Entrust IdentityGuard MobileSoftware Development Kit                                                                      ...
It also enables financial institutions to incorporate additional              This transparent approach increases end-user...
Entrust IdentityGuard Mobile — Advantages                         Broad Platform Support. Supports the leading mobileSecur...
Entrust & You                                                                                      Company FactsMore than ...
Upcoming SlideShare
Loading in …5

Entrust IdentityGuard Mobile Software Developlment Kit (SDK)


Published on

Entrust's easy-to-use software development kit (SDK) helps financial institutions embed transparent and strong authentication right into their own mobile banking application. This seamless approach enables banks to enhance security for the online channel, including soft tokens and out-of-band transaction verification capabilities.

Published in: Technology, Economy & Finance
  • Be the first to comment

  • Be the first to like this

Entrust IdentityGuard Mobile Software Developlment Kit (SDK)

  1. 1. Entrust IdentityGuard MobileSoftware Development Kit Product Benefits • Provides financial institutions with aMobile devices are now the centerpiece to consumer lifestyles. From email simple approach to deploying two-factorcommunication, social networking, banking, commerce, shopping and authentication to the mobile sessionpersonal entertainment, mobile devices have enabled a radical shift in the without impacting the user experiencemanner in which organizations can now service their customers. • Leverages the mobile device to provide strong two-factor authentication and stops advanced malware attacks, suchFinancial institutions are certainly no exception to this transformation. In fact, as man-in-the-browserregulatory compliance, industry mandates and brand integrity typically place • Enhances the security of transactionsfinancial institutions in one of the most difficult positions. These organizations on mobile devices in a manner thatstrive to provide mobile services while ensuring customer identities and data is simple, quick and un-obtrusive forare protected. the user • Provides a single mobile application toBut the growth in mobile devices and the drive to move more services to the meet mobile and online security needsmobile channel has also increased incidences of fraud targeting these devices. • Support for leading mobile platformsWhether simple rogue text messages, fictitious billing scams, or more malicious including Apple iOS, RIM BlackBerry, Google Android and Microsoft Windowsattacks using malware installed on the device, the number of attacks are Mobile (6.0-6.5)increasing at an alarming rate. • Customizable to include organization- specific branding for increased userBuilding Confidence acceptanceFor many, the lack of security on these devices is a major inhibitor to their adoptionof mobile banking. As banks look to address these issues and capitalize on theopportunities of the mobile environment, they are also challenged by the needto bolster customer confidence in online banking.Organizations seek methods to properly enhance the security of transactionson these devices in a manner that is simple, quick and un-obtrusive for the user.Yet the proliferation of mobile devices offers financial institutions an opportunityto leverage the device itself to strengthen both online and mobile security, whileaddressing customer demand for extended mobile banking services.Simple & Strong Mobile AuthenticationWith Entrust’s easy-to-use software toolkit, it’s simple to leverage theEntrust IdentityGuard versatile authentication platform into mobile bankingapplications — bringing advanced identity-based security to mobile andonline channels.The Entrust Software Development Kit (SDK) enables banks to seamlessly embedstrong authentication into an application’s mobile session without requiring theuser to input a one-time passcode (OTP). This provides a simple and secure approachto protect a user when their password has been compromised.
  2. 2. It also enables financial institutions to incorporate additional This transparent approach increases end-user value and helpssecurity features into mobile banking applications to enhance build a consistent brand between the mobile applicationsecurity for the online channel, including soft tokens and and the bank’s online presence. The net result is a mobileout-of-band transaction verification capabilities. application platform that gives financial institutions an edge over competitors with progressive, cross-channel securityIntegrating strong authentication and transaction verification features that are simple to use and effective against today’sinto a mobile application is one of the most effective forms most advanced online fraud threats.of out-of-band transaction verification approaches. Whileout-of-band transaction verification using SMS or voice Designed for Developersdial-out transaction provides some protection against fraud For software developers creating mobile applications,attacks, these approaches rely on baseline telecommunication security is often a secondary concern. But because of itstechnology that has already been compromised. straightforward APIs, the Entrust IdentityGuard Mobile SDK allows developers to easily design and implementEntrust employs a highly secure, encrypted protocol between uniquely branded mobile applications without sacrificingthe server and the mobile device, to provide the most secure usability or transparency for end-user adoption.protection against malicious online threats. The SDK provides a number of capabilities that are invokedLead the Market, Enhance the Brand through a simple native platform API. With support forA branded mobile application provides a simple, easy-to-use Apple, Google Android, RIM BlackBerry and Java platforms,experience for customers. And embedding OTP technology the toolkit delivers a common API framework that allowsin a mobile device is more cost-effective than purchasing, developers to leverage integration efforts across multipleissuing and deploying hardware tokens because it leverages development environments.devices that are already widely deployed — increasinguser acceptance. Customer Deployment Mobile User Customer Mobile App Interaction with User Networking Mobile Application Interface Authentication (e.g., mobile banking) Server Storage Mobile SDK User Self Service Module Notification Handling Persistent On-Device Entrust IdentityGuard Mobile Supports: Storage • Transparent soft-token generation Notification • Visible soft-token display • Transaction verification capabilities Service (Optional)Figure 1: Entrust IdentityGuard Mobile SDK architecture overview
  3. 3. Entrust IdentityGuard Mobile — Advantages Broad Platform Support. Supports the leading mobileSecure. Proven mobile authentication that helps defeat smartphone platforms on the market today, includingadvanced malware, including man-in-the-browser attacks. Apple iOS, RIM BlackBerry, Google Android, and MicrosoftKey to interoperability, it leverages time-based, OATH- Windows Mobile (6.0-6.5).compliant OTP authentication and out-of-band transactionverification on leading mobile devices. Standards-Compliant. Uses the OATH standard for time-based, one-time passcode and transactionEasy to Use. The most convenient, easy-to-use strong signature generation.mobile authentication method available today,Entrust IdentityGuard Mobile enables out-of-band Customizable. Includes the ability to add organization-transaction verification, OATH-compliant signatures specific branding to each identity, improving usability andand even a method to immediately report suspicions reinforcing brand image.account behavior.The end-user isnt forced to enter any data within thesmartphone application, only a straightforward Webconfirmation code to complete the transaction online.Portable. Enables use of leading smartphones to boostauthentication strength by not requiring the user to carry anextra hardware device or have access to a specific computer.Cost-Effective. Unlike physical options, Entrust IdentityGuardMobile leverages the user’s existing phone; there’s noextra physical hardware to buy and deploy. In addition,Entrust IdentityGuard Mobile delivers transaction notificationsdirectly to the phone without the use of SMS.Flexible. Supports the use of both simple time-based OTPas well as out-of-band transaction signatures. Also supportsmultiple identities within the same application, enablingorganizations to fully leverage the deployed application(e.g., a banking ID as well as a corporate remote access ID).
  4. 4. Entrust & You Company FactsMore than ever, Entrust understands your organization’s Website: www.entrust.comsecurity pain points. Whether it’s the protection of Employees: 359information, securing online customers, regulatory Customers: 5,000compliance or large-scale government projects, Entrust Offices: 10 globallyprovides identity-based security solutions that are notonly proven in real-world environments, but cost-effective Headquartersin today’s uncertain economic climate. One Lincoln Centre 5400 LBJ Freeway, Suite 1340The smart choice for properly securing digital identities Dallas, Texas 75240 USAand information, Entrust solutions represent the rightbalance between affordability, expertise and service. SalesFor more information on Entrust IdentityGuard Mobile North America: 1-888-690-2424and the platform’s SDK, contact the Entrust representative EMEA: +44 (0) 118 953 3000in your area at 888-690-2424 or visit entrust.com/mobile. Email: entrust@entrust.comAbout EntrustA trusted provider of identity-based security solutions, Entrust empowers governments, enterprises and financial institutions in more than 5,000 organizationsspanning 85 countries. Entrust’s award-winning software authentication platforms manage today’s most secure identity credentials, addressing customer painpoints for cloud and mobile security, physical and logical access, citizen eID initiatives, certificate management and SSL. For more information about Entrustproducts and services, call 888-690-2424, email entrust@entrust.com or visit www.entrust.com.Entrust is a registered trademark of Entrust, Inc. in the United States and certain other countries. In Canada, Entrust is a registered trademark of Entrust Limited. All other Entrust productnames and service names are trademarks or registered trademarks of Entrust, Inc. or Entrust Limited in certain countries. All other company names, product names and logos are trademarksor registered trademarks of their respective owners. © Copyright 2012 Entrust. All rights reserved. 24281/4-11