATETIME 24 Date and time of generation of query in DATETIME format Query 1012 The merchant sends to the bank the data of a signed payment order, which the customer cannot change in Danske Internet Bank. After a successful payment, query "1111" is compiled for the merchant; after a failed payment, query "1911" is compiled to the merchant. The beneficiary s name and account number are taken from the agreement concluded between the bank and the merchant. 1 VK_SERVICE 4 Service No (1012) 4 VK_STAMP 20 Query ID 5 VK_AMOUNT 12 Amount payable 6 VK_CURR 3 Name of currency (EUR) 7 VK_REF 35 Reference number of payment order 8 VK_MSG 95 Details of payment. The following symbols may be used: letters of the Latin alphabet dotted letters õ, ä, ö, ü digits symbols + - ( )., ;! & / space 9 VK_RETURN 255 URL, to which response is sent in performing the transaction 10 VK_CANCEL 255 URL, to which response is sent in case of failed transaction 11 VK_DATETIME 24 Date and time of generation of query in DATETIME format 3(6)

4 Query 1111 Used for notification of a successful domestic payment order. 1 VK_SERVICE 4 Service No (1111) 2 VK_VERSION 3 Encryption algorithm used VK_SND_ID 15 ID of compiler of the query (Bank's ID) 4 VK_REC_ID 15 ID of recipient of query (Merchant's ID) 5 VK_STAMP 20 Query ID 6 VK_T_NO 20 Payment order No 7 VK_AMOUNT 12 Amount paid 8 VK_CURR 3 Name of currency (EUR) 9 VK_REC_ACC 34 Beneficiary s account No 10 VK_REC_NAME 70 Beneficiary s name 11 VK_SND_ACC 34 Payer's account No 12 VK_SND_NAME 70 Payer s name 13 VK_REF 35 Reference number of payment order 14 VK_MSG 95 Details of payment 15 VK_T_DATETIME 24 Date and time of the payment order. DATETIME format - VK_AUTO 1 Y= response automatically sent by the Bank N= response with customer's redirection to the merchant's page Query 1911 Used for notification of a failed transaction. 1 VK_SERVICE 4 Service No (1911) 3 VK_SND_ID 15 ID of compiler of the query (Bank's ID) 4 VK_REC_ID 15 ID of recipient of query (Merchant's ID) 5 VK_STAMP 20 Query ID 6 VK_REF 35 Reference number of payment order 7 VK_MSG 95 Details of payment - VK_AUTO 1 Y= response automatically sent by the Bank N= response with customer's redirection to the merchant's page 4(6)

5 Authentication queries Query VK_SERVICE 4 Service No (3012) 3 VK_USER 16 Agreed user s identifier 4 VK_DATETIME 24 Date and time of generation of query in DATETIME format 5 VK_SND_ID 15 ID of compiler of the query (Bank's ID) 6 VK_REC_ID 15 ID of recipient of the query (Merchant's ID) 7 VK_USER_NAME 140 Name of the user 8 VK_USER_ID 20 ID code of the user 9 VK_COUNTRY 2 ID code s country (ISO two letter code) 10 VK_OTHER 150 Additional info about the user 11 VK_TOKEN 2 Authentication device code: 1- ID card; 2- Mobile ID; 5- one time password card; 6- PINcalculator; 7- reusable password card 12 VK_RID 30 Session identifier Query 3013 Copy of the nonce will be sent to Merchant. 1 VK_SERVICE 4 Service No (3013) 3 VK_DATETIME 24 Date and time of generation of query in DATETIME format 4 VK_SND_ID 15 ID of compiler of the query (Bank's ID) 5 VK_REC_ID 15 ID of recipient of the query (Merchant's ID) 6 VK_NONCE 50 Copy of VK_NONCE from initial query 7 VK_USER_NAME 140 Name of the user 8 VK_USER_ID 20 ID code of the user 9 VK_COUNTRY 2 ID code s country (ISO two letter code) 10 VK_OTHER 150 Additional info about the user 11 VK_TOKEN 2 Authentication device code: 1- ID card; 2- Mobile ID; 5- one time password card; 6- PINcalculator; 7- reusable password card 12 VK_RID 30 Session identifier Query 4011 Query sent by the merchant for the identification of the user. The service is available to merchants who have concluded the Agreement on the Use of the Bank Link. Response query is VK_SERVICE 4 Service No (4011) 4 VK_REPLY 4 Code of expected response package (3012) 5 VK_RETURN 255 Merchant's URL to which response is sent 6 VK_DATETIME 24 Date and time of generation of query in DATETIME format 7 VK_RID 30 Session identifier 5(6)

6 Query 4012 Query sent by the merchant for the identification of the user. The service is available to merchants who have concluded the Agreement on the Use of the Bank Link. Response query is VK_SERVICE 4 Service No (4012) 4 VK_REC_ID 15 ID of recipient of query (Bank s ID) 5 VK_NONCE 50 Random nonce generated by the Merchant 6 VK_RETURN 255 Merchant's URL to which response is sent 7 VK_DATETIME 24 Date and time of generation of query in DATETIME format 8 VK_RID 30 Session identifier 6(6)