SlideShare ist ein Scribd-Unternehmen logo
1 von 20
Downloaden Sie, um offline zu lesen
Building a secure banking environment

DIGIPASS BY VASCO
®

The world’s leading software company specializing in Internet Security
Corporate profile

WE AUTHENTICATE
THE WORLD
VASCO® is a leading supplier of strong authentication and e-signature solutions and services specializing in Internet security.
Every day, VASCO helps customers around the globe to deploy strong authentication solutions. We have customers in over 100
countries that use VASCO products to secure many different applications and online transactions.

Full option, all-terrain authentication

Core activities

VASCO’s full option approach ensures that all authentication
technologies are hosted on the single and unique VACMAN®
platform. Our range of over 50 DIGIPASS® end-user authentication
devices, whether they are hardware or software-based, all work with
the VACMAN platform.

User authentication

VASCO’s solutions are all-terrain: independent from the customers’
field of activity, VASCO offers solutions that fit their needs. Renowned
for our experience in securing online banking applications, VASCO
brings banking level security to a wealth of business applications in
several vertical markets, including healthcare, e-gaming, automotive,
human resources, education, administration, e-government, legal,
supply chain, manufacturing and many others.

Electronic signature

Strategy
VASCO offers a complete array of authentication solutions and
services to the financial services sector. We expand our penetration
by bringing these banking level security solutions to other markets
such as business enterprises and the B2B, B2E and B2C markets.
VASCO continuously enhances and broadens its line of security
products and services to meet the changing needs of its existing
and potential customers.

1

Building a secure banking enviroment

Log-on access process that verifies if the user is in fact who he
claims to be. VASCO’s DIGIPASS technology replaces insecure static
passwords with strong one-time passwords. These passwords are
only valid for a limited period of time and cannot be reused.

Secures a transaction or message between two known parties.
E-signatures offer adequate protection against man-in-the middle
attacks and similar fraud schemes. They allow you to verify that
information and transactions haven’t been altered in transit.

Digital signature
Secures transactions or messages using PKI technology between
two parties who don’t necessarily know each other, whereby the
third party guarantees the identity of all parties involved.
PKI allows banks, enterprises and governments to sign transactions
and documents using certificates and keys. PKI solutions provide
non-repudiation and data integrity.
Secure online banking

COMBAT ONLINE FRAUD

A secure online banking experience

Tailored solutions

Banks worldwide are increasingly providing online and mobile
financial services, offering their customers a more convenient way
to conduct their banking affairs while at the same time improving
efficiency and saving on operating costs. However, online banking
has its drawbacks.

VASCO has a vast experience in the deployment of large scale
authentication projects with millions of end-users but also attends
to the needs of smaller and mid-sized banks with tailored solutions
to match their specific needs. We offer a wide range of back-end
solutions, including a managed outsourced authentication service.
Our end-user devices range from software and hardware OTP
authenticators to e-signature devices for transaction validation and
digital signatures using PKI technology.

Online banking accounts are frequently targeted by cybercriminals
and fraud schemes become more complex. Security issues remain
a major concern for customers and corporations alike. As a result,
banks need to implement adequate security measures to protect
themselves and their customer base.

Boost customer trust

DIGIPASS®
Authentication devices providing strong user authentication and
electronic or digital signatures. Available in software or hardware
format or as a smart card reader

VACMAN®
VASCO helps banks and financial organizations to secure their
online channels. As a world leader in strong authentication, VASCO
offers strong two-factor authentication and PKI solutions to meet
any financial organization’s needs.

Back-end core authentication platform suited for massive
deployments

IDENTIKEY® Authentication Server
Centralized authentication server suited for organizations of all sizes

By deploying VASCO’s renowned DIGIPASS technology, banks are
able to authenticate their customers and mitigate risks stemming
from phishing scams, hacking, Trojans and man-in-the-middle
(MITM) attacks. Secure online services will boost customer trust
and will enable banks to build an enduring competitive advantage.

DIGIPASS® as a Service
Cloud-based authentication in a managed service model

Embedded and OEM Solutions
Embedded security to authenticate the world’s online community

	

Building a secure banking enviroment

2
Securing all channels

MITIGATE RISKS.
BOOST CUSTOMER TRUST
Retail Banking

Corporate banking

Retail banking services were once provided in person. Nowadays,
account checking, saving plans or bill payments are more and
more offered online. Account holders are thus able to access their
banking services via Internet. As the use of online banking channels
has grown, online fraud schemes have surfaced. Fraudsters target
and exploit electronic channels for financial gain, most commonly
targeting customers’ personal passwords. Banking customers
who have been hacked not only lose their assets, they also lose
their trust in online banking channels and the bank’s reputation is
damaged.

Corporate banking environments were the first to see the benefits
of two-factor authentication. For financial institutions conducting
transactions over electronic channels, the most prevalent vulnerability
is also the most obvious one: the use of static passwords as a form
of user authentication. Outdated and weak, static passwords are
ineffective against today’s security threats. Corporate e-banking
is tempting for fraudsters, not only because the amount of money
involved is substantially higher, but also because banking systems
are less likely to detect fraud attempts on these accounts.

VASCO’s strong authentication is a key step towards an increased
level of security and the reinstatement of customers’ trust in
the banking system. VASCO offers a wide range of solutions for
the consumer electronic banking market, including hardwarebased authenticators, smart card readers or software and mobile
authentication solutions.

3

Building a secure banking enviroment

As a global leader in two-factor authentication for the financial
industry, VASCO offers mature technologies designed to strengthen
the existing security policies with minimal impact. VASCO presents
a variety of strong authentication solutions, such as amongst others
PKI authenticators, smart card readers or other hardware-based
DIGIPASS devices.
Customer references
Internet bank Rabobank.be secures its customers’ assets with VASCO’s DIGIPASS 250

Rabobank.be is a subsidiary of the Dutch Rabobank Group. When it successfully started an Internet bank
from scratch, they were looking for an easy-to-install solution to secure their customers online. Scalability
and ease-of-use were decisive factors as Rabobank.be is an online bank with no actual offices. Furthermore,
the solution had to provide a high level of security to protect financial and critical transactions.
DIGIPASS 250 in combination with VACMAN Controller provides the customers with a user-friendly, flexible and
scalable solution to access their online saving accounts at their own convenience 24/7. Integration and rollout
were swiftly completed without difficulties.

BW-Bank: online banking security for all

BW-Bank is the first bank in Germany to replace TAN-lists with one of the world’s leading security practices:
strong authentication. All BW-Bank customers received a BW-Bank TAN generator, a model from the
DIGIPASS family. At the bank’s side, the VACMAN Controller software suite has been implemented to verify
all authentication requests.
Meanwhile, all online banking customers use DIGIPASS to access their online banking accounts. And with success:
since October 2007, BW-Bank has reported just one case of online fraud.

Mizuho Corporate Bank implemented DIGIPASS authentication enabling them to cut the TCO of their security solution

Mizuho Corporate Bank (MHCB), one of the three biggest banks in Japan, deployed VASCO’s one-time password solution for Mizuho
Global CMS, its financial service for foreign enterprises. The bank needed to implement a two-factor authentication solution that
complied with governmental guidelines. Furthermore, the solution had to be flexible and straightforward in its use, improving userfriendliness for remote access users.
VASCO’s DIGIPASS technology in combination with VACMAN Controller allowed Mizuho Corporate Bank to deploy and roll out a
user-friendly, PC-independent two-factor authentication solution in a short time span. The solution allowed them to
leverage security for the online authentication process, boost user-friendliness and cut the total cost
of ownership. It even helped to reduce support and helpdesk costs at its offices
worldwide, in comparison with the previous deployed PKI solution.

	

Building a secure banking enviroment

4
Securing all channels
Mobile Banking

Mobile payments

In our fast-paced, ever-connected world, mobile technology is an
interesting if not essential feature banks can offer. It was introduced
to fill customers’ needs, such as saving time, quality of service or
the elimination of geographical barriers. Additionally it also benefits
banking institutions when it comes to service costs or customer
satisfaction. However, like any emerging electronic channel, mobile
banking is vulnerable to fraudsters preying on gaps in security.
Even though the platform has changed, the challenges faced in
m-banking are similar to those in e-banking.

Mobile payments are an emerging and rapidly-growing alternative
payment method. Rather than pay by cash, check or credit card,
customers can opt to use their mobile phone to buy goods or
services. Thanks to their quick transaction speed and convenience,
mobile payments are gaining popularity as a method of paying for
items such as music, videos, ringtones, online gaming subscriptions,
wallpapers, transportation fare (bus, subway or train), parking
meters, books, magazines and tickets.

Today, the most common m-banking channels are telephone
banking, IVR (Interactive Voice Response), SMS-based solutions,
client/server-based applications (downloadable or pre-loaded), WAP
and STK (SIM application Toolkit) banking. To reinforce security in
mobile banking applications, mobile authentication is essential.
Mobile authentication is a simple, low-impact enhancement that
strengthens security.
VASCO offers cost-effective and user-friendly solutions to secure all
mobile banking channels. VASCO’s DIGIPASS API brings one-time
password and e-signature functionality to end-users through their
mobile devices, without the need for any additional hardware.

5

Building a secure banking enviroment

Mobile payments secured by two-factor authentication provide a
secure alternative to credit cards. Since the payment is made via
a telephone, no credit card information is stored by the merchant,
which eliminates the opportunity for hackers or employees to
compromise card information. Because one-time passwords are
used, the transaction can be verified to have originated from the
exact phone registered for a specific user.
VASCO’s DIGIPASS technology seamlessly integrates with existing
mobile payments’ applications. Our mobile solutions offer customers
and providers an easy, convenient and secure experience for
payment alternatives.
Customer references
HSBC Bank Brazil provides m-banking using VASCO’s DIGIPASS for Mobile.

HSBC is the first bank in Brazil to offer integrated m-banking services based on VASCO’s
DIGIPASS for Mobile. HSBC retail customers can withdraw cash from ATMs using their
mobile phone as an authentication device. The technology is non-reliant on third parties,
overcoming provider dependency and network limitations.
DIGIPASS for Mobile empowers financial institutions to quickly launch m-banking services.
The solution allowed HSBC to increase its financial services outreach substantially by using
a multi-channel approach. In its cooperation with HSBC, VASCO has been honored with
the “Best Security Solution” award by the renowned Brazilian banking magazine Relatorio
Bancario for its HSBC Brazil DIGIPASS for Mobile banking customer case.

Oman Arab Bank provides secure e-banking services with DIGIPASS technology to prevent identity theft

Oman Arab Bank offers its corporate and retail customers a variety of online services and is the only bank in the Sultanate to offer
instant bill collection services for telecom providers. The bank also offers online governmental services and has established itself
as a leading e-banking service provider. In order to protect its customers against online fraud, the bank implemented VASCO’s
renowned DIGIPASS technology in combination with the authentication software IDENTIKEY Authentication
Server.
IDENTIKEY Authentication Server could be perfectly integrated into the bank’s infrastructure allowing Oman Arab
Bank to add strong authentication to its different applications and channels. DIGIPASS GO 6 and DIGIPASS 260
were deployed for its retail and corporate customer base providing customers secure access to their accounts from
anywhere at any time. Thanks to the integration of DIGIPASS technology, the bank was the first to offer card-less
ATM services in the Middle East.

	

Building a secure banking enviroment

6
Securing all channels
Leveraging EMV card investment

Preventing ATM fraud

EMV cards were deployed to increase the security of credit
card transactions by using encryption algorithms that provide
authentication of the card to the processing terminal and the
transaction processing center. EMV cards can be leveraged for the
deployment of two-factor authentication without the cost of issuing
any additional personalized authenticators.

When the Automatic Teller Machine (ATM) was brought into use,
thieves used to watch over your shoulder to memorize your PIN
and try to steal your debit/credit card. Since then, more complex
mechanisms such as skimming and ghost ATMs, have been
developed.

The Chip Authentication Program (CAP), a MasterCard initiative
which received Visa support, offers two-factor authentication as
both a smart card and a valid PIN have to be present for a transaction
to succeed.
VASCO’s CAP-based solutions are suitable for mass deployment in
retail banking. The customers’ regular debit and/or credit card can
be used to generate one-time passwords and e-signatures offering
strong authentication. Each of these authentication mechanisms can
also secure multiple applications, from e-banking to e-commerce.
VASCO can also enhance EMV-CAP solutions with unique
authenticators (optical readers, one-button devices) or add-on
features like VASCO strong authentication. These enhancements
make the deployment of EMV card-based strong authentication
even more secure and convenient for banks and their customers.

7

Building a secure banking enviroment

Strong authentication can be added to prevent ATM fraud. When
a customer wants to withdraw money, he authenticates himself
using a one-time password in combination with a PIN code. This
extra layer of security can be added without too much hassle as
existing ATM infrastructures do not have to be adapted. Besides,
the conversion to OTP validation can be executed quite rapidly and
inexpensively for banks that already use strong authentication for
their online channels.
Banks can leverage their investments made in strong authentication
in multiple ways. Either they can link multiple applications, such
as e-banking channels, phone banking and ATM operations to a
single authentication device. Or they can decide to have a dedicated
authenticator for ATM security.
Customer references
BANRISUL adopts VASCO’s authentication solution for e-banking

Banrisul is a multiple service bank controlled by the state of Rio Grande do Sul and is one of the most profitable banks in Brazil. With
a history that goes back almost a century, the bank is focusing on maintaining its leadership position in Rio Grande do Sul. Besides its
extensive presence throughout the state, Banrisul has an ability to expand the participation in its current client base by increasing the
services used by its customers. By providing its customers with an authentication solution, Banrisul offers them the possibility to access
the bank’s online services in total security, anywhere at any time.
Banrisul is the first state bank in Brazil to employ the leading DIGIPASS brand
on the market to offer its customers maximum security to conduct their banking
transactions. The bank wanted to adopt a solution that was simple to use
and had the possibility of unifying strong authentication to digital certification
subscription and encryption services. This is one of the reasons, Banrisul chose
for VASCO’s DIGIPASS 905 solution. DIGIPASS 905 integrates DIGIPASS security
with card reader functionality, offering Banrisul’s customers secure access to its
home and office Internet banking services using authentication based on digital
certificates stored on smart cards.

DnB Nor implemented VASCO’s DIGIPASS to secure the BankID scheme

DnB NOR is Norway’s largest financial services group offering banking services, life & pension insurances, a financial distribution network
and acts as Norway’s largest real estate broker. DnB NOR needed to implement a security solution for BankID that would meet all of
BankID’s security requirements. BankID delivers a public key infrastructure (PKI) solution enabling members from the Norwegian public to
identify themselves and sign digital documents from authorities, companies and other organizations on the Internet. The BankID scheme
works with nearly all Norwegian banks and banking groups, amongst others DnB NOR. It is an open national standard for all citizens with
an online-bank, for all enterprises and public offices and is based on PKI technology.
To meet BankID’s security requirements, DnB NOR implemented VASCO’s patented DIGIPASS technology
with one-time passwords. Previously, the company worked with different types of systems and
security devices for their retail customers. Some customers even had several different devices.
DnB NOR wanted to implement one single authentication method to simplify handling which
would lead to more satisfied customers and would also reduce costs in the long term. A better
and clearer logon process would also reduce calls to the bank’s call centre. DnB NOR found
in VASCO’s DIGIPASS GO 3 the security solution to suit their and their customers’ needs.
DIGIPASS GO 3 is a simple and user-friendly authentication device, offering a high security
level compliant with BankID’s security standards.

DNB NOR
	

Building a secure banking enviroment

8
Front-end

CLIENT SIDE TECHNOLOGY:
DIGIPASS FAMILY
VASCO’s DIGIPASS family offers a wide range of end-user authentication devices which all make use of VASCO’s VACMAN core technology.
Customers can choose from a wide range of authenticators (OTP, challenge/response, e-signature or PKI devices), both software and hardwarebased, which best fit their needs. All DIGIPASS devices are fully customizable with your logo and corporate colors.
To view the complete DIGIPASS family, please visit www.vasco.com/DIGIPASS

One-button devices
The DIGIPASS GO family combines ultra-portability with user convenience. The OTP is generated at the push of the button.

Key features

DIGIPASS GO 3

DIGIPASS GO 6

DIGIPASS GO 7

•	 Intuitive use
•	Ultra-portable
•	 Time and event-based
	authentication
•	DES/3DES/AES/OATH
•	 Long lifetime battery

PIN-pad devices
A range of small and user-friendly PIN-protected authentication devices.

Key features

DIGIPASS 260

DIGIPASS 270

DIGIPASS 301cv

DIGIPASS 736

•	 Offers response only OTP,
	 e-signature and challenge/
	 response functionality
•	 PIN protection and PIN
	unlocking
•	 Simple and intuitive in use
•	 Time/event and challenge/
	 response based
•	 Long lifetime battery

9

Building a secure banking enviroment
Front-end
Card Readers
A wide range of connected, unconnected and connectable card readers

Key features

DIGIPASS 835 DIGIPASS 836 DIGIPASS 837 DIGIPASS 865 DIGIPASS 905

•	 No need to install drivers in
	 unconnected mode
•	 Smart card based OTP,
	 e-signature, PKI functionality
•	 Straightforward deployment
•	 Ease of use
•	 Leverage EMV or PKI cards
	deployment
•	 No personalization required

Software DIGIPASS
Software-based DIGIPASS solutions leverage mobile phones, tablet PCs or web-browsers for authentication purposes.

Key features

Virtual DIGIPASS

DIGIPASS for Mobile

DIGIPASS Nano

•	 OTP and e-signature
	capability
•	 No hardware deployment
•	 Time and event-based
	authentication
•	PIN-protected
•	 Transparent, user-friendly
	 and ultra-portable

PKI-based solutions
VASCO’s PKI-offering consists of DIGIPASS CertiID™, a client-based software suite, and a range of DIGIPASS PKI devices, the DIGIPASS KEY range.
DIGIPASS CertiID provides an answer to the growing need for digital signature solutions for high risk transactions and document signing. The
DIGIPASS KEY range consists of smart card based solutions and USB devices.

DIGIPASS CertiID

DIGIPASS KEY 101

	

DIGIPASS KEY 200

DIGIPASS KEY 860

Building a secure banking enviroment

10
Back-end

SERVER SIDE TECHNOLOGY

Copyright © Haymarket Media Inc.

IDENTIKEY Authentication Server

DIGIPASS CertiID™

IDENTIKEY Authentication Server is VASCO’s
off-the-shelf centralized authentication server.
It is the perfect choice to secure remote access
to corporate resources and various types
of (web-based) applications, from remote
access and SSL/VPN to SaaS. IDENTIKEY
Authentication Server Banking Edition is the complete and robust
protection against man-in-the-middle (MITM) attacks.

To address growing authentication needs, VASCO presents DIGIPASS
CertiID, a client-based software suite that combines PKI and OTP
technology. The software suite was designed for users unfamiliar
with PKI technology. DIGIPASS CertiID is installed on the PC of the
end-user and is used in conjunction with a DIGIPASS KEY solution the authentication device.

The solution is straightforward and scalable; fit to accommodate the
needs of both large and small implementations. It offers complete
functionality and management features without the need for
significant budgetary or personnel investments. This results in a fast
and cost-effective rollout.
IDENTIKEY Authentication Server verifies the authentication
requests from individuals trying to access banking applications and
centrally administers user authentication policies. Authentication
and transaction validation functions can be integrated into existing
web-based applications, using a built-in SOAP API. One DIGIPASS
device can therefore be used for several applications.

VACMAN Controller

In banking environments, the device helps to comply with more
stringent financial regulations (Sarbanes-Oxley, Basel II, HIPAA) and
enhanced security requirements. PKI technology can be used to
digitally sign transactions.
When an end-user initially requests a certificate, a private key is
stored on the (integrated) smart card of the authentication device.
This private key can never be exported, leveraging security.
To activate the device, the user must enter his PIN code.

VACMAN

VACMAN is VASCO’s core authentication platform already integrated
by a vast number of leading banks and financial institutions
worldwide. It combines all authentication applications, including
OTP, challenge/response and e-signature on a single platform.
VACMAN is used for the authentication of millions of end-users. It
can seamlessly be integrated into existing e-banking applications
in a time and cost-effective way. Furthermore, VACMAN is highly
scalable: additional users or applications can easily be added.

11

Building a secure banking enviroment
Embedded and OEM Solutions

COST-EFFICIENT. PLATFORM
INDEPENDENT. HIGH SECURITY

Authenticate the online community

Embedded security solutions

DIGIPASS embedded and OEM solutions are VASCO’s response
to the changing authentication market. It is a proof of VASCO’s
commitment to find more convenient, portable and cost-effective
ways to secure the online community. VASCO strives to develop
authentication solutions that can operate on any platform and are
suited to secure any application.

VASCO’s mission with its DIGIPASS Embedded Security Solutions
(DESS) is to enable DIGIPASS technology on client devices and
applications; whatever these may be. Dormant DIGIPASS are
embedded into products of leading vendors, bringing authentication
within everyone’s reach.
This process shifts the authentication paradigm: rather than
distribute security devices to end-users, VASCO simply provisions
that security to a device the end-user already has.

OEM solutions
VASCO develops practical security solutions that balance cost,
security and convenience for every customer. VASCO’s DIGIPASS
family was designed to run on one single infrastructure and all
different form factors are interoperable with each other.
This allows VASCO partners to add strong authentication to their
offering without major investments or disruptions to their businesses.
As authentication becomes a crucial element in every security
infrastructure, VASCO’s product portfolio provides organizations
with a unique competitive advantage that could lead to increased
market share and revenue. As our solutions are so versatile, they
can meet the demands of any customer.

DIGIPASS Embedded Security Solutions challenge the belief that
increased user convenience automatically entails decreased costs
but also diminished security. With an embedded approach, costs
are inherently lower. The equation hence changes from having to
sacrifice security for the sake of cost or convenience to one where
security becomes the corner stone of any online application.
Opportunities for DIGIPASS embedded security include:
	
Computer platforms
	
Mobile platforms
	
Existing security credentials and smart cards
	
USB/SD/MMC/SIM or other memory devices or cards
	
Security software

Dormant DIGIPASS are embedded into products of leading vendors, bringing
authentication within everyone’s reach.

	

Building a secure banking enviroment

12
Cloud-based authentication

OUTSOURCE AUTHENTICATION
WITH DIGIPASS AS A SERVICE

The triumph of cloud computing

MYDIGIPASS.COM

Cloud computing is the upcoming trend and will dominate the IT
landscape for years to come. More flexibility, better scalability and
lower costs. The arguments for cloud computing are hard to refute.

MYDIGIPASS.COM is an online platform that allows web application
owners to facilitate password management while adding an
additional level of security to the access log-on procedure. VASCO
allows website owners to freely integrate strong authentication
using DIGIPASS one-time passwords on their site for-end users to
secure access to their services and content.

VASCO offers DIGIPASS as a Service, a fully outsourced
authentication model. It has been designed for application service
providers wanting to add strong authentication to protect their
content, data and applications.
DIGIPASS as a Service overcomes a number of issues commonly
associated with the deployment of a two-factor authentication
solution. Native integration of strong authentication might require
infrastructural changes. Additionally, deploying two-factor
authentication to a large number of end-users might be considered
costly and time-consuming. Logistic burdens, portability of
authentication devices, multiple authenticators for different
applications, the installation of software on the end-user’s PC,
associated administration... the hurdles are plentiful.

Website owners can boost customer trust by providing secure single
sign-on for all applications connected to the platform. Additionally,
back-office and support costs can be reduced by eliminating costs
associated with password management.
End-users in turn can conveniently and securely access their
applications through the MYDIGIPASS.COM portal using VASCO’s
DIGIPASS technology. To generate a one-time password to log
on to the platform, they can use one of the hundred million
dormant DIGIPASS in the field or download a mobile client on
MYDIGIPASS.COM free of charge.

Authentication from A to Z
DIGIPASS as a Service overcomes these apprehensions:
authentication becomes an operating expense rather than a capital
expense, thus lowering the cost of deployment and enhancing
the total cost of ownership. VASCO takes care of the entire
authentication process for you: from deployment and administration
to the authentication of your end-users’ devices.
Furthermore, with VASCO’s DIGIPASS Plus devices, multiple
authenticators for different applications belong to the past. DIGIPASS
Plus devices possess a second identity enabling end-users to
use one DIGIPASS device for several applications. Together with
VASCO’s DESS strategy, we bring authentication within everyone’s
reach. DIGIPASS as a Service allows organizations and application
providers to focus on their core competencies without worrying
about security issues.

13

Building a secure banking enviroment
SEAL

STAY INFORMED AND
UP-TO-DATE WITH SEAL
Up-to-date with latest security trends

SEAL offering

New types of online attacks emerge almost every day. It is therefore
critical for IT security professionals to stay informed and remain upto-date on the latest trends. As a leading Internet security company
VASCO considers it its duty to actively share information on current
and emerging IT security trends and online fraud schemes with its
customers, partners, distributors and resellers and anybody who
needs our advice.

VASCO’s SEAL comprises the following:

VASCO’s Security Experts Academy &
e-Learning platform (SEAL)

	
E-learning: more than 120 hours of web-based or DVDbased IT security training
	
Classroom training by VASCO security experts
	
VASCO Certification: SEAL training offers IT security professionals
the opportunity to become VASCO Certified Engineers
	
VASCO Authorized Training Centers: training by VASCO partners
	
Junior Programs: trainee and scholarship programs for
graduates
More information is available on: www.vasco.com/training

SEAL is VASCO’s worldwide community of security professionals.
The SEAL training offer consisting of general IT security topics and
VASCO product trainings will help people looking to build a career
in information security. Through our offering of classroom training,
e-learning or DVD-based training and forums, VASCO SEAL allows
you to:
	
Become a VASCO Certified Engineer
	 up-to-date on the latest security trends
Stay
	
Develop new skills in IT security
	 access to a community with an extensive IT security
Get
knowledge base
	
Exchange information with peers
If you are looking to extend your knowledge in the IT security
field, you are welcome to join VASCO SEAL to become a security
professional. SEAL courses are appropriate for sales professionals,
product managers, support engineers, field engineers and security
consultants.

	

Building a secure banking enviroment

14
Fulfillment and provisioning services

BRANDING, DISTRIBUTION,
STORAGE... TRUST VASCO
Fulfillment services
VASCO has built a wealth of experience and know-how about
successful mass deployment of authentication projects. VASCO puts
this expertise at its customers’ disposal allowing you to diversify
your services from your competitors’, to focus on your core business
and to lighten the supply chain burden.
	
Branding and customization:
Every DIGIPASS can be branded reflecting corporate colors and
logos in order to enhance brand recognition for end-users
	
Customized packaging:
VASCO offers a wide range of packaging services, ranging
from non-personalized individual or bulk packaging to fully
customized and branded packaging

Provisioning services
	
Hardware provisioning:
Security parameters can be personalized according to the
requirements of corporate security departments. Secrets
are stored in DIGIPASS hardware through an approved and
audited process. Advanced encryption methods are used to
communicate initial PINs and to unlock codes by corporate
security departments.
	
Software provisioning:
For the provisioning of secrets on mobile phones or third party
platforms VASCO offers an application provisioning service
which takes deployment and management issues of softwarebased authentication out of your hands, allowing you to focus
on your core business.

	
Refurbishment:
Tailor-made service offering to prolong DIGIPASS life-cycle and
reduce the economical and ecological footprint of authentication
investments
	
Distribution and storage:
VASCO can offer supply chain services, delivering orders
anywhere in the world, to a central location, branch offices or
to end-users, we can also store customer’s stock in secure and
adapted warehouses

15

Building a secure banking enviroment
Support

DEDICATION. COMMITMENT.
SATISFIED CUSTOMERS

Security is a facilitator, not an obstacle

Support offering

It is critical to businesses around the globe that their business
applications are up-and-running at all times and securely accessible.
To ensure authentication is not considered a burden but a facilitator,

VASCO has a support offering specified per user type:

VASCO offers a wide range of support packages and technical
support services for environments of all sizes and all types. We can
simplify your life with rapid-response coverage around the world
and flexible service plans to suit your needs and budget.
For all types of customers VASCO has a tailored answer ranging
from basic support to dedicated SLA, ensuring rapid intervention
around the globe.
Personalize your support experience with a variety of service options
from VASCO. Discover which VASCO Technical Support Plan best fits
your needs.
	
Standard Support
	
24/7 support
	 support
VIP
	
Pay-Per-Incident
	
Remote Assistance Package
	
Emergency Support

	
Banking and application security customers can choose from
a number of standardized support packages ranging from
standard support during business hours, 24/7 support, service
level agreement (SLA) based support, pay-per-incident and
remote assistance support
	 enterprise security customers, technical support is provided
For
through the reseller or system integrator. Direct technical
support provided by VASCO is available upon request
	
VASCO distributors, system integrators and certified engineers
benefit from a standard technical support during business
hours
	 VASCO resellers, technical support is provided through
For
the distributor. Direct technical support provided by VASCO is
available upon request
More detailed information on our support offering is available on:
www.vasco.com/support

	

Building a secure banking enviroment

16
Professional services

TURN YOUR AUTHENTICATION
PROJECT INTO A SUCCESS

Professional services

Benefits

VASCO’s Professional services have been designed to assist
customers, resellers, partners and integrators in the deployment
of their strong authentications projects. By sharing our expertise
we help our customers to minimize the challenges and maximize
the results of the authentication within time and budget. VASCO‘s
Professional services bring many years of experience in the
deployment of two-factor authentication projects to the table.

	 experienced team
An
	 Our experienced and certified engineers ensure seamless
	 integration of authentication into existing applications or
	 infrastructure, using the proven VASCO methodology

Our offering

	
Proven methodology
	 Short term deployments, support throughout the project and
	 enhanced security for remote access, LAN, online applications,
	 e-banking and m-banking environments

Every authentication is unique. Different customers have different
needs. Whichever the driver to implement a strong authentication
project, VASCO has the qualified engineers and project managers to
turn the customer’s authentication project into a success.

	 cost of ownership
Total
	 Realization of projects on time and within budget

Our Professional services team will use the proven VASCO
methodology in each authentication project. This methodology
helps in:
	
Defining the scope of the project
	
Designing the appropriate solution
	
Implementing the products and solutions
	
Building applications meeting the customers need
	
Supporting the customers partner of in-house team
throughout the project
	
Certifying the customers application according to the market
standards
	
Reviewing existing implementations and make recommendations
for optimization

17

Building a secure banking enviroment
Consulting services

LEVERAGE YOUR
AUTHENTICATION

VASCO Consulting services

Offering

VASCO’s Consulting services have been designed to complement
our offering of strong authentication solutions with a spectrum of
quality service options that help our customers to make the most of
their authentication investments.

VASCO’s Consulting services consist of:

Whether you are looking for information about current security
challenges and threats in e-banking, e-commerce or network
security, or you need advice prior to or during an implementation,
VASCO can offer its expertise.
By sharing expertise, proven methodology and best practices,
VASCO helps its customers to decrease time to market of their
authentication project. You will benefit from the combined expertise
of thousands of succesful strong authentication deployments
worlwide.
Our consulting team is comprised of engineers and deployment,
fulfillment and customer service specialists. VASCO’s consultants
are there to deliver the professional advice you need for a succesfull
authentication rollout.

	 Consulting before implementation:
Focus on threats and defense mechanisms in e-banking security
and best practices for strong authentication implementations in
e-banking and mobile applications
	 Advice during implementation:
Consists of specific product deployment consulting
	 Consulting after implementation:
Focus on fraud detection and analysis
	 On demand
Individual consulting services to fit your unique needs
More detailed information on our consulting offer is available on:
www.vasco.com/consulting

Together with VASCO, we looked at different ways to use our DIGIPASS devices with VACMAN Controller. Their advice not only led to
significant and important enhancements, but also to an overall improvement of our security features. VASCO brought a lot of value
and expertise to our project and for this we consider them as a valuable business partner.

Daniel Ratinckx, Head of Delen-Online at Bank Delen

	

Building a secure banking enviroment

18
About VASCO
VASCO is a leading supplier of strong authentication and e-signature solutions and services specializing in Internet security applications and
transactions. VASCO has positioned itself as global software company for Internet security and designs, develops, markets and supports
DIGIPASS®, CertiID™, VACMAN®, IDENTIKEY® and aXsGUARD® authentication products. VASCO’s prime markets are the financial sector,
enterprise security, e-commerce and e-government.

VASCO Offices
VASCO Sales Presence

www.vasco.com
I N T E R N AT I O N A L H Q - S w i t z e r l a n d
phone: +41 43 555 35 00
email: info-europe@vasco.com

C O R P O R AT E H Q - C h i c a g o
phone: +1 630 932 8844
email: info-usa@vasco.com

Sales offices
A s i a - Pa c i f i c - S i n g a p o r e
phone: +65 6323 09 06
email: info-asia@vasco.com

A s i a - Pa c i f i c - J a p a n
phone: +81 3 5532 7862
email: info-japan@vasco.com

A s i a - Pa c i f i c - I n d i a
phone: +91 22 4090 7112-14
email: info-india@vasco.com

Australia - Sydney
phone: +61 2 8061 3700
email: info-australia@vasco.com

Europe, Middle East, Africa - Wemmel
phone: +32.2.609.97.00
email: info-europe@vasco.com

Europe, Middle East, Africa - Austria
phone: +43 1 9043132-0
email: info-europe@vasco.com

Latin America - Brazil
phone: +5511 3443 7541
email: ES-brazil@vasco.com

USA - Boston
phone: +1 508 366 3400
email: info-usa@vasco.com

USA - California
phone: +1 650 378 1202
email: info-usa@vasco.com

®
Copyright © 2014 VASCO Data Security, Inc, VASCO Data Security International GmbH. All rights reserved. VASCO®, CertiID™, VACMAN®, IDENTIKEY®, aXsGUARD®, DIGIPASS® and the
logo are registered or
unregistered trademarks of VASCO Data Security, Inc. and/or VASCO Data Security International GmbH in the U.S. and other countries. VASCO Data Security, Inc. and/or VASCO Data Security International GmbH own or are
licensed under all title, rights and interest in VASCO Products, updates and upgrades thereof, including copyrights, patent rights, trade secret rights, mask work rights, database rights and all other intellectual and industrial
BR201402 - v6
property rights in the U.S. and other countries. Other names may be trademarks of their respective owners.

Weitere ähnliche Inhalte

Was ist angesagt? (20)

Online banking
Online bankingOnline banking
Online banking
 
INTERNET BANKING PPT
INTERNET BANKING PPTINTERNET BANKING PPT
INTERNET BANKING PPT
 
Paper presentation on internet banking
Paper presentation on internet bankingPaper presentation on internet banking
Paper presentation on internet banking
 
internet banking
internet banking internet banking
internet banking
 
E banking, internet banking and all services
E banking, internet banking and all servicesE banking, internet banking and all services
E banking, internet banking and all services
 
Internet banking
Internet bankingInternet banking
Internet banking
 
E banking & security concern
E banking & security concernE banking & security concern
E banking & security concern
 
Internet Banking
Internet BankingInternet Banking
Internet Banking
 
Net banking
Net banking Net banking
Net banking
 
Internet banking
Internet bankingInternet banking
Internet banking
 
Internet Banking
Internet BankingInternet Banking
Internet Banking
 
Internet banking
Internet bankingInternet banking
Internet banking
 
Internet Banking
Internet BankingInternet Banking
Internet Banking
 
E-Banking 2009
E-Banking 2009E-Banking 2009
E-Banking 2009
 
E banking
E bankingE banking
E banking
 
Internet banking.
Internet banking.Internet banking.
Internet banking.
 
E-Banking Web Security
E-Banking Web SecurityE-Banking Web Security
E-Banking Web Security
 
Online banking||
Online banking||Online banking||
Online banking||
 
Internet banking
Internet bankingInternet banking
Internet banking
 
Internet banking
Internet bankingInternet banking
Internet banking
 

Andere mochten auch (8)

SecureMAG vol9
SecureMAG vol9SecureMAG vol9
SecureMAG vol9
 
How To Rob A Bank In The 21st Century - PKI Version
How To Rob A Bank In The 21st Century - PKI VersionHow To Rob A Bank In The 21st Century - PKI Version
How To Rob A Bank In The 21st Century - PKI Version
 
Bank security
Bank securityBank security
Bank security
 
Security system in banks
Security system in banksSecurity system in banks
Security system in banks
 
Online banking ppt
Online banking pptOnline banking ppt
Online banking ppt
 
E banking
E bankingE banking
E banking
 
E banking
E bankingE banking
E banking
 
E Banking
E BankingE Banking
E Banking
 

Ähnlich wie Secure Online Banking

How to successfully implement a secure mobile strategy
How to successfully implement a secure mobile strategyHow to successfully implement a secure mobile strategy
How to successfully implement a secure mobile strategyVASCO Data Security
 
Move your customer authentication to the next level!
Move your customer authentication to the next level!Move your customer authentication to the next level!
Move your customer authentication to the next level!Ivona M
 
American Banker Executive Summary - Digital Trust
American Banker Executive Summary - Digital TrustAmerican Banker Executive Summary - Digital Trust
American Banker Executive Summary - Digital TrustBenjamin Wyrick
 
Using Strong / Verified Identities
Using Strong / Verified IdentitiesUsing Strong / Verified Identities
Using Strong / Verified IdentitiesUbisecure
 
case-study-on-digital-identity-swisscom-mobile-id_en
case-study-on-digital-identity-swisscom-mobile-id_encase-study-on-digital-identity-swisscom-mobile-id_en
case-study-on-digital-identity-swisscom-mobile-id_enAlix Murphy
 
Identity and Access Management Solutions for Financial Institutions
Identity and Access Management Solutions for Financial InstitutionsIdentity and Access Management Solutions for Financial Institutions
Identity and Access Management Solutions for Financial InstitutionsAlireza Ghahrood
 
Exploring Fintech Solution Transformational Role the Digital Era Savings.pptx
Exploring Fintech Solution Transformational Role the Digital Era Savings.pptxExploring Fintech Solution Transformational Role the Digital Era Savings.pptx
Exploring Fintech Solution Transformational Role the Digital Era Savings.pptxPanamax, Inc
 
Anti-Fraud Datasheet
Anti-Fraud DatasheetAnti-Fraud Datasheet
Anti-Fraud DatasheetMani Rai
 
8 Reasons You Should Switch to Biometrics Authentication for Digital Onboarding
8 Reasons You Should Switch to Biometrics Authentication for Digital Onboarding8 Reasons You Should Switch to Biometrics Authentication for Digital Onboarding
8 Reasons You Should Switch to Biometrics Authentication for Digital OnboardingPanamax, Inc
 
Case StudyAutomotive - SSLVPN case study DIGIPASS BY VA
Case StudyAutomotive - SSLVPN case study DIGIPASS BY VACase StudyAutomotive - SSLVPN case study DIGIPASS BY VA
Case StudyAutomotive - SSLVPN case study DIGIPASS BY VAMaximaSheffield592
 
Entrust datacard --Authentication solutions overview
Entrust datacard --Authentication solutions overviewEntrust datacard --Authentication solutions overview
Entrust datacard --Authentication solutions overviewAbhishek Sood
 

Ähnlich wie Secure Online Banking (20)

We Authenticate the World
We Authenticate the WorldWe Authenticate the World
We Authenticate the World
 
Identikey
IdentikeyIdentikey
Identikey
 
Secure your Business
Secure your BusinessSecure your Business
Secure your Business
 
Case Study: Wilo bank
Case Study: Wilo bankCase Study: Wilo bank
Case Study: Wilo bank
 
How to successfully implement a secure mobile strategy
How to successfully implement a secure mobile strategyHow to successfully implement a secure mobile strategy
How to successfully implement a secure mobile strategy
 
MYDIGIPASS.COM leaflet
MYDIGIPASS.COM leafletMYDIGIPASS.COM leaflet
MYDIGIPASS.COM leaflet
 
Move your customer authentication to the next level!
Move your customer authentication to the next level!Move your customer authentication to the next level!
Move your customer authentication to the next level!
 
Cork v soft corporate - An Overview
Cork v soft corporate - An OverviewCork v soft corporate - An Overview
Cork v soft corporate - An Overview
 
American Banker Executive Summary - Digital Trust
American Banker Executive Summary - Digital TrustAmerican Banker Executive Summary - Digital Trust
American Banker Executive Summary - Digital Trust
 
Using Strong / Verified Identities
Using Strong / Verified IdentitiesUsing Strong / Verified Identities
Using Strong / Verified Identities
 
Presentation of myCube.pptx
Presentation of myCube.pptxPresentation of myCube.pptx
Presentation of myCube.pptx
 
case-study-on-digital-identity-swisscom-mobile-id_en
case-study-on-digital-identity-swisscom-mobile-id_encase-study-on-digital-identity-swisscom-mobile-id_en
case-study-on-digital-identity-swisscom-mobile-id_en
 
Identity and Access Management Solutions for Financial Institutions
Identity and Access Management Solutions for Financial InstitutionsIdentity and Access Management Solutions for Financial Institutions
Identity and Access Management Solutions for Financial Institutions
 
Exploring Fintech Solution Transformational Role the Digital Era Savings.pptx
Exploring Fintech Solution Transformational Role the Digital Era Savings.pptxExploring Fintech Solution Transformational Role the Digital Era Savings.pptx
Exploring Fintech Solution Transformational Role the Digital Era Savings.pptx
 
Onegini Brochure
Onegini BrochureOnegini Brochure
Onegini Brochure
 
Group1
Group1Group1
Group1
 
Anti-Fraud Datasheet
Anti-Fraud DatasheetAnti-Fraud Datasheet
Anti-Fraud Datasheet
 
8 Reasons You Should Switch to Biometrics Authentication for Digital Onboarding
8 Reasons You Should Switch to Biometrics Authentication for Digital Onboarding8 Reasons You Should Switch to Biometrics Authentication for Digital Onboarding
8 Reasons You Should Switch to Biometrics Authentication for Digital Onboarding
 
Case StudyAutomotive - SSLVPN case study DIGIPASS BY VA
Case StudyAutomotive - SSLVPN case study DIGIPASS BY VACase StudyAutomotive - SSLVPN case study DIGIPASS BY VA
Case StudyAutomotive - SSLVPN case study DIGIPASS BY VA
 
Entrust datacard --Authentication solutions overview
Entrust datacard --Authentication solutions overviewEntrust datacard --Authentication solutions overview
Entrust datacard --Authentication solutions overview
 

Mehr von VASCO Data Security

Mehr von VASCO Data Security (7)

Increasing your mobile banking business
Increasing your mobile banking businessIncreasing your mobile banking business
Increasing your mobile banking business
 
aXsGuard Gatekeeper
aXsGuard GatekeeperaXsGuard Gatekeeper
aXsGuard Gatekeeper
 
DIGIPASS for Apps
DIGIPASS for AppsDIGIPASS for Apps
DIGIPASS for Apps
 
MYDIGIPASS.COM
MYDIGIPASS.COMMYDIGIPASS.COM
MYDIGIPASS.COM
 
Password fatigation
Password fatigationPassword fatigation
Password fatigation
 
Infosec1november
Infosec1novemberInfosec1november
Infosec1november
 
Infosec31october
Infosec31octoberInfosec31october
Infosec31october
 

Kürzlich hochgeladen

The Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsThe Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsPixlogix Infotech
 
From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .Alan Dix
 
Visualising and forecasting stocks using Dash
Visualising and forecasting stocks using DashVisualising and forecasting stocks using Dash
Visualising and forecasting stocks using Dashnarutouzumaki53779
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxLoriGlavin3
 
unit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxunit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxBkGupta21
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity
 
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...AliaaTarek5
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024Lonnie McRorey
 
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc
 
DevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenDevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenHervé Boutemy
 
DSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningDSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningLars Bell
 
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024BookNet Canada
 
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptx
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptxMerck Moving Beyond Passwords: FIDO Paris Seminar.pptx
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptxLoriGlavin3
 
Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 3652toLead Limited
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.Curtis Poe
 
A Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersA Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersNicole Novielli
 
Rise of the Machines: Known As Drones...
Rise of the Machines: Known As Drones...Rise of the Machines: Known As Drones...
Rise of the Machines: Known As Drones...Rick Flair
 
"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr BaganFwdays
 
Time Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsTime Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsNathaniel Shimoni
 
Unraveling Multimodality with Large Language Models.pdf
Unraveling Multimodality with Large Language Models.pdfUnraveling Multimodality with Large Language Models.pdf
Unraveling Multimodality with Large Language Models.pdfAlex Barbosa Coqueiro
 

Kürzlich hochgeladen (20)

The Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsThe Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and Cons
 
From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .
 
Visualising and forecasting stocks using Dash
Visualising and forecasting stocks using DashVisualising and forecasting stocks using Dash
Visualising and forecasting stocks using Dash
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
 
unit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxunit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptx
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio Web
 
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
(How to Program) Paul Deitel, Harvey Deitel-Java How to Program, Early Object...
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024
 
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
 
DevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache MavenDevoxxFR 2024 Reproducible Builds with Apache Maven
DevoxxFR 2024 Reproducible Builds with Apache Maven
 
DSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningDSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine Tuning
 
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
 
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptx
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptxMerck Moving Beyond Passwords: FIDO Paris Seminar.pptx
Merck Moving Beyond Passwords: FIDO Paris Seminar.pptx
 
Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.
 
A Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software DevelopersA Journey Into the Emotions of Software Developers
A Journey Into the Emotions of Software Developers
 
Rise of the Machines: Known As Drones...
Rise of the Machines: Known As Drones...Rise of the Machines: Known As Drones...
Rise of the Machines: Known As Drones...
 
"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan
 
Time Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directionsTime Series Foundation Models - current state and future directions
Time Series Foundation Models - current state and future directions
 
Unraveling Multimodality with Large Language Models.pdf
Unraveling Multimodality with Large Language Models.pdfUnraveling Multimodality with Large Language Models.pdf
Unraveling Multimodality with Large Language Models.pdf
 

Secure Online Banking

  • 1. Building a secure banking environment DIGIPASS BY VASCO ® The world’s leading software company specializing in Internet Security
  • 2. Corporate profile WE AUTHENTICATE THE WORLD VASCO® is a leading supplier of strong authentication and e-signature solutions and services specializing in Internet security. Every day, VASCO helps customers around the globe to deploy strong authentication solutions. We have customers in over 100 countries that use VASCO products to secure many different applications and online transactions. Full option, all-terrain authentication Core activities VASCO’s full option approach ensures that all authentication technologies are hosted on the single and unique VACMAN® platform. Our range of over 50 DIGIPASS® end-user authentication devices, whether they are hardware or software-based, all work with the VACMAN platform. User authentication VASCO’s solutions are all-terrain: independent from the customers’ field of activity, VASCO offers solutions that fit their needs. Renowned for our experience in securing online banking applications, VASCO brings banking level security to a wealth of business applications in several vertical markets, including healthcare, e-gaming, automotive, human resources, education, administration, e-government, legal, supply chain, manufacturing and many others. Electronic signature Strategy VASCO offers a complete array of authentication solutions and services to the financial services sector. We expand our penetration by bringing these banking level security solutions to other markets such as business enterprises and the B2B, B2E and B2C markets. VASCO continuously enhances and broadens its line of security products and services to meet the changing needs of its existing and potential customers. 1 Building a secure banking enviroment Log-on access process that verifies if the user is in fact who he claims to be. VASCO’s DIGIPASS technology replaces insecure static passwords with strong one-time passwords. These passwords are only valid for a limited period of time and cannot be reused. Secures a transaction or message between two known parties. E-signatures offer adequate protection against man-in-the middle attacks and similar fraud schemes. They allow you to verify that information and transactions haven’t been altered in transit. Digital signature Secures transactions or messages using PKI technology between two parties who don’t necessarily know each other, whereby the third party guarantees the identity of all parties involved. PKI allows banks, enterprises and governments to sign transactions and documents using certificates and keys. PKI solutions provide non-repudiation and data integrity.
  • 3. Secure online banking COMBAT ONLINE FRAUD A secure online banking experience Tailored solutions Banks worldwide are increasingly providing online and mobile financial services, offering their customers a more convenient way to conduct their banking affairs while at the same time improving efficiency and saving on operating costs. However, online banking has its drawbacks. VASCO has a vast experience in the deployment of large scale authentication projects with millions of end-users but also attends to the needs of smaller and mid-sized banks with tailored solutions to match their specific needs. We offer a wide range of back-end solutions, including a managed outsourced authentication service. Our end-user devices range from software and hardware OTP authenticators to e-signature devices for transaction validation and digital signatures using PKI technology. Online banking accounts are frequently targeted by cybercriminals and fraud schemes become more complex. Security issues remain a major concern for customers and corporations alike. As a result, banks need to implement adequate security measures to protect themselves and their customer base. Boost customer trust DIGIPASS® Authentication devices providing strong user authentication and electronic or digital signatures. Available in software or hardware format or as a smart card reader VACMAN® VASCO helps banks and financial organizations to secure their online channels. As a world leader in strong authentication, VASCO offers strong two-factor authentication and PKI solutions to meet any financial organization’s needs. Back-end core authentication platform suited for massive deployments IDENTIKEY® Authentication Server Centralized authentication server suited for organizations of all sizes By deploying VASCO’s renowned DIGIPASS technology, banks are able to authenticate their customers and mitigate risks stemming from phishing scams, hacking, Trojans and man-in-the-middle (MITM) attacks. Secure online services will boost customer trust and will enable banks to build an enduring competitive advantage. DIGIPASS® as a Service Cloud-based authentication in a managed service model Embedded and OEM Solutions Embedded security to authenticate the world’s online community Building a secure banking enviroment 2
  • 4. Securing all channels MITIGATE RISKS. BOOST CUSTOMER TRUST Retail Banking Corporate banking Retail banking services were once provided in person. Nowadays, account checking, saving plans or bill payments are more and more offered online. Account holders are thus able to access their banking services via Internet. As the use of online banking channels has grown, online fraud schemes have surfaced. Fraudsters target and exploit electronic channels for financial gain, most commonly targeting customers’ personal passwords. Banking customers who have been hacked not only lose their assets, they also lose their trust in online banking channels and the bank’s reputation is damaged. Corporate banking environments were the first to see the benefits of two-factor authentication. For financial institutions conducting transactions over electronic channels, the most prevalent vulnerability is also the most obvious one: the use of static passwords as a form of user authentication. Outdated and weak, static passwords are ineffective against today’s security threats. Corporate e-banking is tempting for fraudsters, not only because the amount of money involved is substantially higher, but also because banking systems are less likely to detect fraud attempts on these accounts. VASCO’s strong authentication is a key step towards an increased level of security and the reinstatement of customers’ trust in the banking system. VASCO offers a wide range of solutions for the consumer electronic banking market, including hardwarebased authenticators, smart card readers or software and mobile authentication solutions. 3 Building a secure banking enviroment As a global leader in two-factor authentication for the financial industry, VASCO offers mature technologies designed to strengthen the existing security policies with minimal impact. VASCO presents a variety of strong authentication solutions, such as amongst others PKI authenticators, smart card readers or other hardware-based DIGIPASS devices.
  • 5. Customer references Internet bank Rabobank.be secures its customers’ assets with VASCO’s DIGIPASS 250 Rabobank.be is a subsidiary of the Dutch Rabobank Group. When it successfully started an Internet bank from scratch, they were looking for an easy-to-install solution to secure their customers online. Scalability and ease-of-use were decisive factors as Rabobank.be is an online bank with no actual offices. Furthermore, the solution had to provide a high level of security to protect financial and critical transactions. DIGIPASS 250 in combination with VACMAN Controller provides the customers with a user-friendly, flexible and scalable solution to access their online saving accounts at their own convenience 24/7. Integration and rollout were swiftly completed without difficulties. BW-Bank: online banking security for all BW-Bank is the first bank in Germany to replace TAN-lists with one of the world’s leading security practices: strong authentication. All BW-Bank customers received a BW-Bank TAN generator, a model from the DIGIPASS family. At the bank’s side, the VACMAN Controller software suite has been implemented to verify all authentication requests. Meanwhile, all online banking customers use DIGIPASS to access their online banking accounts. And with success: since October 2007, BW-Bank has reported just one case of online fraud. Mizuho Corporate Bank implemented DIGIPASS authentication enabling them to cut the TCO of their security solution Mizuho Corporate Bank (MHCB), one of the three biggest banks in Japan, deployed VASCO’s one-time password solution for Mizuho Global CMS, its financial service for foreign enterprises. The bank needed to implement a two-factor authentication solution that complied with governmental guidelines. Furthermore, the solution had to be flexible and straightforward in its use, improving userfriendliness for remote access users. VASCO’s DIGIPASS technology in combination with VACMAN Controller allowed Mizuho Corporate Bank to deploy and roll out a user-friendly, PC-independent two-factor authentication solution in a short time span. The solution allowed them to leverage security for the online authentication process, boost user-friendliness and cut the total cost of ownership. It even helped to reduce support and helpdesk costs at its offices worldwide, in comparison with the previous deployed PKI solution. Building a secure banking enviroment 4
  • 6. Securing all channels Mobile Banking Mobile payments In our fast-paced, ever-connected world, mobile technology is an interesting if not essential feature banks can offer. It was introduced to fill customers’ needs, such as saving time, quality of service or the elimination of geographical barriers. Additionally it also benefits banking institutions when it comes to service costs or customer satisfaction. However, like any emerging electronic channel, mobile banking is vulnerable to fraudsters preying on gaps in security. Even though the platform has changed, the challenges faced in m-banking are similar to those in e-banking. Mobile payments are an emerging and rapidly-growing alternative payment method. Rather than pay by cash, check or credit card, customers can opt to use their mobile phone to buy goods or services. Thanks to their quick transaction speed and convenience, mobile payments are gaining popularity as a method of paying for items such as music, videos, ringtones, online gaming subscriptions, wallpapers, transportation fare (bus, subway or train), parking meters, books, magazines and tickets. Today, the most common m-banking channels are telephone banking, IVR (Interactive Voice Response), SMS-based solutions, client/server-based applications (downloadable or pre-loaded), WAP and STK (SIM application Toolkit) banking. To reinforce security in mobile banking applications, mobile authentication is essential. Mobile authentication is a simple, low-impact enhancement that strengthens security. VASCO offers cost-effective and user-friendly solutions to secure all mobile banking channels. VASCO’s DIGIPASS API brings one-time password and e-signature functionality to end-users through their mobile devices, without the need for any additional hardware. 5 Building a secure banking enviroment Mobile payments secured by two-factor authentication provide a secure alternative to credit cards. Since the payment is made via a telephone, no credit card information is stored by the merchant, which eliminates the opportunity for hackers or employees to compromise card information. Because one-time passwords are used, the transaction can be verified to have originated from the exact phone registered for a specific user. VASCO’s DIGIPASS technology seamlessly integrates with existing mobile payments’ applications. Our mobile solutions offer customers and providers an easy, convenient and secure experience for payment alternatives.
  • 7. Customer references HSBC Bank Brazil provides m-banking using VASCO’s DIGIPASS for Mobile. HSBC is the first bank in Brazil to offer integrated m-banking services based on VASCO’s DIGIPASS for Mobile. HSBC retail customers can withdraw cash from ATMs using their mobile phone as an authentication device. The technology is non-reliant on third parties, overcoming provider dependency and network limitations. DIGIPASS for Mobile empowers financial institutions to quickly launch m-banking services. The solution allowed HSBC to increase its financial services outreach substantially by using a multi-channel approach. In its cooperation with HSBC, VASCO has been honored with the “Best Security Solution” award by the renowned Brazilian banking magazine Relatorio Bancario for its HSBC Brazil DIGIPASS for Mobile banking customer case. Oman Arab Bank provides secure e-banking services with DIGIPASS technology to prevent identity theft Oman Arab Bank offers its corporate and retail customers a variety of online services and is the only bank in the Sultanate to offer instant bill collection services for telecom providers. The bank also offers online governmental services and has established itself as a leading e-banking service provider. In order to protect its customers against online fraud, the bank implemented VASCO’s renowned DIGIPASS technology in combination with the authentication software IDENTIKEY Authentication Server. IDENTIKEY Authentication Server could be perfectly integrated into the bank’s infrastructure allowing Oman Arab Bank to add strong authentication to its different applications and channels. DIGIPASS GO 6 and DIGIPASS 260 were deployed for its retail and corporate customer base providing customers secure access to their accounts from anywhere at any time. Thanks to the integration of DIGIPASS technology, the bank was the first to offer card-less ATM services in the Middle East. Building a secure banking enviroment 6
  • 8. Securing all channels Leveraging EMV card investment Preventing ATM fraud EMV cards were deployed to increase the security of credit card transactions by using encryption algorithms that provide authentication of the card to the processing terminal and the transaction processing center. EMV cards can be leveraged for the deployment of two-factor authentication without the cost of issuing any additional personalized authenticators. When the Automatic Teller Machine (ATM) was brought into use, thieves used to watch over your shoulder to memorize your PIN and try to steal your debit/credit card. Since then, more complex mechanisms such as skimming and ghost ATMs, have been developed. The Chip Authentication Program (CAP), a MasterCard initiative which received Visa support, offers two-factor authentication as both a smart card and a valid PIN have to be present for a transaction to succeed. VASCO’s CAP-based solutions are suitable for mass deployment in retail banking. The customers’ regular debit and/or credit card can be used to generate one-time passwords and e-signatures offering strong authentication. Each of these authentication mechanisms can also secure multiple applications, from e-banking to e-commerce. VASCO can also enhance EMV-CAP solutions with unique authenticators (optical readers, one-button devices) or add-on features like VASCO strong authentication. These enhancements make the deployment of EMV card-based strong authentication even more secure and convenient for banks and their customers. 7 Building a secure banking enviroment Strong authentication can be added to prevent ATM fraud. When a customer wants to withdraw money, he authenticates himself using a one-time password in combination with a PIN code. This extra layer of security can be added without too much hassle as existing ATM infrastructures do not have to be adapted. Besides, the conversion to OTP validation can be executed quite rapidly and inexpensively for banks that already use strong authentication for their online channels. Banks can leverage their investments made in strong authentication in multiple ways. Either they can link multiple applications, such as e-banking channels, phone banking and ATM operations to a single authentication device. Or they can decide to have a dedicated authenticator for ATM security.
  • 9. Customer references BANRISUL adopts VASCO’s authentication solution for e-banking Banrisul is a multiple service bank controlled by the state of Rio Grande do Sul and is one of the most profitable banks in Brazil. With a history that goes back almost a century, the bank is focusing on maintaining its leadership position in Rio Grande do Sul. Besides its extensive presence throughout the state, Banrisul has an ability to expand the participation in its current client base by increasing the services used by its customers. By providing its customers with an authentication solution, Banrisul offers them the possibility to access the bank’s online services in total security, anywhere at any time. Banrisul is the first state bank in Brazil to employ the leading DIGIPASS brand on the market to offer its customers maximum security to conduct their banking transactions. The bank wanted to adopt a solution that was simple to use and had the possibility of unifying strong authentication to digital certification subscription and encryption services. This is one of the reasons, Banrisul chose for VASCO’s DIGIPASS 905 solution. DIGIPASS 905 integrates DIGIPASS security with card reader functionality, offering Banrisul’s customers secure access to its home and office Internet banking services using authentication based on digital certificates stored on smart cards. DnB Nor implemented VASCO’s DIGIPASS to secure the BankID scheme DnB NOR is Norway’s largest financial services group offering banking services, life & pension insurances, a financial distribution network and acts as Norway’s largest real estate broker. DnB NOR needed to implement a security solution for BankID that would meet all of BankID’s security requirements. BankID delivers a public key infrastructure (PKI) solution enabling members from the Norwegian public to identify themselves and sign digital documents from authorities, companies and other organizations on the Internet. The BankID scheme works with nearly all Norwegian banks and banking groups, amongst others DnB NOR. It is an open national standard for all citizens with an online-bank, for all enterprises and public offices and is based on PKI technology. To meet BankID’s security requirements, DnB NOR implemented VASCO’s patented DIGIPASS technology with one-time passwords. Previously, the company worked with different types of systems and security devices for their retail customers. Some customers even had several different devices. DnB NOR wanted to implement one single authentication method to simplify handling which would lead to more satisfied customers and would also reduce costs in the long term. A better and clearer logon process would also reduce calls to the bank’s call centre. DnB NOR found in VASCO’s DIGIPASS GO 3 the security solution to suit their and their customers’ needs. DIGIPASS GO 3 is a simple and user-friendly authentication device, offering a high security level compliant with BankID’s security standards. DNB NOR Building a secure banking enviroment 8
  • 10. Front-end CLIENT SIDE TECHNOLOGY: DIGIPASS FAMILY VASCO’s DIGIPASS family offers a wide range of end-user authentication devices which all make use of VASCO’s VACMAN core technology. Customers can choose from a wide range of authenticators (OTP, challenge/response, e-signature or PKI devices), both software and hardwarebased, which best fit their needs. All DIGIPASS devices are fully customizable with your logo and corporate colors. To view the complete DIGIPASS family, please visit www.vasco.com/DIGIPASS One-button devices The DIGIPASS GO family combines ultra-portability with user convenience. The OTP is generated at the push of the button. Key features DIGIPASS GO 3 DIGIPASS GO 6 DIGIPASS GO 7 • Intuitive use • Ultra-portable • Time and event-based authentication • DES/3DES/AES/OATH • Long lifetime battery PIN-pad devices A range of small and user-friendly PIN-protected authentication devices. Key features DIGIPASS 260 DIGIPASS 270 DIGIPASS 301cv DIGIPASS 736 • Offers response only OTP, e-signature and challenge/ response functionality • PIN protection and PIN unlocking • Simple and intuitive in use • Time/event and challenge/ response based • Long lifetime battery 9 Building a secure banking enviroment
  • 11. Front-end Card Readers A wide range of connected, unconnected and connectable card readers Key features DIGIPASS 835 DIGIPASS 836 DIGIPASS 837 DIGIPASS 865 DIGIPASS 905 • No need to install drivers in unconnected mode • Smart card based OTP, e-signature, PKI functionality • Straightforward deployment • Ease of use • Leverage EMV or PKI cards deployment • No personalization required Software DIGIPASS Software-based DIGIPASS solutions leverage mobile phones, tablet PCs or web-browsers for authentication purposes. Key features Virtual DIGIPASS DIGIPASS for Mobile DIGIPASS Nano • OTP and e-signature capability • No hardware deployment • Time and event-based authentication • PIN-protected • Transparent, user-friendly and ultra-portable PKI-based solutions VASCO’s PKI-offering consists of DIGIPASS CertiID™, a client-based software suite, and a range of DIGIPASS PKI devices, the DIGIPASS KEY range. DIGIPASS CertiID provides an answer to the growing need for digital signature solutions for high risk transactions and document signing. The DIGIPASS KEY range consists of smart card based solutions and USB devices. DIGIPASS CertiID DIGIPASS KEY 101 DIGIPASS KEY 200 DIGIPASS KEY 860 Building a secure banking enviroment 10
  • 12. Back-end SERVER SIDE TECHNOLOGY Copyright © Haymarket Media Inc. IDENTIKEY Authentication Server DIGIPASS CertiID™ IDENTIKEY Authentication Server is VASCO’s off-the-shelf centralized authentication server. It is the perfect choice to secure remote access to corporate resources and various types of (web-based) applications, from remote access and SSL/VPN to SaaS. IDENTIKEY Authentication Server Banking Edition is the complete and robust protection against man-in-the-middle (MITM) attacks. To address growing authentication needs, VASCO presents DIGIPASS CertiID, a client-based software suite that combines PKI and OTP technology. The software suite was designed for users unfamiliar with PKI technology. DIGIPASS CertiID is installed on the PC of the end-user and is used in conjunction with a DIGIPASS KEY solution the authentication device. The solution is straightforward and scalable; fit to accommodate the needs of both large and small implementations. It offers complete functionality and management features without the need for significant budgetary or personnel investments. This results in a fast and cost-effective rollout. IDENTIKEY Authentication Server verifies the authentication requests from individuals trying to access banking applications and centrally administers user authentication policies. Authentication and transaction validation functions can be integrated into existing web-based applications, using a built-in SOAP API. One DIGIPASS device can therefore be used for several applications. VACMAN Controller In banking environments, the device helps to comply with more stringent financial regulations (Sarbanes-Oxley, Basel II, HIPAA) and enhanced security requirements. PKI technology can be used to digitally sign transactions. When an end-user initially requests a certificate, a private key is stored on the (integrated) smart card of the authentication device. This private key can never be exported, leveraging security. To activate the device, the user must enter his PIN code. VACMAN VACMAN is VASCO’s core authentication platform already integrated by a vast number of leading banks and financial institutions worldwide. It combines all authentication applications, including OTP, challenge/response and e-signature on a single platform. VACMAN is used for the authentication of millions of end-users. It can seamlessly be integrated into existing e-banking applications in a time and cost-effective way. Furthermore, VACMAN is highly scalable: additional users or applications can easily be added. 11 Building a secure banking enviroment
  • 13. Embedded and OEM Solutions COST-EFFICIENT. PLATFORM INDEPENDENT. HIGH SECURITY Authenticate the online community Embedded security solutions DIGIPASS embedded and OEM solutions are VASCO’s response to the changing authentication market. It is a proof of VASCO’s commitment to find more convenient, portable and cost-effective ways to secure the online community. VASCO strives to develop authentication solutions that can operate on any platform and are suited to secure any application. VASCO’s mission with its DIGIPASS Embedded Security Solutions (DESS) is to enable DIGIPASS technology on client devices and applications; whatever these may be. Dormant DIGIPASS are embedded into products of leading vendors, bringing authentication within everyone’s reach. This process shifts the authentication paradigm: rather than distribute security devices to end-users, VASCO simply provisions that security to a device the end-user already has. OEM solutions VASCO develops practical security solutions that balance cost, security and convenience for every customer. VASCO’s DIGIPASS family was designed to run on one single infrastructure and all different form factors are interoperable with each other. This allows VASCO partners to add strong authentication to their offering without major investments or disruptions to their businesses. As authentication becomes a crucial element in every security infrastructure, VASCO’s product portfolio provides organizations with a unique competitive advantage that could lead to increased market share and revenue. As our solutions are so versatile, they can meet the demands of any customer. DIGIPASS Embedded Security Solutions challenge the belief that increased user convenience automatically entails decreased costs but also diminished security. With an embedded approach, costs are inherently lower. The equation hence changes from having to sacrifice security for the sake of cost or convenience to one where security becomes the corner stone of any online application. Opportunities for DIGIPASS embedded security include: Computer platforms Mobile platforms Existing security credentials and smart cards USB/SD/MMC/SIM or other memory devices or cards Security software Dormant DIGIPASS are embedded into products of leading vendors, bringing authentication within everyone’s reach. Building a secure banking enviroment 12
  • 14. Cloud-based authentication OUTSOURCE AUTHENTICATION WITH DIGIPASS AS A SERVICE The triumph of cloud computing MYDIGIPASS.COM Cloud computing is the upcoming trend and will dominate the IT landscape for years to come. More flexibility, better scalability and lower costs. The arguments for cloud computing are hard to refute. MYDIGIPASS.COM is an online platform that allows web application owners to facilitate password management while adding an additional level of security to the access log-on procedure. VASCO allows website owners to freely integrate strong authentication using DIGIPASS one-time passwords on their site for-end users to secure access to their services and content. VASCO offers DIGIPASS as a Service, a fully outsourced authentication model. It has been designed for application service providers wanting to add strong authentication to protect their content, data and applications. DIGIPASS as a Service overcomes a number of issues commonly associated with the deployment of a two-factor authentication solution. Native integration of strong authentication might require infrastructural changes. Additionally, deploying two-factor authentication to a large number of end-users might be considered costly and time-consuming. Logistic burdens, portability of authentication devices, multiple authenticators for different applications, the installation of software on the end-user’s PC, associated administration... the hurdles are plentiful. Website owners can boost customer trust by providing secure single sign-on for all applications connected to the platform. Additionally, back-office and support costs can be reduced by eliminating costs associated with password management. End-users in turn can conveniently and securely access their applications through the MYDIGIPASS.COM portal using VASCO’s DIGIPASS technology. To generate a one-time password to log on to the platform, they can use one of the hundred million dormant DIGIPASS in the field or download a mobile client on MYDIGIPASS.COM free of charge. Authentication from A to Z DIGIPASS as a Service overcomes these apprehensions: authentication becomes an operating expense rather than a capital expense, thus lowering the cost of deployment and enhancing the total cost of ownership. VASCO takes care of the entire authentication process for you: from deployment and administration to the authentication of your end-users’ devices. Furthermore, with VASCO’s DIGIPASS Plus devices, multiple authenticators for different applications belong to the past. DIGIPASS Plus devices possess a second identity enabling end-users to use one DIGIPASS device for several applications. Together with VASCO’s DESS strategy, we bring authentication within everyone’s reach. DIGIPASS as a Service allows organizations and application providers to focus on their core competencies without worrying about security issues. 13 Building a secure banking enviroment
  • 15. SEAL STAY INFORMED AND UP-TO-DATE WITH SEAL Up-to-date with latest security trends SEAL offering New types of online attacks emerge almost every day. It is therefore critical for IT security professionals to stay informed and remain upto-date on the latest trends. As a leading Internet security company VASCO considers it its duty to actively share information on current and emerging IT security trends and online fraud schemes with its customers, partners, distributors and resellers and anybody who needs our advice. VASCO’s SEAL comprises the following: VASCO’s Security Experts Academy & e-Learning platform (SEAL) E-learning: more than 120 hours of web-based or DVDbased IT security training Classroom training by VASCO security experts VASCO Certification: SEAL training offers IT security professionals the opportunity to become VASCO Certified Engineers VASCO Authorized Training Centers: training by VASCO partners Junior Programs: trainee and scholarship programs for graduates More information is available on: www.vasco.com/training SEAL is VASCO’s worldwide community of security professionals. The SEAL training offer consisting of general IT security topics and VASCO product trainings will help people looking to build a career in information security. Through our offering of classroom training, e-learning or DVD-based training and forums, VASCO SEAL allows you to: Become a VASCO Certified Engineer up-to-date on the latest security trends Stay Develop new skills in IT security access to a community with an extensive IT security Get knowledge base Exchange information with peers If you are looking to extend your knowledge in the IT security field, you are welcome to join VASCO SEAL to become a security professional. SEAL courses are appropriate for sales professionals, product managers, support engineers, field engineers and security consultants. Building a secure banking enviroment 14
  • 16. Fulfillment and provisioning services BRANDING, DISTRIBUTION, STORAGE... TRUST VASCO Fulfillment services VASCO has built a wealth of experience and know-how about successful mass deployment of authentication projects. VASCO puts this expertise at its customers’ disposal allowing you to diversify your services from your competitors’, to focus on your core business and to lighten the supply chain burden. Branding and customization: Every DIGIPASS can be branded reflecting corporate colors and logos in order to enhance brand recognition for end-users Customized packaging: VASCO offers a wide range of packaging services, ranging from non-personalized individual or bulk packaging to fully customized and branded packaging Provisioning services Hardware provisioning: Security parameters can be personalized according to the requirements of corporate security departments. Secrets are stored in DIGIPASS hardware through an approved and audited process. Advanced encryption methods are used to communicate initial PINs and to unlock codes by corporate security departments. Software provisioning: For the provisioning of secrets on mobile phones or third party platforms VASCO offers an application provisioning service which takes deployment and management issues of softwarebased authentication out of your hands, allowing you to focus on your core business. Refurbishment: Tailor-made service offering to prolong DIGIPASS life-cycle and reduce the economical and ecological footprint of authentication investments Distribution and storage: VASCO can offer supply chain services, delivering orders anywhere in the world, to a central location, branch offices or to end-users, we can also store customer’s stock in secure and adapted warehouses 15 Building a secure banking enviroment
  • 17. Support DEDICATION. COMMITMENT. SATISFIED CUSTOMERS Security is a facilitator, not an obstacle Support offering It is critical to businesses around the globe that their business applications are up-and-running at all times and securely accessible. To ensure authentication is not considered a burden but a facilitator, VASCO has a support offering specified per user type: VASCO offers a wide range of support packages and technical support services for environments of all sizes and all types. We can simplify your life with rapid-response coverage around the world and flexible service plans to suit your needs and budget. For all types of customers VASCO has a tailored answer ranging from basic support to dedicated SLA, ensuring rapid intervention around the globe. Personalize your support experience with a variety of service options from VASCO. Discover which VASCO Technical Support Plan best fits your needs. Standard Support 24/7 support support VIP Pay-Per-Incident Remote Assistance Package Emergency Support Banking and application security customers can choose from a number of standardized support packages ranging from standard support during business hours, 24/7 support, service level agreement (SLA) based support, pay-per-incident and remote assistance support enterprise security customers, technical support is provided For through the reseller or system integrator. Direct technical support provided by VASCO is available upon request VASCO distributors, system integrators and certified engineers benefit from a standard technical support during business hours VASCO resellers, technical support is provided through For the distributor. Direct technical support provided by VASCO is available upon request More detailed information on our support offering is available on: www.vasco.com/support Building a secure banking enviroment 16
  • 18. Professional services TURN YOUR AUTHENTICATION PROJECT INTO A SUCCESS Professional services Benefits VASCO’s Professional services have been designed to assist customers, resellers, partners and integrators in the deployment of their strong authentications projects. By sharing our expertise we help our customers to minimize the challenges and maximize the results of the authentication within time and budget. VASCO‘s Professional services bring many years of experience in the deployment of two-factor authentication projects to the table. experienced team An Our experienced and certified engineers ensure seamless integration of authentication into existing applications or infrastructure, using the proven VASCO methodology Our offering Proven methodology Short term deployments, support throughout the project and enhanced security for remote access, LAN, online applications, e-banking and m-banking environments Every authentication is unique. Different customers have different needs. Whichever the driver to implement a strong authentication project, VASCO has the qualified engineers and project managers to turn the customer’s authentication project into a success. cost of ownership Total Realization of projects on time and within budget Our Professional services team will use the proven VASCO methodology in each authentication project. This methodology helps in: Defining the scope of the project Designing the appropriate solution Implementing the products and solutions Building applications meeting the customers need Supporting the customers partner of in-house team throughout the project Certifying the customers application according to the market standards Reviewing existing implementations and make recommendations for optimization 17 Building a secure banking enviroment
  • 19. Consulting services LEVERAGE YOUR AUTHENTICATION VASCO Consulting services Offering VASCO’s Consulting services have been designed to complement our offering of strong authentication solutions with a spectrum of quality service options that help our customers to make the most of their authentication investments. VASCO’s Consulting services consist of: Whether you are looking for information about current security challenges and threats in e-banking, e-commerce or network security, or you need advice prior to or during an implementation, VASCO can offer its expertise. By sharing expertise, proven methodology and best practices, VASCO helps its customers to decrease time to market of their authentication project. You will benefit from the combined expertise of thousands of succesful strong authentication deployments worlwide. Our consulting team is comprised of engineers and deployment, fulfillment and customer service specialists. VASCO’s consultants are there to deliver the professional advice you need for a succesfull authentication rollout. Consulting before implementation: Focus on threats and defense mechanisms in e-banking security and best practices for strong authentication implementations in e-banking and mobile applications Advice during implementation: Consists of specific product deployment consulting Consulting after implementation: Focus on fraud detection and analysis On demand Individual consulting services to fit your unique needs More detailed information on our consulting offer is available on: www.vasco.com/consulting Together with VASCO, we looked at different ways to use our DIGIPASS devices with VACMAN Controller. Their advice not only led to significant and important enhancements, but also to an overall improvement of our security features. VASCO brought a lot of value and expertise to our project and for this we consider them as a valuable business partner. Daniel Ratinckx, Head of Delen-Online at Bank Delen Building a secure banking enviroment 18
  • 20. About VASCO VASCO is a leading supplier of strong authentication and e-signature solutions and services specializing in Internet security applications and transactions. VASCO has positioned itself as global software company for Internet security and designs, develops, markets and supports DIGIPASS®, CertiID™, VACMAN®, IDENTIKEY® and aXsGUARD® authentication products. VASCO’s prime markets are the financial sector, enterprise security, e-commerce and e-government. VASCO Offices VASCO Sales Presence www.vasco.com I N T E R N AT I O N A L H Q - S w i t z e r l a n d phone: +41 43 555 35 00 email: info-europe@vasco.com C O R P O R AT E H Q - C h i c a g o phone: +1 630 932 8844 email: info-usa@vasco.com Sales offices A s i a - Pa c i f i c - S i n g a p o r e phone: +65 6323 09 06 email: info-asia@vasco.com A s i a - Pa c i f i c - J a p a n phone: +81 3 5532 7862 email: info-japan@vasco.com A s i a - Pa c i f i c - I n d i a phone: +91 22 4090 7112-14 email: info-india@vasco.com Australia - Sydney phone: +61 2 8061 3700 email: info-australia@vasco.com Europe, Middle East, Africa - Wemmel phone: +32.2.609.97.00 email: info-europe@vasco.com Europe, Middle East, Africa - Austria phone: +43 1 9043132-0 email: info-europe@vasco.com Latin America - Brazil phone: +5511 3443 7541 email: ES-brazil@vasco.com USA - Boston phone: +1 508 366 3400 email: info-usa@vasco.com USA - California phone: +1 650 378 1202 email: info-usa@vasco.com ® Copyright © 2014 VASCO Data Security, Inc, VASCO Data Security International GmbH. All rights reserved. VASCO®, CertiID™, VACMAN®, IDENTIKEY®, aXsGUARD®, DIGIPASS® and the logo are registered or unregistered trademarks of VASCO Data Security, Inc. and/or VASCO Data Security International GmbH in the U.S. and other countries. VASCO Data Security, Inc. and/or VASCO Data Security International GmbH own or are licensed under all title, rights and interest in VASCO Products, updates and upgrades thereof, including copyrights, patent rights, trade secret rights, mask work rights, database rights and all other intellectual and industrial BR201402 - v6 property rights in the U.S. and other countries. Other names may be trademarks of their respective owners.