CreditCardXpress Community Edition™ (CCXCE) is a payment solution for credit, debit and purchase cards that uses Elavon (formerly Nova Information Systems) as the processor. Elavon is the third largest credit card processor in North America and is rated the number 1 processing network by MasterCard® for speed, availability and reliability. A key feature of CCXCE is that it sends transactions directly to Elavon bypassing 3rd party processors. CCXCE is implemented consistent with PCI DSS. CCXCE is intended to be installed on a merchant's server using the Apache Tomcat Java application server and either IBM's no charge DB2 Express-C or MySQL Community Edition database server.

The major objective the CCXCE solution is to provide a reliable, cost effective, payment solution that merchant’s can tailor to meet their needs by integrating it with a shopping cart and if necessary, their back office systems.

CreditCardXpress Community Edition™ (CCXCE) supports the following capabilities:

• Processes credit, purchase or debit card transactions using Elavon, the third largest payment card processor in North America.
• Sends transactions directly to Elavon bypassing 3rd party processors. This eliminates the costs, performance and security issues caused by 3rd party processors.
• Implemented consistent with the Payment Card Industries Data Security Standards (PCI DSS).
• Provides a browser based user interface that supports manual entry of mail order and telephone orders (MOTO).
• Provides a “Buy Button” interface used to integrate a merchant’s shopping cart. Note that the merchant must write code to integrate the buy button into their shopping cart.
• Provides a web service interface for use by programmers familiar with HTML or XML.
• Supports the following credit card transactions: SALE, PRE-AUTHORIZATION, FORCE, CREDIT, and VOID. In addition, it supports debit card SALE, CREDIT, CASHBACK and INQUIRY. Supports the following batch transaction types: CURRENT, PREVIOUS, PURGE and SETTLEMENT.
• Supports multiple merchant accounts and Terminal IDs per merchant account.
• Supports Elavon’s eCommerce, Retail and Mail Order/Telephone Order (MOTO) market segments.
• Built using an Identity Access Management system that enforces user authentication and authorization.
• Supports numerous security and quality control features including AVS, CVV2, 256-bit encryption, message digests, LUHN formula validation, card number masking, IBM and Elavon certification.

CCXCE is a payment gateway that fits between the merchant’s shopping cart and the merchant’s back office systems. It is a secure, certified payment gateway that sends transaction data to the processor (Elavon) and returns the transaction response to the merchant. It also validates the syntax and formats all transaction data. CCXCE logs all transaction requests and responses consistent with PCI DSS. The log is maintained in a database. Therefore, merchants can display reports that can be used for tracking, audits and to reconcile transaction data.

CCXCE does require some limited programming skills to integrate CCXCE with a shopping card or back office system.

The most common payment solution complaint CFXWorks hears from merchants relates to issues with 3rd party processors. A 3rd party processor, sometimes also referred to as a Marketing Services Provider (MSP), is an organization that markets the services of a processor. The processor is the organization that authorizes and captures payment card transactions and submits these transactions to the bank system gateway that provides the links to the banks. The submission of transactions to the bank system gateway results in the transfer of funds for the customers account to the merchants account. The complaints focus on the added cost, reliability issues, and lack of service provided by 3rd party providers. For a more complete discussion of these issues please visit our CFXWorks-Enterprise.com website. Elavon is a processor not a 3rd party processor. CFXWorks is neither a processor nor a 3rd party processor. CCXCE eliminates the need for merchants to deal with 3rd party processors!

• Affordable
• IBM’s Smart Market initiative makes if easy to buy, install, administer, maintain and support.
• Consistent with PCI DSS
• Built on an Identity Access Management system that controls who has access to specific capabilities within the system.
• Has an integrated database and report generation capability.
• It has a "Buy Button" shopping cart interface designed for merchants who have limited programming capabilities.
• Web interface for users needing to process card-not-present payment transactions.
• API interface for merchants needing to integrate CCXCE with back office systems.
• Built using mission critical middleware provided and supported by IBM including WebSphere Express and DB2.
• IBM markets several complementing service offerings that address PCI DSS requirements.

IBM has several offerings that have a direct relationship to the payment card industry and to CCXCE. IBM’s offerings are excellent candidates to be considered by merchants who need to outsource some of the PCI DSS tasks. The most obvious IBM service offerings that address PCI DSS requirements are as follows:

• IBM Threat Mitigation Services: Scanning Services
• IBM Threat Mitigation Services: End Point Protection for Server
• IBM Threat Mitigation Services: Network Protection
• IBM Appscan
• IBM Continuity and Recovery Services
• IBM Express PCI Assessments