Skip to content

Commit

Permalink
Fixes per Stephen
Browse files Browse the repository at this point in the history
  • Loading branch information
ianbjacobs committed Nov 18, 2024
1 parent 16d765d commit c856b94
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 9 deletions.
6 changes: 3 additions & 3 deletions scope.md
Original file line number Diff line number Diff line change
Expand Up @@ -112,7 +112,7 @@ Note: This use case intends to capture the "in-transaction registration" use cas

#### EMV® Secure Remote Commerce (SRC) System as Relying Party

* Alice checkouts on a merchant web site with SRC, which triggers the SRC Digital Card Facilitator (DCF) to be displayed. The SRC DCF asks whether she wants to use biometric authentication to streamline payment. She agrees and SRC DCF redirects her to her bank where she goes through an Identification and Verification process with her bank for the credit card she wishes to use.
* Alice checkouts on a merchant web site with SRC, which triggers the SRC Digital Card Facilitator (DCF) to be displayed. The SRC DCF asks whether she wants to use biometric authentication to streamline payment. She agrees and SRC DCF redirects her to her bank where she goes through an ID&V) process with her bank for the credit card she wishes to use.
* As an alternative, Alice visits her bank, authenticates to her bank, registers into biometric authentication, and selects card(s) that she wants to make available to SRC. The bank (the Relying Party) shares the authentication credential with the SRC System.
* The following week Alice checkouts with a merchant enabled with SRC. The SRCi/DCF prompts Alice to do biometric authentication. The SRC System reviews the authentication results, and the bank authorizes the transaction.

Expand Down Expand Up @@ -187,7 +187,7 @@ These use cases represent additional considerations, some of which (e.g., unregi
#### Merchant as Relying Party

* Alice logs into her favorite merchant using a merchant proprietary mechanism or using biometric authentication.
* The merchant asks Alice if she wants to use biometric authentication to streamline payment. She agrees and goes through an Identification and Verification process with her bank for the credit card she wishes to use. (The merchant may decide to perform Identification and Verification during the checkout or outside of the checkout.)
* The merchant asks Alice if she wants to use biometric authentication to streamline payment. She agrees and goes through an ID&V process with her bank for the credit card she wishes to use. (The merchant may decide to perform ID&V during the checkout or outside of the checkout.)
* The merchant is the relying party for this authentication credential, and shares authentication data with Alice’s bank and/or payment network to allow for partial or full validation of authentication results in subsequent checkouts.
* The following week Alice checks out on the merchant site and is prompted by the merchant to do biometric authentication. The merchant uses SPC then shares authentication results with Alice’s bank and/or payment network, which reviews the data. The bank authorizes the transaction.

Expand Down Expand Up @@ -220,7 +220,7 @@ priority:

## Out of Scope

* Identification and Verification to establish real world identity during registration.
* ID&Vto establish real world identity during registration.
* Use cases for peer-to-peer payments or business-to-business transactions.

## Future Extensions
Expand Down
9 changes: 3 additions & 6 deletions spec.bs
Original file line number Diff line number Diff line change
Expand Up @@ -702,7 +702,7 @@ NOTE: The use of the static {{PaymentRequest/isSecurePaymentConfirmationAvailabl
### Steps to validate payment method data ### {#sctn-steps-to-validate-payment-method-data}

The [=steps to validate payment method data=] for this payment method, for an
input {{SecurePaymentConfirmationRequest}} |data|, are:
input {{PaymentRequest}} |request| and {{SecurePaymentConfirmationRequest}} |data|, are:

<wpt>
constructor.https.html
Expand Down Expand Up @@ -803,11 +803,8 @@ input {{SecurePaymentConfirmationRequest}} |data|, are:
If the result is `false`, remove |id| from
|data|["{{SecurePaymentConfirmationRequest/credentialIds}}"].
1. If the |data|["{{SecurePaymentConfirmationRequest/rpId}}"] is
not in the current origin, run the [=steps to silently determine if a
credential is SPC-enabled=], passing in
|data|["{{SecurePaymentConfirmationRequest/rpId}}"] and |id|. If the
result is `false`, remove |id| from
|data|["{{SecurePaymentConfirmationRequest/credentialIds}}"].
not the [=origin=] of the [=relevant settings object=] of |request|,
run the [=steps to silently determine if a credential is SPC-enabled=], passing in |data|["{{SecurePaymentConfirmationRequest/rpId}}"] and |id|. If the result is `false`, remove |id| from |data|["{{SecurePaymentConfirmationRequest/credentialIds}}"].

1. If |data|["{{SecurePaymentConfirmationRequest/credentialIds}}"] is now empty,
return `false`. The user agent must maintain
Expand Down

0 comments on commit c856b94

Please sign in to comment.