PSD2 is approaching fast and raising numerous questions regarding strong customer authentication (SCA), security and smooth customer experience. Check out the presentation to learn about 5 important things to know in order to meet Strong Customer Authentication requirements under PSD2. For more details, take a look at a free on-demand webinar organized by Asseco SEE at digitalbanking.asseco.com.

1. GET READY FOR PSD2
STRONG CUSTOMER AUTHENTICATION (SCA)
Strong Customer Authentication is authentication based on the use of two or more elements categorised
as knowledge, possession & inherence.
These are 5 things you need to know
to prepare for PSD2 SCA implementation!

2. 1
...Strong Customer Authentication is
required for any transaction < EUR 500
...exemptions can apply
for smaller amounts.
What PSD2 Requires?

3. 2
…when the payer accesses
a payment account online.
…when the payer initiates
a payment that is prone to fraud.
…any time the payer executes
an action online that may imply fraud.
When To Apply SCA?

4. 3 ...a one-time authcode from at least
2 independent factors (2FA).
...for payment authentication,
the amount and the payee need
to be parts of the authcode generation.
Dynamic Linking
HOW TO APPLY SCA?

5. 4
…include dev specific data in authcode.
…encrypt authcode using a key
in the SE of the device.
…encrypt authkey using a knowledge
element.
No Cloning of
Authentication Elements

6. 5
…use separated secure execution
environments.
…apply root detection
and OS sandboxing.
…use RASP to protect Apps
against alteration.
Independent
Authentication Elements

7. For detailed info, check out a free on-demand webinar at
digitalbanking.asseco.com