MasterCard s Biometric Update MasterCard. Proprietary

Transcription

1

2 The Bad Guys are Getting Better Page 2 To effectively prevent fraud, companies must move beyond authentication methods that simply rely on passwords systems that rely on static passwords for security are left vulnerable Don t depend on passwords alone The weakness of passwords can no longer be tolerated No matter how complex, no matter how unique, your passwords can no longer protect you Passwords have been cracked since they were invented, but until recently it wasn t an issue that had widespread implications for most people. It s increasingly difficult to protect yourself from computer viruses and phishing1 attempts designed to intercept and collect your personal information The security value of a password is limited, if not negligible Most password schemes that aren't protected by another form of authentication or lockout controls are susceptible to brute-force attacks, in which automated tools are used to guess passwords In a world of rising identity theft, fraud and internal and external attacks, protecting your organization's valuable data and resources takes more than a simple user ID and password web crooks have ample malware that can intercept passwords

3 What is Biometrics? Page 3 Biometrics is the measurement and analysis of unique physical or behavioral human characteristics(e.g. fingerprint, voice) as a mean of verifying personal identity Biometrics provide a simple user friendly form of authentication. Something You Have VS Something You Are VS Something You Know The two main uses of biometrics are: Identification: Determining who a person is (i.e. trying to find a match for a person's biometric data in a database) Verification: Determining if a person is who they say they are by comparing their biometrics data to previously recorded data

4 How Biometrics Works? Example: Fingerprints Page Person registers by providing the system with fingerprint image Biometric algorithm extracts key features or patterns which are unique to an individual The extracted image is stored as a digital value Each subsequent attempt to use the system requires the biometric to be captured and the features/ or patterns to be extracted A match is confirmed once the extracted image is positively match with the template

5 Benefits of Biometric Authentication Security Features Page 5 Inability to Scale Attacks Layered security architecture including payment credential, device cryptography, and user biometric verification. Platform authenticates the source of all incoming authentication requests. Strong device based cryptography to prevent any Man in the Middle attacks. Biometric Replay Is Minimized Biometric will not be replayable as it linked to the device; cannot be used for creating new accounts. Intelligent Foundation Configurable policy manager to challenge when appropriate. Authenticating people, not PANS

6 Performance Testing for Biometrics* Page 6 Technology Accuracy Cost of the device Devices Social Acceptability Maturity technology Fingerprint scan Low- Scanner (phone) Iris recognition Camera (phone) Low Low Voice recognition Low Microphone (phone) Facial recognition Camera (phone) Palm (Veins) scan Low- - Scanner Signature Low Low- Optic, touch panel Keystroke Low- Keyboard Source: PBworks, Mercator Advisory Group * This information is evolving and it depends on the market level

7 What is Shared CVM? Page 7 A Shared Cardholder Verification Method (Shared CVM): Where the mobile device provides a single, shared cardholder verification method for all payment cards on a consumer device, compared with the current method where each payment card performs its own cardholder verification. Concepts related to Shared CVM include persistence, use of wearables, scoring, more data regarding source.

8 Q & A Page 8