Convenience and Security for banking customers with CA Advanced Authentication

20
World ® ’1 6 Convenience and Security for Banking Customers Andrew Steadman - Product Director-Agiliti - Fiserv SCX50S SECURITY

Transcript of Convenience and Security for banking customers with CA Advanced Authentication

Page 1: Convenience and Security for banking customers with CA Advanced Authentication

World®’16

ConvenienceandSecurityforBankingCustomersAndrewSteadman- ProductDirector-Agiliti - Fiserv

SCX50S

SECURITY

Page 2: Convenience and Security for banking customers with CA Advanced Authentication

2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation

Page 3: Convenience and Security for banking customers with CA Advanced Authentication

3 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Abstract

Securingtheirchannels,bothdigitalandstaffed,iskeyforabankbutthatoftencomesatthepriceofconvenienceforthebank’scustomer.

Applyingtheappropriatelevelofsecurityattheappropriatetimewillbebothconvenientforthecustomerandsecureforthebank,satisfyingtheneedsofboth.WewilldiscusshowCAAdvancedAuthenticationandtheFiservFinancialCrimeandRiskManagementsolution,Agiliti,allowsbankstoapplyrealtimeriskassessmenttodeterminetherightlevelofsecuritychallengetoensurethecustomerandbankareprotected.

AndrewSteadmanFiservProductDirector,Agiliti

Page 4: Convenience and Security for banking customers with CA Advanced Authentication

BalancingSecurityandConvenienceinBanking

Page 5: Convenience and Security for banking customers with CA Advanced Authentication

5 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Whatproblemwereweseekingtosolve?

• FinancialInstitutionCustomersinteractacrossmultiplechannels• Securelyidentifyingcustomershasplacedanonerousburdenoncustomers• ‘Agiliti’wantedtosimplifythisforcustomers• EverincreasingcomplianceandonusontheFinancialInstitutiontoprotect• PSD2isgoingtoaddbroadaccessrequirements

Page 6: Convenience and Security for banking customers with CA Advanced Authentication

6 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Makinga‘FasterPayments’transaction

?

Page 7: Convenience and Security for banking customers with CA Advanced Authentication

7 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Makinga‘FasterPayments’transaction- 2 Ways

Theyaredifferent!!

SecurityCode

PayanewBeneficiary

£250Limitfor1st Payment

NoLimitfor2nd Payment

UserID,PasswordandPIN

PayanewBeneficiary

NoLimitfor1st Payment

AuthorisedbyCardDevice

Page 8: Convenience and Security for banking customers with CA Advanced Authentication

8 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

How‘Agiliti’Solvesthatproblem

• Acombinationofcomponentsbuilttoasinglesolution

• Servicespublishedviaaservicebusenablesallchannels

• Realtimeassessmentofriskdeterminesthelevelofcredentialrequiredbythecustomer• UserID+Password• TemporaryPIN• OneTimePINdeliveredviaSMS• CherishedQuestions

Page 9: Convenience and Security for banking customers with CA Advanced Authentication

9 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

AssemblingthePieces

FiservCommunicatorAdvantage

FiservFinancialCrimeRiskManagementPlatform(FCRM)

CAAdvancedAuthentication(CAAA)

AuthenticationServices

Page 10: Convenience and Security for banking customers with CA Advanced Authentication

10 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

DeviceSignatures

• EverycalltotheAuthenticationServicescarriesadevicesignature• GeneratedbyCAclientsidelibrarieswithinApps• Generatedbyjavascript inbrowser• Valueisnotstoreonthedevice

• TrustedDevicesareidentifiedbyanArcotgeneratedIDwhichisstoredonthedevice

Page 11: Convenience and Security for banking customers with CA Advanced Authentication

11 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

TypicalProcess

Logon••UserID••StaticPassword••TemporaryPIN••RiskAnalysis– SMSOTP

OTPrequiredifhighrisk••Senttomobiledeviceknowntobecustomers

••Dualfactorauthenticationapplied

Customerexecutesatransaction••PredefinedtohavepermanentPINrequired

••Userfor‘highrisk’transactions

Transactionpatternisnot‘normal’forcustomer••CAAAOTPissuedafterFCRMidentifiesanoutofcharactertransaction

••Holisticriskassessment

Page 12: Convenience and Security for banking customers with CA Advanced Authentication

12 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

CAAdvancedAuthentication

Page 13: Convenience and Security for banking customers with CA Advanced Authentication

13 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

FinancialCrimeRiskManagementPlatform

• Leveragesorganisationalknowledgeisassessingrisk

• Assessesinrealtimetodeterminerisk

• CreatesaCustomerRiskScore

• DeliversanHolisticViewofFraud

Page 14: Convenience and Security for banking customers with CA Advanced Authentication

14 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

WhichChannelsareusingitinAgiliti?

• BranchandCallCentreplatform• ValidatessomenumbersfromPIN• NeitherpasswordnorPINrequiretobefullydisclosed• Usescherishedquestionsoverpassword• AllowsinputofOTPreceivedbycustomerviaSMS

• Web,Tablet,MobileandApps• All4digitalchannelsareusingthesamecredentials• Useofcredentialsisminimisedforabetteruserexperience

Page 15: Convenience and Security for banking customers with CA Advanced Authentication

15 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Wherearewenow?

• Solutionislivetothepublicwithanumberofinstitutions• Itissupportinginstitutionswithanewdigitalexperience• CustomerandMemberreactionhasbeenverypositive

Page 16: Convenience and Security for banking customers with CA Advanced Authentication

16 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Whatdoesitmeanforcustomers?

• Onesetofcredentialstoremember• Onlyaskedforminimalcredentialsbaseduponassessedrisk• Knowndevicesallowdatadisplaywithoutanyinput• Removetypicalapproachoflowestcommondenominatorsecuritymodel

Page 17: Convenience and Security for banking customers with CA Advanced Authentication

Thankyou

[email protected]

Page 18: Convenience and Security for banking customers with CA Advanced Authentication

18 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Don’tMissOurINTERACTIVESecurityDemoExperience!

SNEAKPEEK!

World®’16©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD18

Page 19: Convenience and Security for banking customers with CA Advanced Authentication

19 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Stayconnectedatcommunities.ca.com

Thankyou.

Page 20: Convenience and Security for banking customers with CA Advanced Authentication

20 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Security

FormoreinformationonSecurity,pleasevisit:http://cainc.to/EtfYyw


Call Center Authentication: Are Your Customers Who They Say They Are?

Call Center Authentication: Are Your Customers Who They Say They Are?

2015 - Amazon S3 · are giving customers more freedom and convenience than ever. Customers have the ability to look at their finances, ... April 2015 2. Clever improvements in apps

2015 - Amazon S3 · are giving customers more freedom and convenience than ever. Customers have the ability to look at their finances, ... April 2015 2. Clever improvements in apps

Introduction - Business Services and Digital Printing · Web viewThe system supports an installable RFID reader for authentication and convenience in certain configurations. This RFID

Introduction - Business Services and Digital Printing · Web viewThe system supports an installable RFID reader for authentication and convenience in certain configurations. This RFID

RESEARCH ARTICLE Evaluation of Authentication …Authentication Center (AUC): Authentication Center where all authentication algorithms are defined. The Authentication Centre (AUC)

RESEARCH ARTICLE Evaluation of Authentication …Authentication Center (AUC): Authentication Center where all authentication algorithms are defined. The Authentication Centre (AUC)

WHAT AUTHENTICATION OPTIONS ARE AVAILABLE?MACO (Multiple Authentication Convenience Options) Starting on 2/1/2018 credit unions can deploy MACO to their mobile app 2.0. MACO features

WHAT AUTHENTICATION OPTIONS ARE AVAILABLE?MACO (Multiple Authentication Convenience Options) Starting on 2/1/2018 credit unions can deploy MACO to their mobile app 2.0. MACO features

ì Second Factor Authentication (2FA) · Security v Convenience ì Google Advanced Protection Program ì Launched October 2017 ì Free (after buying hardware) ì Favors security over

ì Second Factor Authentication (2FA) · Security v Convenience ì Google Advanced Protection Program ì Launched October 2017 ì Free (after buying hardware) ì Favors security over

Security and Mutual SSL Identity Authentication for IoT · SSL authentication can work at scale for our customers’ IoT devices that are enabled, creating seamless customer experiences

Security and Mutual SSL Identity Authentication for IoT · SSL authentication can work at scale for our customers’ IoT devices that are enabled, creating seamless customer experiences

1. Firms should be fast and responsive. This requires responding to customers' needs for quality, variety, customization, convenience and timeliness.

1. Firms should be fast and responsive. This requires responding to customers' needs for quality, variety, customization, convenience and timeliness.

. Define authentication Authentication credentials Authentication models Authentication servers Extended authentication protocols Virtual.

. Define authentication Authentication credentials Authentication models Authentication servers Extended authentication protocols Virtual.

IN2120 Information Security · • Authentication frameworks for e-Government User Authentication IN2120 2. Taxonomy of Authentication User Authentication IN2120 3 Authentication

IN2120 Information Security · • Authentication frameworks for e-Government User Authentication IN2120 2. Taxonomy of Authentication User Authentication IN2120 3 Authentication

Security and authentication in a - Asseco Group · 2016. 4. 13. · Security and authentication in a way your customers will love it Zagreb, 07. 04. 2016 Viktor Olujić Authenitaction

Security and authentication in a - Asseco Group · 2016. 4. 13. · Security and authentication in a way your customers will love it Zagreb, 07. 04. 2016 Viktor Olujić Authenitaction

Convenience In a car · Zipcar, which merged with Flexcar in 2007, is a car-sharing service that puts customers in the driver’s seat when they need to be there. And, like many convenience

Convenience In a car · Zipcar, which merged with Flexcar in 2007, is a car-sharing service that puts customers in the driver’s seat when they need to be there. And, like many convenience

Outline User authentication –Password authentication, salt –Challenge-response authentication protocols –Biometrics –Token-based authentication Authentication.

Outline User authentication –Password authentication, salt –Challenge-response authentication protocols –Biometrics –Token-based authentication Authentication.

Security and efficiency of biometric solutions emphasis in 2013 with fingerprint – For convenience (unlock devices) – In-App authentication (App store) Real benefits lead to consumers

Security and efficiency of biometric solutions emphasis in 2013 with fingerprint – For convenience (unlock devices) – In-App authentication (App store) Real benefits lead to consumers

WE POWER COMMERCE Secure Enterprise Payment Integration ...€¦ · Payment Integration Solutions. Give Customers Payment Convenience and Security Commerce moves at a breathtaking

WE POWER COMMERCE Secure Enterprise Payment Integration ...€¦ · Payment Integration Solutions. Give Customers Payment Convenience and Security Commerce moves at a breathtaking

scane - nfifwi.comnfifwi.com/circular/CHAIRMANS SPEECH FOR...convenience but the preference would be to the convenience of the customers. Our survival and pole position will fully

scane - nfifwi.comnfifwi.com/circular/CHAIRMANS SPEECH FOR...convenience but the preference would be to the convenience of the customers. Our survival and pole position will fully

PACIFIC BEPURE INDUSTRY INC. - SEC...footwear for customers who are seeking good quality and comfortable shoes. • Helps customers seek relaxation. Both comfort and convenience are

PACIFIC BEPURE INDUSTRY INC. - SEC...footwear for customers who are seeking good quality and comfortable shoes. • Helps customers seek relaxation. Both comfort and convenience are

Chapter 12 Thwarting Attacks Leandro A. Loss. Introduction Benefits of Biometric Authentication: –Convenience (e.g. recall password, keep cards) –Security.

Chapter 12 Thwarting Attacks Leandro A. Loss. Introduction Benefits of Biometric Authentication: –Convenience (e.g. recall password, keep cards) –Security.

When Customers Win: Omnichannel Authentication in the Age of the Empowered Consumer

When Customers Win: Omnichannel Authentication in the Age of the Empowered Consumer

SafeNet Authentication Service Configuration Guide...The SafeNet Authentication Service Agent for SharePoint is designed to help Microsoft enterprise customers ensure that SharePoint

SafeNet Authentication Service Configuration Guide...The SafeNet Authentication Service Agent for SharePoint is designed to help Microsoft enterprise customers ensure that SharePoint