eLearningClasses.com
Editorial & Advertiser Disclosure Global Banking And Finance Review is an independent publisher which offers News, information, Analysis, Opinion, Press Releases, Reviews, Research reports covering various economies, industries, products, services and companies. The content available on globalbankingandfinance.com is sourced by a mixture of different methods which is not limited to content produced and supplied by various staff writers, journalists, freelancers, individuals, organizations, companies, PR agencies Sponsored Posts etc. The information available on this website is purely for educational and informational purposes only. We cannot guarantee the accuracy or applicability of any of the information provided at globalbankingandfinance.com with respect to your individual or personal circumstances. Please seek professional advice from a qualified professional before making any financial decisions. Globalbankingandfinance.com also links to various third party websites and we cannot guarantee the accuracy or applicability of the information provided by third party websites. Links from various articles on our site to third party websites are a mixture of non-sponsored links and sponsored links. Only a very small fraction of the links which point to external websites are affiliate links. Some of the links which you may click on our website may link to various products and services from our partners who may compensate us if you buy a service or product or fill a form or install an app. This will not incur additional cost to you. A very few articles on our website are sponsored posts or paid advertorials. These are marked as sponsored posts at the bottom of each post. For avoidance of any doubts and to make it easier for you to differentiate sponsored or non-sponsored articles or links, you may consider all articles on our site or all links to external websites as sponsored . Please note that some of the services or products which we talk about carry a high level of risk and may not be suitable for everyone. These may be complex services or products and we request the readers to consider this purely from an educational standpoint. The information provided on this website is general in nature. Global Banking & Finance Review expressly disclaims any liability without any limitation which may arise directly or indirectly from the use of such information.

FIDO AUTHENTICATION MEETS EUROPEAN BANKING AUTHORITY’S PAYMENT SERVICES DIRECTIVE (PSD2) REQUIREMENTS

FIDO standards provide secure, user-friendly way for European payments industry to meet PSD2 strong authentication requirements

The FIDO Alliance’s authentication standards provide a scalable way for the European financial ecosystem to meet PSD2 requirements for strong authentication of user logins and cryptographically signed transactions — while also meeting organisational and consumer demand for transaction convenience.

Authentication is based on open standards that are supported by an interoperable ecosystem of 350+ FIDO Certified solutions. Banks and payment services providers (PSPs) can select from many leading vendors of modern authentication solutions and/or they can develop and test their own FIDO-based PSD2 solutions. Once deployed, banks and PSPs may accept a variety of certified, interoperable FIDO-compliant authenticators in the market, including those in mobile devices and PCs, and hardware-backed security keys. The end result is a low-friction approach for user authentication that exceeds the European Banking Authority’s (EBA) PSD2 requirements.

The FIDO architecture offers a truly “best of both worlds” solution to the problems that drove the creation of multi-factor authentication requirements as defined in the EBA’s final draft Regulatory Technical Standards (RTS) on Strong Customer Authentication (SCA).

– With asymmetric cryptography at the heart of the security model, FIDO addresses the RTS security requirement designed to mitigate theft of payment service credentials by all known attacks that successfully harvest “shared secret” credentials like passwords, effectively mitigating the techniques that are behind 95% of all web app attacks that lead to data breaches

– With easy-to-use biometrics and security keys being used for the “what you are” and “what you have” authentication factors, respectively, FIDO is addressing increased market demand for greater user convenience than anything used for online payments before

– FIDO privacy requirements ensure biometric data, when used, is never shared, addressing requirements by data protection authorities and consumer concerns about sharing biometric information online