Structure of Public Key System in SET

• Certificates are issued hierarchically starting with a root certificate known to all SET software

• Each certificate is signed with private key of parent. The root is self signed

• GCA = Geopolitical CA

• CCA = Cardholder CA

• PCA = Payment Gateway CA

• MCA = Merchant CA

• CA = Certificate Authority

Root

Brand

GCA

CCA

MCA

PCA

CardholderSignature

MerchantSignature

MerchantKey Exchange

Payment GatewayKey Exchange

Payment GatewaySignature

E.g. Visa Mastercard

Previous slide

Next slide

Back to first slide

View graphic version