Previous Topic

Next Topic

Credit Card Vault

The Credit Card Vault functionality can only be activated by the IFC>Credit Card Vault application function that is hidden and is a GLOBAL function. If activated in a multi-property environment for one property, then it will be active for all the properties in the environment. Please contact your regional office to get this application function activated and to find out more details.

To eliminate the storage of credit card numbers in Opera, Unique IDs (encrypted credit card keys) will be used to replace any credit card numbers; thereafter, these unique IDs will be used for any of the guest's transactions at the property. This Unique ID is then attached to the guest's profile, just as the credit card would have been, and will be used for any future stays or transactions that they have.

Note: Credit Card Vault can be used simultaneously with Opera's Chip and PIN functionality.

Note: The last four digits of the credit card number and the expiration date are used in Opera for identification purposes only. That is why the last four digits of the credit card will be displayed on screens throughout the Opera application.

Note: When the IFC>Credit Card Vault application function is set to Y, then the following functionality will not be supported within Opera:

- Dynamic Currency Conversion
- Authorization/Settlement at Checkout

Also when the Reservations>Payment Types Per Window application function and IFC>CC Number Not Mandatory for Reservations application parameter is set to N. The Group Rooming List will only display non-credit card payment methods in the Payment list of values.

The export files that contain clear text cc information, will now contain credit card numbers masked with 'X' and only last 4 digits will be displayed.

When searching in Opera using a credit card number, the expiry date will have to be entered in the widget.

Credit card encryption utility will not be available when vault functionality is active.

Working with the Merchant Link EFT vendor, all credit card entries will be completed through the external MICROS Payment Application. This application is accessed by selecting the credit_card_vault_widget icon that is displayed next to any credit card entry field. The MICROS Payment Application is an external software application that is not part of the Opera application.

Based on where the MICROS Payment Application is accessed from, two different entry forms could be displayed. But the user will know that they have accessed the MICROS Payment Application because the following image will be displayed once the application is activated:

credit_card_vault_Opera_Gateway_message_prompt

When accessing the MICROS Payment Application from the Reservation, Check In, or Multi- Payment screens and the Reservations>Payment Types Per Window application functions is set to Y, then the following credit card entry form will be displayed:

credit_card_vault_multiple_payment_form

From here, you would simply swipe the credit card or manually enter the credit card information. If swiping the credit card, the Credit Card, Expiry, and Name fields will be populated automatically. But the Pay Type field will not be populated until the OK button has been selected and the credit card has had its Unique ID converted. Once the ID is converted, then the credit card type will be returned and populated into the Pay Type field.

Now if the MICROS Payment Application is accessed from, for example, the Payment screen, then the following form will be displayed:

credit_card_vault_payment_application_form

Once the credit card has been swiped or its information manually entered, select the OK button to convert the credit card number to a Unique ID from the external application.

From the Configuration>Setup>Property Interfaces>Credit Card Interface>Functionality Setup menu option, if the Deposit CVV2 Check or Deposit Address Verification check box is selected, then the following MICROS Payment Application form will be displayed when clicking the credit_card_vault_widget from the Reservation Deposit Payments screen.

credit_card_vault_address_verification_form

Searching by Credit Card

Where appropriate, credit card information can still be searched upon by swiping a credit card, but the credit_card_vault_widget button will have to be selected before the search can be completed. But if the Unique ID is not stored in the database, then no information will be returned for the search. For example, say that a guest made a reservation and booked the reservation with one credit card. But when the guest arrives to check in, they give you a different credit card to swipe. The reservation will not be found because the Unique ID for the credit card swiped is not assigned to the reservation.

Note: When swiping a credit card and the cursor is in the Name field, a series of ***** are displayed and a message is displayed to notify the user that they must use the MICROS Payment Application for the credit card swipe. Once the OK button is selected on the message, then the Name field is cleared out and the user must then select the credit_card_vault_widget to open the MICROS Payment Application from the Reservation Advanced search.

Screens where the credit_card_vault_widget will be displayed when the IFC>Credit Card Vault hidden application function is set to Y for a property.

Multiple Payment Methods Per Reservation Note

When the IFC>Credit Card Vault application function is set to Y and a credit card is used as the payment method for Window 1 using the MICROS Payment Application, the Swiped column will be populated with an X after the data is returned from the credit card vendor. Now if the same credit card is copied from Window 1 to Window 2, the swiped column will be blank for Window 2. The reason is that the MICROS Payment Application removes the Track2 data from its memory as soon as the data is used in the credit card authorization message for Window 1 for security reasons. With the removal of the Track2 data, the same credit card that was copied to Window 2 displays as not swiped because it has not been verified/authorized through the MICROS Payment Application and credit card vendor for Window 2.

Credit Cards on Reports

With the Credit Card Vault functionality active, credit card numbers will always display as masked and the user will not be able to unmask them as the Unmask Credit Cards option for specific reports will be removed.

Credit Card Vault Functionality in ORS/OCIS

Profile Matching and Merging in ORS/OCIS when Credit Card Vault is Enabled

When a profile comes into ORS/OCIS from OXI-Hub, the following will occur in the match and merge process:

  1. A new or updated profile comes into ORS/OCIS from OXI.
  2. The profile is downloaded from OXI with a Unique ID already attached.
  3. Credit card matching will still occur, but the Unique ID will be used in place of the credit card number.
  4. The Unique ID is compared to existing IDs in the system.
  5. The rest of the profile match and merge continues as normal.

    Note: Any conversion from a credit card number to a Unique ID from the Credit Card Vault will be done on the OXI-Hub side before the value is inserted into the profile stage tables.

    Note: If the EFT system is down, a credit card number will not be stored and/or used for matching purposes.

Incoming Reservations from OXI to ORS/OCIS when Credit Card Vault is Enabled

When a new or updated reservation comes into ORS/OCIS from OXI-Hub, the following will occur:

  1. A new or updated reservation comes into ORS/OCIS from OXI.
  2. The external CRS receives a Unique ID at the time of creation.
  3. The reservation is downloaded from OXI with a Unique ID already attached.
  4. The Unique ID is compared to existing IDs in the system.
  5. The reservation is updated or created as normal.

Outgoing Reservation Updates to Third-Party CRS Systems when Credit Card Vault is Enabled

The following will occur when a reservation is updated in Opera and an update needs to be sent to an external third-party CRS system:

  1. A reservation is updated in Opera and an update is sent to the external third-party CRS system.
  2. The EFT system is called to retrieve the credit card number based on the Unique ID.
  3. A credit card number is returned to the EFT system, inserted into the outgoing message, and sent to the CRS system via an https connection.
  4. The credit card number is removed from memory and never stored in the Opera or third-party CRS database.

    Note: If the EFT system is down, you will need to queue the outgoing message until the EFT system is back up.

Credit Card Vault Functionality in OEDS

When credit cards are sent through OWS/GDS/ADS channels, OEDS OAP will call the Credit Card Vault web service for credit card validation and obtain a Unique ID for the credit card number. OAP will no longer use the credit card number but will instead use the Unique ID while calling the Opera database API. The Unique ID will be stored in the Opera database along with the last-four credit card digits. When a response is sent back from OAP, OAP will again call the Credit Card Vault to get the credit card number based on the Unique ID. OAP will then return a credit card number in the response to the OWS/GDS/ADS channel.

When the Credit Card Vault is active, OEDS will no longer do credit card validation as this will be handled by the Credit Card Vault.

See Also