Providing Payer Authentication Information for Authorization

The values that are returned from payer authentication must be provided when seeking authorization for the transaction. Authentication information that is not included when considering authorization may cause the transaction to be refused or downgraded and prevent the normal liability shift from occurring.

The level of security in payer authentication is indicated by the two-digit e-commerce indicator (ECI) that is assigned to the transaction. These values have text equivalents that are assigned to the

ccAuthService_commerceIndicator

field.

The

American Express,

China UnionPay, Diners Club, Discover, and Visa card brands use

05

,

06

, and

07

digit values to express the authentication level for a

3-D Secure

transaction.

Text Values for ECI Values

ECI Value	Meaning	Visa	Diners Club	Discover	China UnionPay	American Express
05	Authenticated	vbv	pb	dipb	up3ds	aesk
06	Attempted authentication with a cryptogram	vbv_attempted	pb_attempted	dipb_attempted	up3ds_attempted	aesk_attempted
07	Internet, not authenticated	vbv_failure/internet	internet	internet	up3ds_failure/internet	internet