Secure payment

We have chosen Paybox to secure your payments on our www.lephare-iledere.com website.

You will find below the reasons for our choice.

THE PRINCIPLE OF SECURE INTERNET PAYMENTS

Thanks to the technologies used and the absence of any printed information showing the bank card number in clear text, we can assure you that it is safer to pay with your bank card on PAYBOX-affiliated sites than in most local shops.
The entire payment process between the buyer and PAYBOX is fully encrypted and protected. The protocol used is SSL coupled with electronic banking.
This means that the information linked to the order and the bank card number do not circulate unencrypted on the Internet. 

PAYBOX does not keep the card numbers after transmitting the payment transaction to the merchant's bank. Therefore, no one has access to the buyers' credit card details, either electronically or in printed form.
The risk of having one's bank card number ‘pirated’ when making a purchase on an Internet site equipped with PAYBOX SYSTEM is zero.

The different stages in securing payment on the Internet :  At each payment request, the buyer switches from the merchant server to the PAYBOX SYSTEM payment server, which is connected to the banking world.

1. The buyer arrives at an SSL encrypted payment page 
2. Enter the card number, expiry date, visual cryptogram and authorisation request. The link between the buyer and the PAYBOX SYSTEM server is established using HTTPS, a secure protocol with SSL, which encrypts all information exchanged. This protection protects the data sent over the Internet and guarantees the purchaser that their bank card number cannot be intercepted in clear text by a third party during its transfer to the PAYBOX SYSTEM secure server. The PAYBOX SYSTEM home page informs the buyer about his purchase: presentation of the merchant's name (which guarantees that the business has been authenticated). 
3. When the card number has passed a first level of control (Luhn's key, oppositions, etc.), the PAYBOX SYSTEM server sends an authorisation request to the centre of the bank with which the merchant is affiliated. This is done using standard banking protocols over a dedicated telecommunications network.
4. The bank's authorisation centre returns an authorisation number or a refusal. If the payment is accepted, PAYBOX SYSTEM then performs the following operations: - the payment receipt is displayed on the buyer's screen (optional) - the payment receipt is sent by e-mail to the buyer and the merchant - the card number is NEVER sent back to the merchant.
5. The buyer is then automatically redirected to the merchant's server, where they can continue their visit. 

A special process, developed by PAYBOX Services, enables PAYBOX SYSTEM to monitor the cardholder's behaviour in real time, in particular to prevent the payment server from being used as a tester of automatically generated card numbers, or for other types of attack: 
- searching for BINs by increment, derivation or mask 
- multiple attempts with different expiry dates 
- random carrier IP addresses 
- nomad' cards, etc... 
To use a PAYBOX card payment service, a merchant must hold a VAD electronic payment account with an identified banking institution.

SECURING THE PAYBOX PLATFORM

Recently approved by VISA EUROPE as part of the AIS (Account Information Security) programme, and following the various audits carried out, VISA has been able to ensure that PAYBOX SERVICES applies a high level of security and integrity, complemented by sustained technological monitoring, in order to maintain the infrastructure of its platform. PAYBOX SERVICES is the first French operator to be certified under this highly demanding programme.

PAYBOX SERVICES has obtained approval and certification from the GIE Cartes Bancaires, VISA and MASTERCARD directly, as well as from private issuers and acquirers, for both its distance selling and local payment services (PAYBOX PROXI).

Of course, PAYBOX SERVICES is PCI-DSS (Payment Card Industry Data Security Standard) certified by VISA and MASTERCARD. This certification, which is renewed every year, guarantees a high level of security and integrity for the platform.