Online Authorization ( OLA ) is a system used to verify a transaction on a payment card (eg credit card ). The term ‘on-line’ refers to the real-time nature of the verification. In other words, if the account is overdrawn, in most cases, the transaction will be refused.
OLA is already commonplace for credit card networks such as VISA or MasterCard and is now being implemented in others (such as fuel cards).
During on-line äuthorisation:
- The cardholder’s PIN is encrypted by ATM POS PINpad secure module ( HSM ) and sent to an issuer bank.
- A card cryptogram is sent to an issuer bank ( Smart card , EMV ).
- An issuer bank verifies the PIN or check card cryptogram.
- An issuer bank makes finance verification (on-time limit, credit limit, …)
- An issuer bank sends OK or OK (+ optional command list for EMV card).
(The recrypt PIN block process is not included in list.)
The set of verifications performed by an issuer is dependent on the issuer’s bank type processing system.