Vasco Data Security International, a software company specializing in authentication products, has introduced Identikey Server Banking Edition that supports EMV-CAP based and Hardware Security Module (HSM) based authentication.
Most banks use HSM for managing the secrets stored on smartcards. This maximizes the level of security, considering that the secrets which are stored in the HSM cannot be exported. Now Identikey Server offers total authentication using HSM next to its Vacman Controller technology to authenticate users and validate transactions.
The one-time password (OTP) or e-signature generated by the Digipass authenticator of the end-user will be sent to Identikey. Identikey Server will use HSM to validate the OTP or e-signature. When validated Identikey will grant access to the user or allow for the transaction to be executed.
Identikey Server is an authentication server offering OTP and e-signature validation with full management and reporting capability. Its Soap interface allows its integration in virtually any web-based application. With its EMV-CAP and HSM support banks in emerging markets have a total authentication solution at their disposal, leveraging their prior investments in EMV-CAP and HSM for authentication purposes. The HSM capability of Identikey Server offers optimal security since cryptographic keys cannot be compromised.
The Identikey Server Banking Edition will by default offer Virtual Digipass. Virtual Digipass is a user-friendly solution for user authentication and e-signature. Customers will type a user ID and PIN onto the banking site. In doing so, the banking site will send a one-time password by SMS to the end-user’s mobile phone, which he will use to access the online banking application.
Jan Valcke, president and COO at Vasco Data Security, said: “With the EMV-CAP and HSM support of Identikey, we meet the demand from banks for a total authentication solution offering optimal security. We enable them to leverage existing investments and offer full authentication management and reporting capability in a single solution.”