Step one - Description: This step is the commencement of the transaction process and requires the participation of both the merchant and the customer. What the customer does: Clicks on the "submit" button to process an order. What the merchant does: Posts a Query String to CNWB which includes: 1. All the required "Request Parameters". 2. Optional "Pass Through" variables the merchant wishes to keep as part of the transaction session. What CNWB does: Creates a transaction session Token. This token is a unique identifier for this transaction process until the final customer Authorization is sent back to Merchant. Do not use this token as a reference beyond this transaction session. Sends Token and entire initial query string to Merchant. Step two - Description: This step is where the merchant shall receive the Token and Query String sent from CNWB and link that id with the customer record for this transaction. Customer is not involved in this process. What the merchant does: Captures the token from CNWB. Step three - Description: This step is the security component for the merchant’s customer. The process asks the customer for a password while shielding the user from having to share that information with the merchant by having the user talk directly to CNWB. What the customer does: Views message clue and enters password into response field. The customer has three tries to accomplish the correct password entry. What the merchant does: Redirects user to the password page on CNWB. This redirect must include the Token as a URL parameter. What CNWB does: Reads the token and provides the customer with the proper message clue. Validates user password and stores pass/fail information Step four - Description: This step is where the merchant shall receive the Token sent from CNWB and re-link that id with the customer record for this transaction. Customer is not involved in this process. What the merchant does: Captures the token from CNWB. What CNWB does: Sends Token to Merchant. Step five - Description: This step is a security measure to reaffirm that, in fact, the proper merchant is making a valid request and wishes to complete the transaction. As before the link that makes this identification possible is the Token. What the merchant does: Sends Token to CNWB What CNWB does: CNWB links the Password pass/fail with the Transaction pass/fail CNWB sends Response Parameters with token to Merchant Note: this ends the usefulness of the token from CNWB’s perspective. Step six - Description: This is the final step in the process. Here the Merchant receives the response codes from CNWB and then displays the appropriate information to the customer. What the merchant does: Receives Response information from Clear Card and then displays appropriate information to the customer. What CNWB does: Not involved in process. SeeDiagram for CNWB Authorization Example