Stepwise CNP

Home » Technologies » Stepwise CNP

Card Not Present fraud is simply online carding!

Lockstep was the first to see that the cryptographic techniques used in Chip-and-PIN to protect cardholder data between card and terminal could also be used to protect the same data between browser and server in CNP transactions. That is, Lockstep Technologies’ solution replicates Chip-and-PIN security online. Not only is the Stepwise CNP solution vastly more secure, it radically improves privacy by stripping away all extraneous personal information, and it’s supremely natural to use.


Stephen presented Stepwise CNP on ABC TV’s New Inventors program.

Cards & Payments Australia 2012

We were proud to appear in the Cards & Payments Innovation stream as a guest of G&D Australia at the Cards & Payments Australia 2012 conference, March 21.

Attached below is our presentation “Integrating Chip & PIN with 3D Secure to improve CNP fraud prevention”.

Stepwise “encapsulates” cardholder details in a digital certificate issued to an EMV card, and then “seals” those details onto each CNP transaction using built-in cryptographic library modules in browsers and servers. Stepwise proves to the merchant server that each CNP payment originated from a genuine credit card, under the control of the cardholder.

Stepwise was developed with the assistance of an Australian Government COMET Grant and the Australian Technology Showcase. It was a runner-up in the Asia Sesames Awards 2010, and was featured in the UK’s Finextra Innovation Showcase.

Stepwise can be deployed in a stand-alone mode, or it can be integrated with the card companies’ 3D Secure protocol as shown below.

Update to the slides: Lockstep’s US patent for the Stepwise CNP solution was granted in October 2012: Authenticating electronic financial transactions US 8,286,865.

Lockstep Integrating Chip with 3D Secure