HID Global has revamp its ActivID authentication offering for digital banking with a push notification solution that gives financial institutions a secure channel and easy method for notifying customers about pending transactions on their phones or tablets, and then proceeding with execution after receiving their authorization.
“Customers are finding it increasingly difficult to differentiate between legitimate websites, emails, and phone calls originating from their own bank versus those created by fraudsters, making it more difficult for them to spot fraudulent transactions,” said Tim Phipps, vice president of product marketing, Identity Assurance with HID Global. “With our ActivID Trusted Transactions solution, banks can offer far more convenient out-of-band transaction notification and authorization on mobile devices, which provides customers real-time alerts prior to a suspicious transaction being applied to their account. This places the control back in the customer’s hands by providing them with a simple way to confirm the legitimacy of a pending transaction.”
Claimed to bar the growing attacks of phishing, vishing, SMS malware, man-in-the-middle and man-in-the-browser techniques – HID Global’s “phone as a token” out-of-band verification solution uses transaction signing with private key cryptography over a trusted and secure electronic channel.
Transaction non-repudiation is ensured by generating the private key outside the financial institution’s backend system and then protecting it to prevent extraction, cloning or access from another application. Amid of a transaction, the ActivID Authentication Server uses its Mobile Push capability to send an authorization notification to the user’s registered mobile device with all relevant information and a request to accept or reject it using the server’s ActivID Mobile Signing Software Developer Kit (SDK). Signed responses are returned to the server, which validates and forwards them to the online banking system to grant or deny transactions.
“Trust, total cost of ownership (TCO) and user experience (UX) vary among individual phone-as-a-token methods. Out-of-band (OOB) authentication using push modes offers the best balance of trust and UX, making it the best choice across many use cases,” said Ant Allan, an analyst with Gartner.
HID Global’s ActivID Trusted Transactions with Mobile Push capability is obtainable with the company’s latest ActivID Authentication Server v7.3 release.