Solutions
As the need for enhanced security has exponentially increased, the obvious need for customers with remote access to alternative distribution networks led PCS to partner with Vasco, a leading software company specialized in internet security, in order to provide a state-of-art platform that brings strong authentication and secure access to web applications, business applications and virtual private networks.
PCS UATA (User Authentication & Transaction Authorization) platform integrates smoothly into existing applications that require remote access and can reliably secure any part of your network without having to change your existing applications.
The PCS UATA solution is an Integrated, Out-Of-The-Box Platform for User Authentication and Transaction Authorization for electronic financial services, e-Banking / Trading systems and other Banking Applications and processes.
Thia state-of-the-art platform allows the Banking Organization to achieve and acquire:
1) End Customer / User Authentication & Identification when accessing Electronic Financial (Banking & Investment) Services, independent of the actual distribution channel the customer is getting in touch with the Bank (e-banking, Phone Banking, IVR Banking, Mobile Banking, ATM etc.). The customer may be accessing the Bank through an Internet Application Login or through a Banking Agent or Service (e.g. Phone Banking). This is made possible through the use of OTPs (One Time Passwords) that the Security Tokens produce and the PCS UATA Server processes and verification.
2) End-Customer Electronic Transaction Signature, again, independent of the banking channel the transaction originates from which is achieved either:
a) With OTPs produced by the Tokens and verified by the PCS UATA Server.
b) Or with the Challenge / Response mechanism the Tokens and UATA Server support
c) Or with the e-signature mechanism the Tokens and the UATA Server support (e-signature is a token application that may accept a financial transaction's input fields, in order for the token to produce a unique Transaction Signature only for that specific transaction)
At the same time, ithe OTPs can be distributed, not only through the "physical" tokens that the Bank issues to its customers, but also through SMS messages and / or email, with the usage of Vasco's Virtual Digipass TokenTM. This solution also encompasses the PCS SMS / Email Gateway, which allows the delivery of the OTPs through SMS and / or email. Within the recommended solution, lies the integration of the PCS Software with the respective Bulk SMS Service that the Bank either already has, or the Bulk SMS Service of an established Mobile Operator that the Bank chooses. (See references at the end of this document.).
The integrated PCS UATA Solution comprises of:
a) The actual Security Token Devices (Vasco Digipass Tokens)
b) The PCS UATA Integration Server (with integration API through Web Services) for integrating the Token Platform to the Bank's applications and other back-end systems where user authentication and transaction signing is required, such as (Phone Banking, IVR Banking, Mobile Banking, ATM etc.).
c) The Tokens Administration Web Application, PCS Vasco Token Management Web Application.
It is widely known that the OTP Platform is based upon the Dual Factor Authentication methodology and technology, with symmetric key DES or 3DES encryption algorithms. Dual Factor Authentication is based on two factors: something the user «owns», which is the physical Token Device, and something the user «knows» which is the PIN required either to operate the Token, or the PIN / password required to enter an application or service, or to sign a transaction. With the integration of Dual Factor Authentication in Electronic Financial Services for end-Customers, both the user and the Bank are protected against unauthorised accesses, and security infringements.
PCS proven experience and know-how in the implementation of such Projects, provides the Bank with the competitive advantage of a complete solution and security platform, as regards Customer authentication and transactions signing, through high-end technologies and industry-standard methods, that support all Banking distribution channels in one server, and most importantly, with economies of scale and fast deployment and time-to-market. The Total Cost of Ownership of the total solution, substantially decreases as more and more applications and services are integrated to the Token platform through PCS UATA server and as more and more Token Devices are ordered and distributed to the end-users. And all that, without having the Bank investing in more Hardware, Software and Professional Services. With PCS UATA, the Bank can procure a professional solution from an established and experienced IT vendor, such as PCS.
