Requesting Services Using the SCMP API
Requesting Services Using the SCMP API
Processing Payments in China
This section provides detailed information about processing a China payment. For a simpler overview, see Credit Cards, China Bank Transfers, and China eWallet.
Sending a Payment Request to CyberSource
To request a payment:
Step 1
Create a request message that includes the required fields for ics_china_payment service.
Payment Request Fields, describes the required and optional fields to include in the request.
Step 2
Send the message to CyberSource.
CyberSource responds with a payment reply message containing the fields described in Payment Reply Fields.
 
Sending the Form Data to the Processor
The payment reply message from CyberSource includes the china_payment_form_data field. The form data is fully formatted text that you must send to the processor. The form data uses the GBK character set.
To send the form data:
Step 1
Decode the form data.
An example of code you can use to decode the form data:
String clear_data = new
String(com.cybersource.security.util.Base64.base64decode(encoded_data),"UTF-8");
where:
■
encoded_data is a java.lang.String object that contains the form_data response field value.
■
The Base64 class is in the SCMP client library.
Step 2
Send the decoded form data to the processor.
An example of a POST operation you can use to send the form data to the processor:
<HTML>
   <meta http-equiv='Content-Type' content='text/html; charset=gbk'>
   <BODY onload='document.forms[0].submit();'>
      <Include the decoded form data here…. >
   </BODY>
</HTML>
The POST operation sends the form data to the URL that is included in the form data.
The processor responds by sending you a payment response message with the fields described in PayEase Response Fields.
 
Verifying the Response from the Processor
Use an MD5 algorithm to verify the PayEase response.
* 
The MD in MD5 stands for Message Digest. An MD5 algorithm can be used with any data and it always produces a string of the same size. This string is called a digest. When a public/private key pair is used to create a digest for a given text, the digest is called a signature. The recipient of the text can authenticate the text by using the signature, the MD5 digest of the text, and the public half of the key pair.
To verify a response from the processor:
Step 1
Use the v_pstatus value from the PayEase response to determine which CyberSource verification value to use. For example:
 
String verify;
if ("1".equals(v_pstatus)) verify = chinaPaymentReply_verifyInProcess;
else if ("20".equals(v_pstatus)) verify = chinaPaymentReply_verifySuccess;
else if ("30".equals(v_pstatus)) verify = chinaPaymentReply_verifyFailure;
else throw IllegalArgumentException("invalid v_pstatus value");
Step 2
Create an MD5 object. For example:
 
RSA_MD5 md5 = new RSA_MD5();
Step 3
Invoke the MD5 object’s publicVerifyMD5 method with the following values:
■
Public key—you obtained this value from PayEase when you established your business relationship. See Business Requirements.
■
Signature—the v_sign field value from the PayEase response.
■
CyberSource verification value—the value that you selected in Step 1 and is the text from which the digest is created. For example:
int verify_result = md5.publicVerifyMD5(payeasePublicKey,
v_sign, verify);
Example
Verifying the Response from the Processor
String verify;
if ("1".equals(v_pstatus)) verify = chinaPaymentReply_verifyInProcess;
else if ("20".equals(v_pstatus)) verify = chinaPaymentReply_
   verifySuccess;
else if ("30".equals(v_pstatus)) verify = chinaPaymentReply_
   verifyFailure;
else throw IllegalArgumentException("invalid v_pstatus value");
RSA_MD5 md5 = new RSA_MD5();
int verify_result = md5.publicVerifyMD5(payeasePublicKey,v_sign, verify);
 
Tracking the Transaction
Track the transaction as described in Obtaining Information About Your Transactions.