27 August 2016
Find out more

Commerzbank to deploy Cronto mobile phone-based authentication technology

13 November 2008  |  11948 views  |  0 Tablet Computer Screen

Germany's Commerzbank has deployed technology from UK vendor Cronto that enables online banking customers to authenticate transactions by taking a photo of their PC screens with their mobile phones.

Commerzbank is offering the Cronto Visual Transaction Signing system to selected customers to secure verification of funds transfer instructions. It will the first bank to deploy the technology, which was originally developed at the University of Cambridge.

When a customer signs in to bank online or make a transaction, they are presented with a unique graphical cryptogram consisting of a matrix of coloured dots displayed on their PC screen.

The customer then takes a photo of the image on the screen using their mobile phone. Cronto's photoTAN software - downloaded into the customer's phone - is then used to authenticate the transaction.

Critical transaction information, like payment details, are displayed on the phone's screen to confirm it has not been tampered with. An authentication code is then generated and passed back to the bank's server to complete the transaction.




Cronto says its technology eliminates the inconvenience of entering transaction details manually into separate authentication devices.

In addition, by removing the need to re-key information it offers a far higher level of security than traditional external authenticator-based offerings which are open to man-in-the-middle attacks where criminals can potentially trick customers into entering the wrong information into their devices.

Kai Buchholz-Stepputtis, head, security consulting and research, Commerzbank, says: "Cronto's innovative solution based on the unique Visual Cryptogram offers protection against the most sophisticated fraud techniques such as "Man-in-the-Browser" Trojans."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

Commerzbank and G&D sign three year card deal

Commerzbank and G&D sign three year card deal

13 November 2008  |  7905 views  |  0 comments
SocGen swaps hardware tokens for Entrust authentication technology

SocGen swaps hardware tokens for Entrust authentication technology

05 November 2008  |  7533 views  |  0 comments
Gemalto releases mini online banking authentication device

Gemalto releases mini online banking authentication device

30 October 2008  |  10233 views  |  0 comments
IBM unveils USB stick to fight online banking fraud

IBM unveils USB stick to fight online banking fraud

29 October 2008  |  11777 views  |  0 comments
Apacs talks up take-up of online card security schemes

Apacs talks up take-up of online card security schemes

22 September 2008  |  8788 views  |  0 comments
Man-in-the-middle phishing kits circulating freely on the Web

Man-in-the-middle phishing kits circulating freely on the Web

10 August 2007  |  13079 views  |  0 comments
ABN Amro compensates victims of 'man-in-the-middle' attack

ABN Amro compensates victims of 'man-in-the-middle' attack

02 April 2007  |  22748 views  |  0 comments

Related company news

 

Related blogs

Create a blog about this story (membership required)
Visit www.abe-eba.euVisit capgemini.comFind out more

Top topics

Most viewed Most shared
hands typing furiouslyBlockchain: what to expect for 2017?
9120 views 0 | 56 tweets | 46 linkedin
hands typing furiouslyBig Data's Three Big Trends in 2016
7548 views 5 | 22 tweets | 13 linkedin
hands typing furiouslyHow Banks Are Losing Millions by Ignoring...
7288 views 11 | 24 tweets | 9 linkedin
Nordea looking for AI and blockchain breakthroughsNordea looking for AI and blockchain break...
6476 views comments | 17 tweets | 20 linkedin
R3 blockchain consortium sheds light on Concord projectR3 blockchain consortium sheds light on Co...
5844 views comments | 14 tweets | 14 linkedin

Featured job

Find your next job