It requires the card holder to enter a password (only if the card holder is enrolled) as an additional step to entering their credit card details that is verified by the issuing bank.
Once the issuing bank has verified the password, the user is then redirected back to the merchants web site.