eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant...
Transcript of eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant...
![Page 1: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/1.jpg)
eBanking Security
Zoltan Szalai Presales Technical Consultant
![Page 2: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/2.jpg)
Footer, 20xx-xx-xx 2 Footer, 20xx-xx-xx 2
Company Overview
#
eBanking & eCommerce 2
![Page 3: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/3.jpg)
CONSULTING SERVICES
CARDS & PAYMENT SOLUTIONS
ARTWORK SOLUTIONS
ISSUANCE SOLUTIONS
POST-ISSUANCE SOLUTIONS
TRUSTED SERVICE MANAGEMENT
E-BANKING SECURITY
E-COMMERCE CORPORATE ACCESS SECURITY
CRM TOOLS
MOBILE FINANCIAL SERVICES
EMV MIGRATION MOBILE NFC IMPLEMENTATIONS CHIP TECH TRAINING PROJECT MGMT & KNOWLEDGE TRANSFER
EMV EMV WHITE LABEL COUNTRY SPECIFIC EMV MULTI-APP CONTACTLESS (CARDS, STICKERS & MICRO-SD) DISPLAY INTERFACE CARD BODY & FINISHING OPTIONS
CUSTOMIZED CARD DESIGNS FAST TRACK SAMPLES ARTWORK DEV TOOL SMALL BATCH SOLUTIONS
PERSONALIZATION SERVICES SECURE PACKAGING & FULFILLMENT CENTRAL ISSUANCE INSTANT ISSUANCE DISTR. ISSUANCE PIN BY SMS INVENTORY MGMT
CARD COMPANION SMART PHONE APP
TSM FOR SERVICE PROVIDERS
AUTHENTICATION & TRANSACTION SIGNING
3D-SECURE SOLUTIONS CARD-PRESENT SOLUTIONS
TRADERS’ SINGLE SIGN-ON CORPORATE NETWORK ACCESS
DIRECT MARKETING ON MOBILE
MOBILE PAYMENT MOBILE NFC MOBILE MONEY MOBILE WALLET MOBILE BANKING MOBILE ID CERTIFIED SMS
eBanking & eCommerce 3
Gemalto for Banks
![Page 4: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/4.jpg)
Recognized by Gartner as a global eBanking leader
eBanking & eCommerce 4
“A wide range of authentication methods... used across the broadest range of use cases”
“Gemalto’s reference customers were very or extremely satisfied with customer support”
”The strongest position in the user authentication market”
Completeness of vision
Abi
lity
to e
xecu
te
Niche players Visionaries
Leaders Challengers
![Page 5: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/5.jpg)
We are the trusted partner for financial services and retail institutions worldwide
eBanking & eCommerce 5
![Page 6: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/6.jpg)
Банк ВТБ
Райффайзен Банк
Возрождение Банк
Московский Индустриальный Банк
Other Banks:
• LipetsCombank • Bank Primorie • Surgutneftegas Bank
Local References
eBanking & eCommerce 6
![Page 7: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/7.jpg)
Footer, 20xx-xx-xx 7 Footer, 20xx-xx-xx 7 eBanking & eCommerce 7 7
Frauds & Mitigation #
![Page 8: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/8.jpg)
Fraud is constantly evolving
WHALING
ID THEFT KEY/SCREEN
LOGGING
PHARMING
PHISHING
MAN-IN- THE-MIDDLE
MAN-IN- THE-BROWSER
SHOULDER SURFING
SOCIAL ENGINEERING
CROSS CHANNEL ATTACKS
CONTRACTUAL FRAUD
RELAY ATTACK
eBanking & eCommerce 8
STATIC PASSWORDS
ONE TIME PASSWORDS
CHALLANGE
RESPONSE
TRANSACTION DATA SIGNING
TRANSACTION VERIFICATION
![Page 9: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/9.jpg)
Transaction Data Signing
eBanking & eCommerce 9
Browser – www.ebank.com
Enter account: 327438-463393 and amount: $1,900,000.00
194 629 376 Response:
OK
Data 3 or OK : <OK>
Response: 194 629 376
Data 1 or OK: 327438463393
Data 2 or OK : 1900000
PIN: ****
SUCCESSFUL AGAINST MAN-IN-THE MIDDLE
![Page 10: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/10.jpg)
eBanking & eCommerce 10
Challenge: 986 523
Enter PIN: ****
Response: 567 890
LOW RISK TRANSACTION
Challenge: 635 265
Amount: 5 000,00
Enter PIN: ****
Response: 723 905
Currency: 1) EUR 2) USD 3) GBP...
HIGH RISK TRANSACTION
Challenge
Risk Dependent Contextual Signing ASK THE RIGHT QUESTIONS AT THE RIGHT TIME
![Page 11: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/11.jpg)
Sign-What-You-See THE NEXT GENERATION USER-AWARENESS INCREASING TECHNOLOGY
Amount: $125 000 Interest rate: 3.67%
PC
Signing device
Secure Signing Interface
Mr. Doe, your house mortgage contract.
Amount: $125 000 Interest rate: 3.67%
OK
OK
PIN? **** OK
Mortgage contract signed. eBanking & eCommerce 11
![Page 12: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/12.jpg)
Footer, 20xx-xx-xx 12 Footer, 20xx-xx-xx 12 eBanking & eCommerce 12 12
Authentication Solutions
#
![Page 13: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/13.jpg)
eBanking & eCommerce 14
ANY BACK-END
ANY TECHNOLOGY
ANY FORM FACTOR
ALL CHANNELS
ALL SEGMENTS
ALL USE-CASES
MOBILE PC TABLET PHONE
TOKENS READERS USB DISPLAY CARD
MOBILE TOKEN
SOFTWARE OTHER VENDOR
PKI OATH CAP PROPRIETARY
EZIO SERVER
CORPORATE RETAIL PRIVATE
E-BANKING E-COMMERCE
OTHER SERVER
EZIO TOOLKIT
![Page 14: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/14.jpg)
Use security already in place Leverage the EMV card deployment
Feel free to choose your supplier Rely on a proven and widely deployed standard
Long-term vision Invest in scalable security
Offer the right solution to the right customer segments
Choose from a variety of form factors
Deploy a complete and consistent security solution
Apply security on all channels, including mobile and tablet
Key drivers for CAP solutions
eBanking & eCommerce 16
![Page 15: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/15.jpg)
Feel free to choose your supplier Rely on a proven and widely deployed standard
Long-term vision Invest in scalable security
Offer the right solution to all customer segments
Count on a large choice of form factors
Deploy a complete and consistent security solution
Apply security on all channels, including mobile and tablet
eBanking & eCommerce 17
Key drivers for OATH solutions
![Page 16: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/16.jpg)
eBanking & eCommerce 18
Key drivers for PKI solutions Long-term vision
Global users relying on regularly maintained public standards
Move to a paperless relationship Covers all authentication, privacy and confidentiality aspects Allows to sign all data regardless of size and format
Maximize confidence in a dematerialized relationship
Provide legal non-repudiation framework to your applications. Over 30 years field proven resistance to attacks
Interoperate with all channels Compatible flows and mechanisms between eBanking, eCommerce and eGovernment infrastructures
![Page 17: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/17.jpg)
eBanking and eCommerce 20
High end-user acceptance For frequent signing users The ‘real’ Chip&PIN experience Can be used in connected and/or unconnected mode
Innovative Scalable security Transaction verification (SWYS) Extendable usage: PKI support
Brand vector Fully customizable to reflect the bank’s image
Easy deployment Easy installation thanks to Enex Experience from worldwide fulfillments
Ezio Shield Pro Connectable Reader
![Page 18: eBanking Security zoltan.pdf · secure packaging & fulfillment . central issuance . instant issuance . distr. issuance direct marketing. on mobile. pin by sms . inventory mgmt . card](https://reader033.fdocuments.us/reader033/viewer/2022042809/5f921273bd78906db6221b63/html5/thumbnails/18.jpg)
Ezio PC PIN-Pad Peace-of-mind use for desktop PKI users & frequent signatories
eBanking and eCommerce 21
Increased user confidence Keep your PIN safe from infected PCs and key logging malwares Prevent fraudulent signatures without your explicit consent
High end-user acceptance Reduced dimensions and enlarged display for friendly use Clear messaging for PIN operation guidance
Innovative Class 4 reader compliant with Secure PIN entry standards Fits multi-channel use for eBanking and eGovernment