DISCOVER CIDWAY<br />Securing POS Transactions<br />2009<br />
Secure PoS  transaction using Cidway<br />Online<br />@ PoS<br />Send Instructions<br />Send Confirmation<br />Cidway<br /...
Value Added<br />User Convenience<br /><ul><li>No waiting time for sms
Easy & simple to Use
Can be used for other channels (ATM, mBanking, etc.)</li></ul>Security<br /><ul><li>Strong authentication of transactions ...
Patented PIN Protection on the Mobile (prevents cloning, hacking, etc.)</li></ul>Return on Investment<br />No cost of sms<...
Lower transactions’ cost & dispute support
Improve customer acquisition & retention
Enable innovative & revenue generating services</li></ul>Ease of Deployment<br /><ul><li>Mobile carrier independent
Handset independent
Online scenario can use what has been modified for the smsotp</li></li></ul><li>CORPORATE BACKGROUND<br />
CIDWAY – Background<br />Cidway<br /><ul><li>Created in December 2005
Head Quarters in Lausanne, CH
Sales Offices in Switzerland & UK
Internal R&D & Patent Office</li></ul>Partners and Customer Services<br /><ul><li>Global presence via partners & resellers
Support center 24/7
Upcoming SlideShare
Loading in...5
×

Cidway Securing POS Transactions

844

Published on

Securing POS transaction using mobile phone

0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total Views
844
On Slideshare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
0
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

Cidway Securing POS Transactions

  1. 1. DISCOVER CIDWAY<br />Securing POS Transactions<br />2009<br />
  2. 2. Secure PoS transaction using Cidway<br />Online<br />@ PoS<br />Send Instructions<br />Send Confirmation<br />Cidway<br />Systems<br />Open MobileCard<br />Input PIN<br />Code is Displayed on the Phone<br />Input on the PoSteminal (after swiping the Card):<br />Code (displayed on the phone)<br />Payment Processor / Issuer / Acquirer<br />Offline<br />@ PoS<br />POS includes<br />Cidway<br />Systems SPA<br />Authenticate Transaction<br />Open MobileCard<br />Input PIN<br />Code is Displayed on the Phone<br />Input on the PoSteminal (after swiping the Card):<br />Code (displayed on the phone)<br />
  3. 3. Value Added<br />User Convenience<br /><ul><li>No waiting time for sms
  4. 4. Easy & simple to Use
  5. 5. Can be used for other channels (ATM, mBanking, etc.)</li></ul>Security<br /><ul><li>Strong authentication of transactions (based on time-based OTP)
  6. 6. Patented PIN Protection on the Mobile (prevents cloning, hacking, etc.)</li></ul>Return on Investment<br />No cost of sms<br /><ul><li>Lower the cost of acquisition & maintenance
  7. 7. Lower transactions’ cost & dispute support
  8. 8. Improve customer acquisition & retention
  9. 9. Enable innovative & revenue generating services</li></ul>Ease of Deployment<br /><ul><li>Mobile carrier independent
  10. 10. Handset independent
  11. 11. Online scenario can use what has been modified for the smsotp</li></li></ul><li>CORPORATE BACKGROUND<br />
  12. 12. CIDWAY – Background<br />Cidway<br /><ul><li>Created in December 2005
  13. 13. Head Quarters in Lausanne, CH
  14. 14. Sales Offices in Switzerland & UK
  15. 15. Internal R&D & Patent Office</li></ul>Partners and Customer Services<br /><ul><li>Global presence via partners & resellers
  16. 16. Support center 24/7
  17. 17. Support portal available for partners
  18. 18. Consulting services</li></ul>CIDWAY’s Vision<br />Authentication and transactions should be safe, reliable and easy for anyone, anywhere, anytime<br />This vision is fuelled by:<br /><ul><li>Meeting virtually all authentication requirements
  19. 19. Making Authentication & Transactions simple, easy, accessible, secure and user friendly
  20. 20. Addressing virtually unlimited vertical applications from one platform
  21. 21. Providing the next generation mobile software security solution for identity, transaction and data protection</li></li></ul><li>Secure Identity, Authentication & Transactions<br />Banking& Finance<br />E-Banking, Mobile-Banking, Transactions signature, Phone Banking, ATM & POS anti-fraud…<br />Mobile Application’s Providers<br />Securing access & transactions for mobile applications (e/m-Commerce, e/m-Gambling, sms authentication…)<br />Mobile Money & Payment<br />P2P mPayment, cardless ATM cash withdrawal, POS mPayment, Bill payment…<br />Enterprise resource access<br />Two-factor authentication to Login to the Desktop / VPN access / Applications / Citrix / Webmail…<br />Homeland Security<br />Airline pilot & vehicle identification<br />physical security solutions (guard exchange id., biometric implementation, etc.) <br />Telecommunications<br />Mobile Top-up, resources access, ASP authentication solution, SIM based OTP…<br />E-Government services<br />Citizens authentication & transaction security, electronic & mobile voting, bill payment…<br />Enable new channels - Improve client’s confidence & loyalty – Lower TCO<br />
  22. 22. PRODUCT PRESENTATION<br />
  23. 23. CIDWAY GAIA / SESAMI Product Line<br />One server for multiple tokens<br />SESAMI SlimTime based OTP Hardware token<br />SESAMI MobileTime based OTP Software token for mobile phones.<br />SIM enabled<br />GAIA ServerAuthentication platform<br />GAIA SDKAuthentication platform SDK<br />SESAMI Mobile SDKTime based OTP Token SDK for mobile phones<br />SESAMI SMSSMS based OTP for mobile phones<br />SDK: Software Development Kit<br />
  24. 24. CIDWAY SESAMI Mobile<br />FEATURES & CHARACTERISTICS<br />Security<br /><ul><li>Time based OTP with time stamping, Digital Signature
  25. 25. OTP time management to the second
  26. 26. Protection against theft or loss of mobile phone: PIN not stored on Mobile, neither transmitted, neither stored on the server (patented solution)
  27. 27. PIN Code selected by the User (no need for temporary PIN sent to the User)</li></ul>Compatibility<br /><ul><li>Large handset coverage (Symbian, Java, WinCE, Brew, Blackberry, iPhone*)
  28. 28. Automatic time synchronization (support of any clock change on the mobile)
  29. 29. Multiple transmission methods (Screen display, SMS, WAP, MMS, GPRS, Acoustic, NFC*…)</li></ul>Functionalities<br /><ul><li>2-factor authentication (User authenticated by the Server)
  30. 30. 2-way authentication (server is authenticated by the User)
  31. 31. Transaction’s signature (guarantee the integrity of transactions, against MitM)
  32. 32. Automated registration
  33. 33. Time Traceability
  34. 34. Mobile SDK for integration into any existing mobile application </li></ul>(*) S1-2009<br />
  35. 35. CIDWAY Download (Sesami Mobile only)<br />Download<br />Over the Air (Push, Pull)<br />eMail<br />PC Download<br />Pre-loaded<br />Bluetooth<br />Etc.<br />Registration Options:<br />Automatic WAP registration<br />Manual user registration<br />Download Site (sample)<br />
  36. 36. BUSINESS CASES<br />
  37. 37. CIDWAY Multi Channel authentication for Banks<br />ONLINE BANKING<br />MOBILE BANKING<br />PHONE BANKING<br />DESKTOP LOGIN<br />REMOTE ACCESS / VPN<br />DOCUMENT SIGNATURE<br />& DATA<br /> CORROBORATION<br />ANTI-FRAUD ATM<br />SMS / EMAIL<br />AUTHENTICATION<br />Improve ROI & Enable new Channels<br /><ul><li>Rationalize the number of authentication solutions
  38. 38. Lower the cost of acquisition & maintenance
  39. 39. Lower the cost of deployment & replacement
  40. 40. Lower transactions’ cost & dispute support
  41. 41. Improve customer acquisition & retention
  42. 42. Enable innovative & revenue generating services</li></ul>Simplify User Experience<br /><ul><li>Choice of device (mobile software, hardware, sms)
  43. 43. A device that the User already has (mobile phone)
  44. 44. Simple & easy to use
  45. 45. One application for many services</li></ul>Security<br /><ul><li>A very high level of security, using time based OTP, with 2-way authentication & Transaction’s signature, combine with a unique & patented PIN and secrets protection on the Mobile phone.</li></ul>Integration<br /><ul><li>Easy to integrate within existing bank infrastructure (Gaia Server or SDK)
  46. 46. Mobile SDK for integration in any existing mobile application
  47. 47. Scalable & fail-safe solution
  48. 48. Easy deployment (internal tools or Lotaris)</li></li></ul><li>What makes us different from competition?<br />TECHNOLOGY<br /><ul><li>PIN & Data protection- Ability to protect secret and sensitive data in mobile phones and PDAs, using Cidway patented solution
  49. 49. Registration and Activation - Ability to ensure convenient & secure registration procedure for CIDWAY mobile tokens
  50. 50. Time Management- Ability to time-stamp the OTP and Transaction Signature to the second and to allow an off-line (after-the-fact) verification of the OTP or the Signature.
  51. 51. Automatic Time Synchronization- Ability to fix in a transparent way for the user and the server the time drift between the token and the server, even if the token is a mobile application.</li></ul>UNIQUE RESPONSE TO MARKET NEEDS<br /><ul><li>2-Factor Authentication – using a time-based OTP generated autonomously on a mobile phone
  52. 52. 2-Way Authentication – ensuring the User he’s connected to the right server
  53. 53. Transaction Signature – preventing MitM attacks, with uniquely customizable fields
  54. 54. Mobile SDK – seamless integration into any mobile application ensuring the simplest User experience </li></li></ul><li>CIDWAY USPs<br />Convenience<br />A device the User already has<br />Carrier & Handset independent<br />One application for multiple usage<br />Transparent to the User (when integrated into a mobile application)<br />Cost Optimization<br />Low acquisition, deployment and maintenance costs<br />Multi-channel solution<br />Transaction’s cost reduction and customer retention<br />Security & Functionalities<br />Time based OTP algorithm with time stamping<br />Unique PIN & Secret protection on the Mobile (patented)<br />2-way authentication<br />Transaction Signature (with unique customizable fields)<br />Flexibility<br />Easy to integrate within existing infrastructure<br />Scalable solution<br />Mobile SDK to integrate into any mobile application<br />
  55. 55. CIDWAY Some of our Clients, Partners & on-going initiatives<br />
  56. 56. THANK YOU FOR YOUR ATTENTION<br />For more information, contact:<br />Laurent FILLIAT<br />VP Strategic Business<br />Mob. +41 78 842 11 47<br />Tel. +41 21 331 27 00<br />Fax +41 21 331 27 09<br />Email: laurent.filliat@cidway.com<br />

×