Visa EAS Server (Extended Access Service) is a server used in Visa’s authentication infrastructure. It was developed specifically within the framework of Visa Secure (3-D Secure 2.x) to carry out the cardholder authentication process securely between banks and the Visa network.
Basic Definition
The EAS Server is an authentication component, used by the card-issuing bank or its technical service provider, that complies with EMV® 3-D Secure standards.
By verifying the cardholder’s identity in online purchases, this system reduces fraud risk. It can operate under Visa’s management, or banks can host it in-house.
Responsibilities of the EAS Server
- Manages authentication requests.
It receives the 3-D Secure (AReq) requests that arrive during online transactions and applies the steps required to verify the cardholder’s identity. - Communicates with the Visa Directory Server.
It checks whether the card falls within Visa Secure and performs the relevant routing. - Connects to the ACS (Access Control Server).
If the bank uses its own ACS solution, the EAS Server acts as a bridge between that solution and the Visa network.
If Visa’s managed EAS-hosted ACS solution is preferred, the process is operated end to end by Visa. - Ensures EMV 3-D Secure 2.x compliance.
It supports advanced security methods such as dynamic risk-based authentication, tokens and biometric verification.
Architectural Position
The simplified data flow is as follows:
Cardholder (Mobile App/Web)
↓
Merchant (Merchant Plug-In)
↓
Visa Directory Server
↓
Visa EAS Server (Issuer Side)
↓
Issuer (Bank)
This structure ensures that 3-D Secure transactions are carried out securely over the Visa network.
Why It Matters for Banks
- Visa’s EAS infrastructure simplifies the 3-D Secure certification process.
- For banks that do not want to build their own ACS infrastructure, it can be used under the Visa Managed Service model.
- It ensures full compliance with PCI DSS and EMV 3DS requirements.
- It offers flexible deployment options, either on-premise or Visa-hosted.
Quick Summary
| Title | Description |
|---|---|
| Full Name | Visa Enterprise Authentication Server |
| Role | Manages cardholder authentication |
| Use Case | Visa Secure (3-D Secure 2.x) transactions |
| User | Issuer banks and Visa participants |
| Purpose | Preventing fraud and enabling secure transactions |
| Model | Visa-hosted or bank-specific setup |
