HID Global Prevents Mobile Banking Fraud While Making It Easier for Users to Conduct Transactions

AUSTIN, TX--(Marketwired - Nov 18, 2015) -

News Highlights:

• ActivID® Trusted Transactions with Mobile Push is part of HID Global's latest ActivID Authentication Server release and a key element in company's layered authentication offering for digital banking.
• The out-of band verification solution uses transaction signing to improve mobile banking convenience and fraud protection during transaction notification and authorization.
• Relieves user frustrations with passwords and having to answer challenge questions, while eliminating vulnerability of security tokens delivered via Short Message Service (SMS) texts.

HID Global^[1]®, a worldwide leader in secure identity solutions, has enhanced its ActivID® authentication offering for digital banking with a push notification solution that gives financial institutions a secure channel and easy method for notifying customers about pending transactions on their phones or tablets, and then proceeding with execution after receiving their authorization. 

"Customers are finding it increasingly difficult to differentiate between legitimate websites, emails, and phone calls originating from their own bank versus those created by fraudsters, making it more difficult for them to spot fraudulent transactions," said Tim Phipps, vice president of product marketing, Identity Assurance with HID Global. "With our ActivID Trusted Transactions solution, banks can offer far more convenient out-of-band transaction notification and authorization on mobile devices, which provides customers real-time alerts prior to a suspicious transaction being applied to their account. This places the control back in the customer's hands by providing them with simple way to confirm the legitimacy of a pending transaction."

Financial institutions using mobile banking channels have typically relied on simple passwords or out-of-band transaction verification based on one-time passwords (OTP) tokens sent via SMS to customers' mobile devices. Cybercriminals have attacked the end-user's web browser or this insecure OTP authentication method with SMS malware to take over accounts and make unauthorized transactions, such as large money transfers. These attacks use a variety of phishing, vishing, SMS malware, man-in-the-middle and man-in-the-browser techniques and have eroded consumer confidence in digital banking. 

To solve this problem, HID Global's "phone-as-a-token" out-of-band verification solution uses transaction signing with private key cryptography over a trusted and secure electronic channel. All communication is encrypted with mutual authentication between the user's mobile device and the financial institution's online banking application. Transaction non-repudiation is ensured by generating the private key outside the financial institution's backend system and then protecting it to prevent extraction, cloning or access from another application. When a transaction is initiated, the ActivID Authentication Server uses its Mobile Push capability to send an authorization notification to the user's registered mobile device with all relevant information and a request to accept or reject it using the server's ActivID Mobile Signing Software Developer Kit (SDK). Signed responses are returned to the server, which validates and forwards them to the online banking system to grant or deny transactions. 

"Trust, total cost of ownership (TCO) and user experience (UX) vary among individual phone-as-a-token methods. Out-of-band (OOB) authentication using push modes offers the best balance of trust and UX, making it the best choice across many use cases," said Ant Allan, research vice president at Gartner.

Availability
HID Global's ActivID Trusted Transactions with Mobile Push capability is available now with the company's latest ActivID Authentication Server v7.3 release. Click here^[2] for more information. 

For more HID Global news, visit our Media Center^[3], read our Industry Blog^[4], subscribe to our RSS Feed^[5], watch our videos^[6] and follow us on Facebook^[7], LinkedIn^[8] and Twitter^[9].

About HID Global
HID Global is the trusted source for innovative products, services, solutions, and know-how related to the creation, management, and use of secure identities for millions of customers around the world. The company's served markets include physical and logical access control, including strong authentication and credential management; card printing and personalization; visitor management systems; highly secure government and citizen ID; and identification RFID technologies used in animal ID and industry and logistics applications. The company's primary brands include ActivID®, EasyLobby®, FARGO®, IdenTrust®, LaserCard®, Lumidigm®, Quantum Secure, and HID®. Headquartered in Austin, Texas, HID Global has over 2,200 employees worldwide and operates international offices that support more than 100 countries. HID Global® is an ASSA ABLOY Group brand. For more information, visit http://www.hidglobal.com^[10].

® HID, the HID logo and ActivID are trademarks or registered trademarks of HID Global or its licensors in the U.S. and/or other countries. All other trademarks, service marks, and product or service names are trademarks or registered trademarks of their respective owners.