30 April 2017
Find out more

Commerzbank to deploy Cronto mobile phone-based authentication technology

13 November 2008  |  12579 views  |  0 Tablet Computer Screen

Germany's Commerzbank has deployed technology from UK vendor Cronto that enables online banking customers to authenticate transactions by taking a photo of their PC screens with their mobile phones.

Commerzbank is offering the Cronto Visual Transaction Signing system to selected customers to secure verification of funds transfer instructions. It will the first bank to deploy the technology, which was originally developed at the University of Cambridge.

When a customer signs in to bank online or make a transaction, they are presented with a unique graphical cryptogram consisting of a matrix of coloured dots displayed on their PC screen.

The customer then takes a photo of the image on the screen using their mobile phone. Cronto's photoTAN software - downloaded into the customer's phone - is then used to authenticate the transaction.

Critical transaction information, like payment details, are displayed on the phone's screen to confirm it has not been tampered with. An authentication code is then generated and passed back to the bank's server to complete the transaction.




Cronto says its technology eliminates the inconvenience of entering transaction details manually into separate authentication devices.

In addition, by removing the need to re-key information it offers a far higher level of security than traditional external authenticator-based offerings which are open to man-in-the-middle attacks where criminals can potentially trick customers into entering the wrong information into their devices.

Kai Buchholz-Stepputtis, head, security consulting and research, Commerzbank, says: "Cronto's innovative solution based on the unique Visual Cryptogram offers protection against the most sophisticated fraud techniques such as "Man-in-the-Browser" Trojans."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

Commerzbank and G&D sign three year card deal

Commerzbank and G&D sign three year card deal

13 November 2008  |  8094 views  |  0 comments
SocGen swaps hardware tokens for Entrust authentication technology

SocGen swaps hardware tokens for Entrust authentication technology

05 November 2008  |  7704 views  |  0 comments
Gemalto releases mini online banking authentication device

Gemalto releases mini online banking authentication device

30 October 2008  |  10571 views  |  0 comments
IBM unveils USB stick to fight online banking fraud

IBM unveils USB stick to fight online banking fraud

29 October 2008  |  11978 views  |  0 comments
Apacs talks up take-up of online card security schemes

Apacs talks up take-up of online card security schemes

22 September 2008  |  8966 views  |  0 comments
Man-in-the-middle phishing kits circulating freely on the Web

Man-in-the-middle phishing kits circulating freely on the Web

10 August 2007  |  13335 views  |  0 comments
ABN Amro compensates victims of 'man-in-the-middle' attack

ABN Amro compensates victims of 'man-in-the-middle' attack

02 April 2007  |  23098 views  |  0 comments

Related company news

 

Related blogs

Create a blog about this story (membership required)
visit vasco.com/news/PSD2-compliant-solutionsFind out moreVisit capgemini.com

Top topics

Most viewed Most shared
JPMorgan formally quits R3JPMorgan formally quits R3
8493 views comments | 27 tweets | 16 linkedin
Six global banks join Swift DLT trialsSix global banks join Swift DLT trials
8424 views comments | 18 tweets | 36 linkedin
BBVA steps up fintech acquisition strategy with purchase of OpenpayBBVA steps up fintech acquisition strategy...
7779 views comments | 19 tweets | 18 linkedin
Should central banks open up payment and settlement systems to non-banks?Should central banks open up payment and s...
6518 views comments | 22 tweets | 21 linkedin
UBS moves risk platform to Microsoft Azure cloudUBS moves risk platform to Microsoft Azure...
6441 views comments | 11 tweets | 21 linkedin

Featured job

to 120K base, £300K ote, stock options
London, UK

Find your next job