Introduction to Apple Pay

On This Page
You can use the
Cybersource
 platform to process and manage Apple Pay transactions.
Apple Pay is a digital payment solution that allows customers to maake secure and convenient transactions using their Apple devices. By adding Apple Pay to your web page, you can offer your customers a faster and easier way to pay online, without requiring them to enter their card details or shipping information. Apple Pay also reduces the exposure of sensitive payment data to your system, as the payment information is encrypted and tokenized by Apple.

Requirements for Using Apple Pay

In order to use the
Cybersource
 platform to process Apple Pay transactions, you must have these things:
  • A
    Cybersource
     account. If you do not already have a
    Cybersource
     account, contact your local
    Cybersource
     sales representative.
  • A live merchant account with a supported processor to handle processing the transactions.
  • An
    Admin
     or
    Team Agent
     user of the Apple Pay Developer account to initiate the transactions.
IMPORTANT
Apple Pay relies on authorizations with payment network tokens. You can sign up for Apple Pay only when these statements are true:
  • Your processor supports payment network tokens.
  • Cybersource
     supports payment network tokens with your processor.
If one of these statements is not true, you must take one of these actions before you can sign up for Apple Pay:
  • Obtain a new merchant account with a processor that supports payment network tokens.
  • Wait until your processor supports payment network tokens.

Supported Card Types and Optional Features

This table explains which card types and optional features are supported for each processor.
Processor
Card Types
Optional Features
HSBC
HSBC
 is the
Cybersource
 name for
HSBC
 U.K.
  • Maestro (International)
  • Maestro (UK Domestic)
  • Mastercard
  • Visa
  • Visa Electron
  • Merchant-Initiated transactions
  • Multiple partial captures
  • Recurring payments

Payment Processors

Payment processors connect with acquirers. Before you can accept payments, you must register with
a payment processor
.
An acquirer might require you to use a payment processor with an existing relationship with the acquirer.
Your payment processor
 assigns one or more merchant IDs (MIDs) to your business. These unique codes identify your business during payment transactions.
This table lists the processors and corresponding card types that are supported for payment services.
IMPORTANT
Only the card types explicitly listed here are supported.
Payment Processors and Supported Card Types
Payment Processor
Supported Card Types
Notes
HSBC
Visa, Mastercard, Maestro (UK Domestic), Maestro (International)

Apple Pay Integrations and Payload Decryption Methods

In response to a payment request, Apple Pay returns an encrypted payload that contains sensitive payment information. Two methods can be used to extract and decrypt the payment information, and both methods support Apple Pay in-app and web transactions.
  • With
    Cybersource
     decryption
    ,
    Cybersource
     manages the generation of the payment encryption key and the decryption of the Apple Pay response.
    IMPORTANT
    This method reduces the exposure of sensitive payment data to your system.
  • With
    merchant decryption
    , you manage both the payment encryption key generation and the decryption of the Apple Pay response.
The remainder of this section summarizes the flow of Apple Pay transaction processing for each decryption method.

Flow of Apple Pay In-App Transactions Processed Using
Cybersource
 Decryption

This diagram illustrates the flow of in-app transaction processing using
Cybersource
 decryption.

Figure:

In-App Transaction Processing with
Cybersource
 Decryption
In-App Processing with non-Merchant Decryption
  1. When the customer chooses to pay with Apple Pay, you use the Apple PassKit Framework to request the encrypted payment data from Apple.
  2. Apple uses the Secure Element to create a
    payment token
     and encrypt the token’s
    payment data
     before it sends your application.
    • The payment token is the
      PKPaymentToken
       structure.
    • The payment data is the
      paymentData
       field of the
      PKPaymentToken
       structure.
  3. You forward the encrypted payment data to your order management system.
  4. Using the
    Cybersource
     API, you submit the authorization request. In the
    paymentInformation.fluidData.value
     field, include the Base64-encoded value that you obtained from the
    paymentData
     field of the
    PKPaymentToken
     structure.
  5. Cybersource
     decrypts the payment data and forwards the information to the payment network, which includes your processor and the relevant payment card company.
    IMPORTANT
    You must use the
    Business Center
     or one of the
    Cybersource
     API services to capture, credit, or void the authorization.

Flow of Apple Pay In-App Transactions Processed Using Merchant Decryption

This diagram illustrates the flow of in-app transaction processing using merchant decryption.

Figure:

In-App Transaction Processing with Merchant Decryption
In-App Processing with Merchant Decryption
  1. When the customer chooses to pay with Apple Pay, you use the Apple PassKit Framework to request the encrypted payment data from Apple.
  2. Apple uses the Secure Element to create a
    payment token
     and encrypt the token’s
    payment data
     before it sends your application.
    • The payment token is the
      PKPaymentToken
       structure.
    • The payment data is the
      paymentData
       field of the
      PKPaymentToken
       structure.
  3. You forward the encrypted payment data to your order management system to decrypt. For information on decryption, see the Payment Token Format Reference article in the Apple Pay Developer Documentation.
  4. Using the
    Cybersource
     API, you submit the authorization request and include the decrypted payment data.
  5. Cybersource
     forwards the information to the payment network, which includes your processor and the relevant payment card company.
    IMPORTANT
    You must use the
    Business Center
     or one of the
    Cybersource
     API services to capture, credit, or void the authorization.

Flow of Apple Pay Web Transactions Using
Cybersource
 Decryption

  1. When the customer chooses to pay with Apple Pay, you use the Apple Pay JavaScript to request the encrypted payment data from Apple.
  2. Apple uses the Secure Element to create a
    payment token
     and encrypt the token’s
    payment data
     before it sends your application using the
    onpaymentauthorized
     event handler.
    • The payment token is the
      ApplePayPaymentToken
       structure.
    • The payment data is the
      paymentData
       field of the
      ApplePayPaymentToken
       structure.
    For more information, see Apple Pay on the Web Interactive Demo.
  3. You forward the encrypted payment data to your order management system.
  4. Using the
    Cybersource
     API, you submit the authorization request. In the
    paymentInformaton.fluidData.value
     field, include the Base64-encoded value obtained from the
    paymentData
     field of the
    ApplePayPaymentToken
     structure.
  5. Cybersource
     decrypts the payment data and forwards the information to the payment network, which includes your processor and the relevant payment card company.
    IMPORTANT
    Use the
    Business Center
     or one of the
    Cybersource
     API services to capture, credit, or void the authorization.

Flow of Apple Pay Web Transactions Using Merchant Decryption

  1. When the customer chooses to pay with Apple Pay, you use the Apple Pay JavaScript to request the encrypted payment data from Apple.
  2. Apple uses the Secure Element to create a
    payment token
     and encrypt the token’s
    payment data
     before it sends your application using the
    onpaymentauthorized
     event handler.
    • The payment token is the
      ApplePayPaymentToken
       structure.
    • The payment data is the
      paymentData
       field of the
      ApplePayPaymentToken
       structure.
    For more information, see Apple Pay on the Web Interactive Demo.
  3. You forward the encrypted payment data to your order management system to decrypt. For information on decryption, see the Payment Token Format Reference article in the Apple Pay Developer Documentation.
  4. Using the
    Cybersource
     API, you submit the authorization request and include the decrypted payment data. See Authorization Service.
  5. Cybersource
     forwards the information to the payment network, which includes your processor and the relevant payment card company.
    IMPORTANT
    Use the
    Business Center
     or one of the
    Cybersource
     API services to capture, credit, or void the authorization.