Device Fingerprinting

Device Fingerprinting (DFP) is a method of fraud protection and able to identify technical devices in an anonymized way.

Fraudsters learn to exploit the weaknesses of traditional fraud prevention tools over time. We protect businesses from fraud and loss of revenue with that solution for innovative fraud prevention. By automatically linking transactions, fraud can be detected in real time. And with our self-learning and adaptive software you will be prepared to face new and upcoming fraud scenarios.

On this page we describe the procedure of DFP and how to implement its result in the PAYMENT_REQUEST / Authorization request.

Parameters

When implementing the DFP technology, you need to handle 2 parameters:

Workflow

1. Generate a Unique Token

To generate a DFP you first need to create a unique token within your web shop. Ratepay recommends using a UUID v4.

Example

import { v4 as uuidv4 } from 'uuid';
const token = uuidv4(); // ⇨ '1b9d6bcd-bbfd-4b2d-9b5d-ab8dfbbd4bed'

use Ramsey\Uuid\Uuid;
$token = Uuid::uuid4();

2. Include Script Into Web Page

Output the DFP JavaScript code on payment selection page, when the shopper chooses a Ratepay payment method, but as early as possible to get a sufficient latency, 4-5 seconds, between script call and end of the checkout process.

If the script is executed at the same time as the shopper clicks “Buy now” , it could be possible that Ratepay is not enabled to access the Device fingerprint data fast enough to use them during Ratepay’s risk check.

<script language="JavaScript">
    var di = document.createElement("script");
    di.setAttribute('language', 'JavaScript');
    di.innerHTML = "var di = {t:'" + token + "', v:'" + snippetId + "', l:'Checkout'};"
    document.getElementsByTagName("body")[0].appendChild(di);

    var script = document.createElement("script");
    script.type = "text/javascript";
    script.src = "https://d.ratepay.com/" + snippetId + "/di.js";
    document.getElementsByTagName("body")[0].appendChild(script);

    var css = document.createElement('noscript');
    css.type = "text/css";
    css.setAttribute("type", "text/css");
    css.setAttribute("rel", "stylesheet");
    css.setAttribute("href", "https://d.ratepay.com/di.css?t=" + token + "&v=" + snippetId + "&l=Checkout")
    document.getElementsByTagName("body")[0].appendChild(css);
</script>

<script language="JavaScript">
    var di = {
        t:'<?php echo $token ?>',
        v:'<?php echo $snippetId ?>',
        l:'Checkout'};
</script>
<script type="text/javascript" src="https://d.ratepay.com/<?php echo $snippetId ?>/di.js"></script>
<noscript>
    <link rel="stylesheet" type="text/css" href="https://d.ratepay.com/di.css?t=<?php echo $token ?>&v=<?php echo $snippetId ?>&l=Checkout">
</noscript>

3. Use Token in Authorization Request

Payment API 1.8

Transfer the DFP token in the head within the field <device-token> in the PAYMENT_REQUEST to Ratepay.

Payment API 2.0

Transfer the DFP token within the field device.token in the Authorization request to Ratepay.