ecommerce Stages of Authentication Dynamic Factor Authentication

Transcription

1 ecommerce Stages of Authentication Dynamic Factor Authentication Card Data, name & Password MagnePrint Score card swipe Password Name Hardware authentication Mutual device authentication Single factor authentication Faster login Web app Guards against phishing Guards against bots/scripts Multi-factor authentication Unique user authentication Card authentication Enhanced user experience Faster checkout Card present purchase Guards against keystroke logging Ability to share SCRAs Stage 1 Stage 2 Stage 3 Stage 4 Magensa is a fraud prevention, detection and advisory service. It maintains a globally accessible registry of authentication information so that consumers, financial institutions, retailers, businesses and governments can assess the validity and trustworthiness of the credentials and products they rely upon in the course of online identification, payment, and other important transactions. Additionally, Magensa provides token management and cryptographic services, vital to the protection of cardholder data, the payment system, and personal or sensitive information. Magensa is a subsidiary of MagTek, Inc. Copyright 2012 Magensa All rights reserved. Page 1 of 5 PN rev 01 2/12

2 Stage 1: Hardware authentication Enhance your user experience with secure mutual authentication for mobile and online transactions. The secure card reader authenticator is a secure that performs mutual authentication to the web or mobile apps and host, guarding against automated phishing bots and scripts, transparently and securely logging users into their stored accounts. Stage connects SCRA to the SCRA manually enters submits to website standard procedures. 10 Copyright 2012 Magensa All rights reserved. Page 2 of 5 PN rev 01 2/12

3 Stage 2: Hardware authentication and username Make login easier and more secure by using secure card reader authenticators and a username. The replaces the need to remember passwords and delivers mutual device/host authentication and when used with a username also provides multi-factor authentication. Login is easier checkout is faster resulting in lower cart abandonment. connects SCRA to the SCRA Data secure: enters Name and submits. Website validates Name. 1 1 manually enters submits to website. 1 Website sends. standard procedures Name Copyright 2012 Magensa All rights reserved. Page 3 of 5 PN rev 01 2/12

4 Stage 3: Hardware authentication and username and password s can enter in their current username and passwords but have the added security of the to perform mutual device/host authentication. This introduces transparent multi-factor authentication without changing your current login process. connects SCRA to the SCRA enters Name, and Password. Data: Website validates Name & Password 1 1 manually enters submits to website. 1 Website sends. standard procedures Password Name Copyright 2012 Magensa All rights reserved. Page 4 of 5 PN rev 01 2/12

5 Stage 4: Hardware,, Card, cardholder authentication For maximum security, use the for mutual device/host authentication and use a card swipe for card and user authentication. This takes security to the highest level, providing card present authentication. The username can be extracted directly from the authenticated card for unparalleled transaction authentication, while at the same time transparently and securely logging users into their stored accounts. connects SCRA Magensa to the SCRA Card data: Secure via 3DES Encryption and ; name & password:, name & password swipes card in SCRA. Name resides on card., name & password 1 Website sends Encrypted Card Data to Magensa Website verifies user name and uses Magensa data to authenticate the customer 1 Magensa decrypts card data & authenticates MagnePrint Data Magensa sends Decrypted Card Data & MagnePrint Score to Website 1 Enhanced Experience: swipes card to auto enter any form or payment data, then submits. 1 1 Website sends. Website sends Encrypted Card present Card Data to Magensa 1 Magensa decrypts card data & authenticates MagnePrint Data 1 1 Website authenticates the customer and payment form and completes service per standard procedures. 1 Magensa sends Decrypted Card Data & MagnePrint Score to Website Card Data, name & Password MagnePrint Score card swipe Copyright 2012 Magensa All rights reserved. Page 5 of 5 PN rev 01 2/12