 Customer authentification is important, as well as data privacy protection. Security is organized into different layers : the data itself, stored in the mobile phone memory for example, the protocol of transportation and its different layers itself -including TCP layers and Operator transportation-; the software itself including our secure Gateway. Attacks scenarios and defense procedures are redundants within each layer for a better protection. We use a mix of public domain algorithms as well as in-house cryptography specific code to transmit data over the air. As for security reasons, we do not specify on our web site the detailed technical characteristics of our highly secured infrastructure. - Access control
A code pin is needed to enter in the Mobile Software application. If the customer looses its pin number, he will have to install the Mobile Software again and memorize the pin code he entered in the time at the first use.
- Transaction control
For each transaction a login and a password are needed, as often with Internet Banking solutions.
- Authentification
In the case of a steal, authentification prevents unauthorized acess to bank information for example. Authentification layer is customized for each project, according to the existing multi-channel security components, and to country specific laws and technical possibilities : handset number, SIM Card number, Credit card secure code.
- Encryption
We use https 128 bits and a specific encryption algorythm over http in some integration scenarios. One Time Passwords are used for each transmission.
- Integrity of the mobile application
Each Mobile Software is tagged as a unique delivery for one customer. It is possible to disable one specific deployed application with its unique ID. J2ME Applications deployed thru Bluetooth cannot be taggeg.
- Hacking of the mobile application
Developers are trained to use specific development methods to obtain a secured code. Also specific obfuscators are tuned to match the highest security levels.
In the case of MVNE Banks or Joint Venture between Mobile Operators and financial institutions, unique information stored in the SIM card may be used. GSM Number and mobile device core configuration information can also be used for authentification purpose.
|
