Display Cards for Securing E Commerce

Transcription

1 Display Cards for Securing E Commerce Don Malloy Business Development Manager 10th February 2012 Salt Lake City

2 Nagra Kudelski Group Activity Lines Group Revenue 2010 : USD 1.1B Physical access solutions & Ticketing Digital TV Professional audio & hi-fi products Middleware & Interactivity Smart card technologies

3 Online Fraud up, up and here to stay Did you know that every time you go online, you re connecting to thousands of unknown networks and millions of their users? Daily attacks increased 93% last year alone: Major attacks in 2011 not just small companies without significant resources Apple, Google, Sony, & EMC Look at the list: one of the largest companies in the US, The leader in online economy, the leader in entertainment and the largest security company in the world. If this doesn t concern your organization it should.

4 How do they do it? Types of Hacks Worms Key Loggers Viruses Trojan Horses Password Cracking Spoofing (Phishing) Rootkit

5 Recent trends Criminals are getting bolder: Michaels Craft stores and Lucky s Supermarkets this past summer and fall Fraudsters impersonated Verifone employees and (upgraded the terminals), placied false keypads on top and recorder customer s card info and their pin #. The information was transmitted wirelessly to a partner waiting in the parking lot and the collected account # and pin were quickly sold on the black market. Before the person got home there would be charges rung up in the thousands $ Average hack at an ATM nets $20-30K more than 3X a regular bank robbery.

6 What is needed A more layered approach to security: Multifactor authentication would have prevented these attacks. Without the physical card in their possession the hacker would not be able to generate the one time password.

7 Security What is a Display Card? Control Convenience

8 What can Display Cards do? Multiple Applications Logical, Physical Access, Payment Payment Card: Standard banking functionalities Authentication Card: Supports 3DSecure Oath, CAP, Visa Codesure, Custom algorithms PIN protected access to OTP Information Card: Fingertip access to account balance, transaction history, expenses, reward points. Standard EMV script.

9 What can Display Cards do? Before Physical Access Control: All in one device : Logical/Physical access (HID, LEGIC, Mifare) Toda y Specialty Cards: Reward cards, Warranty cards, Acoustic cards, Light cards, Tip calculator

10 NIDS Single Button Series Single Button Display Card Powerful yet Simple 1 Button 6 Digit LCD Display RF Interface (HID, Mifare, Legic ) MasterCard Certified Features Easy to use button triggers OTP 6-digit display Event or time based OEM branding, OATH or CAP Secure contactless interface EAL5+ (on ES and TS version) ISO Type B Embossing

11 Physical Access TOUCH Keypad Secure access to networks, facilities and properties Personalization options All-in-one device

12 Account Protection Paypal Security Key Paypal provides clients extra layer of protection and cross compatibility Paypal Security Key also works with EBAY

13 Multi Button Display Card TOUCH Keypad A breakthrough in card interactivity 12 button TOUCH KEYPAD 6-Digit LCD Display RF Interface (HID, Mifare, Legic ) MasterCard Certified Features Unique TOUCH keypad Bright flexible 6-digit LCD display Oath or CAP, OCRA LaserEngraving Secure contactless interface EAL5+ IC (ES and TS version) ISO Type B

14 Over the Phone Example of Challenge Response Client Business Client Business The client calls an establishment to make a high valued transaction over the phone The establishment gives the client a verification code (challenge) to enter into the TOUCH Keypad on their card Once the card verifies the challenge code it generates a response code The establishment verifies the clients response code and the request can securely be completed over the phone

15 Information Display Card Interconnected EMV Chip Fingertip access to critical information Interconnected EMV Chip / dual interface Paypass Certified 6-digit display Up to 12 button TOUCH keypad MasterCard Certified Standard EMV chip technology updates the information every time the card is authorized online.

16 Communicate with Cardholder 526 Information Card Card can be updated at any EMV POS terminal Display Updated Account Balance Fingertips access to transaction history All standard Payment Functionality

17 Information Card in Action

18 VISA CodeSure Dot Matrix Display Features New DOT MATRIX screen enables display of virtually any characters Unique TOUCH Keypad Secure contactless interface EAL5+ IC (ES and TS version) ISO Type B Multi Applications Card OTP Pin activation Challenge/response Payment Card..more features to come

19 Convenience TOUCH Keypad Innovation NID Security s TOUCH Keypad Display Cards eliminate the need to carry around an additional cumbersome keyfob and/or card reader Single device cuts back on handling and management costs Single device is more environment friendly, reduces the use of resources

20 MasterCard Research Public Information % of consumers would apply for a MasterCard Debit Balance Display Card if offered by their bank. 71% of consumers are concerned about the level of risk when purchasing online. 60% of card payment fraud is associated with Cardholder Not Present transactions 80% of acceptors of Display Cards would use their cards once a week and 57% would spend more the amount consumers are willing to pay for display cards. 70% of call centre calls come from mobile phones, of which 50% are simple balance enquiries. Celent, Financial Services Technology Magazine, Issue 5

21 VISA Europe Research 8 European banks, thousands of consumers 90% 90% of consumers said they wanted to use the card for logging into more than online banking 86% 86% of consumers were reassured about the bank s approach to security. 97% 97% rated the bank high in terms of innovation 70% 70% said that they would use their cards for card not present more often 36 Research showed that French consumers are willing to pay 1 per month

22 Summary

23 What Do Consumers Seek Security Control Convenience

24 End of Presentation Thank you Swiss Headquarters Crêt du Locle 10 P.O. Box La Chaux de Fonds Switzerland t: +41 (32) U.S. Office 8615 Washington Blvd Los Angeles, CA USA t: (310) w: e: