27 September 2016
Visit colt.net

Commerzbank to deploy Cronto mobile phone-based authentication technology

13 November 2008  |  12046 views  |  0 Tablet Computer Screen

Germany's Commerzbank has deployed technology from UK vendor Cronto that enables online banking customers to authenticate transactions by taking a photo of their PC screens with their mobile phones.

Commerzbank is offering the Cronto Visual Transaction Signing system to selected customers to secure verification of funds transfer instructions. It will the first bank to deploy the technology, which was originally developed at the University of Cambridge.

When a customer signs in to bank online or make a transaction, they are presented with a unique graphical cryptogram consisting of a matrix of coloured dots displayed on their PC screen.

The customer then takes a photo of the image on the screen using their mobile phone. Cronto's photoTAN software - downloaded into the customer's phone - is then used to authenticate the transaction.

Critical transaction information, like payment details, are displayed on the phone's screen to confirm it has not been tampered with. An authentication code is then generated and passed back to the bank's server to complete the transaction.




Cronto says its technology eliminates the inconvenience of entering transaction details manually into separate authentication devices.

In addition, by removing the need to re-key information it offers a far higher level of security than traditional external authenticator-based offerings which are open to man-in-the-middle attacks where criminals can potentially trick customers into entering the wrong information into their devices.

Kai Buchholz-Stepputtis, head, security consulting and research, Commerzbank, says: "Cronto's innovative solution based on the unique Visual Cryptogram offers protection against the most sophisticated fraud techniques such as "Man-in-the-Browser" Trojans."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

Commerzbank and G&D sign three year card deal

Commerzbank and G&D sign three year card deal

13 November 2008  |  7925 views  |  0 comments
SocGen swaps hardware tokens for Entrust authentication technology

SocGen swaps hardware tokens for Entrust authentication technology

05 November 2008  |  7552 views  |  0 comments
Gemalto releases mini online banking authentication device

Gemalto releases mini online banking authentication device

30 October 2008  |  10265 views  |  0 comments
IBM unveils USB stick to fight online banking fraud

IBM unveils USB stick to fight online banking fraud

29 October 2008  |  11805 views  |  0 comments
Apacs talks up take-up of online card security schemes

Apacs talks up take-up of online card security schemes

22 September 2008  |  8810 views  |  0 comments
Man-in-the-middle phishing kits circulating freely on the Web

Man-in-the-middle phishing kits circulating freely on the Web

10 August 2007  |  13107 views  |  0 comments
ABN Amro compensates victims of 'man-in-the-middle' attack

ABN Amro compensates victims of 'man-in-the-middle' attack

02 April 2007  |  22798 views  |  0 comments

Related company news

 

Related blogs

Create a blog about this story (membership required)
Visit www.abe-eba.euVisit dh.comVisit contisgroup.com

Who is commenting?

A Finextra member Finextra Member Commented on: PSD2 - opportunities,...
A Finextra member Finextra Member Commented on: R3 banks use Intel dis...

Top topics

Most viewed Most shared
RBS tests demonstrate ability of Ethereum to support a national domestic payments systemRBS tests demonstrate ability of Ethereum...
13670 views comments | 52 tweets | 47 linkedin
Banks test blockchain for reference data managementBanks test blockchain for reference data m...
8668 views comments | 16 tweets | 27 linkedin
Swift beware: Ripple signs banks to global payments steering groupSwift beware: Ripple signs banks to global...
8543 views comments | 32 tweets | 17 linkedin
FCA to kickstart sandbox with 24 applicantsFCA to kickstart sandbox with 24 applicant...
7066 views comments | 33 tweets | 15 linkedin
Banks clubbing together to tackle KYCBanks clubbing together to tackle KYC
6881 views comments | 3 tweets | 8 linkedin

Featured job

Find your next job