Quick Links
Advertise with Sarbanes Oxley Compliance Journal
News


< Back

Sarbanes Oxley : Technology : Credit Management

3-D Secure Authentication Technology




Roy Budjhawan
Fraud Risk Manager
ING Card

Arcot Systems recently announced that ING Card, a subsidiary of ING Bank, has implemented the company?s market-leading 3-D Secure consumer authentication solution for large-scale Internet card transactions. ING Card has engaged Arcot to provide the company with the installation and management of a 3-D Secure authentication hosted services platform, and with an outsourced cardholder enrollment system.

The implementation of Arcot?s TransFort (3-D Secure) solution will provide barriers to the unauthorized use of credit and debit cards for Internet transactions, providing over 1.3 million Dutch ING cardholders with improved protections against identity theft. Moreover, online retailers who participate in the 3-D Secure authentication protocol are now assured added protection against fraudulent chargebacks from ING Card-based transactions.

ING Card Finds Arcot to be the Clear Leader in 3-D Secure Roy Budjhawan, Fraud Risk Manager at ING Card commented on the efficacy of Arcot?s solution, ?When we started planning the implementation of 3-D Secure using the Verified by Visa and MasterCard SecureCode standards, we decided to go straight to Arcot. They participated in the development of the protocol from its inception, and are now the indisputable experts in this field.?

In addition, ?Arcot has been in the business of installing and supporting 3-D Secure for nearly seven years,? said Sanjay Vyas, Director of Payment Systems for Arcot. ?We know how to get the solution up and running quickly, and our robust system processes millions of consumer transactions each year.?

Commented Elis Nemes, President of Arcot International, ?We are proud that ING Card has chosen Arcot?s TransFort solution. There are several companies who claim 3-D Secure expertise, but only Arcot has the practical implementation experience, the industry knowledge, and the in-depth technical understanding of the protocol necessary to install and properly support the platform for maximum efficiency, scalability, and reliability.?

Three Deciding Factors in Choice of Arcot
1) Time and Resource Efficiency. Arcot?s significant experience in 3-D Secure enabled ING Card to avoid costly mistakes and implement the solution with minimal disruption to existing technology systems and business processes. Moreover, ?[Using Arcot] saved me a lot of time because they handle both Visa and MasterCard,? explained Budjhawan.

2) Security and Compliance Standards. 3-D Secure helps card issuers reduce the risk of online credit card fraud and shifts the costs of fraudulent chargebacks to the non-compliant party. However, it has to be implemented properly so that it doesn?t create new vulnerabilities of its own. ING Card looked for a provider whose own internal systems were compliant with a variety of external standards for privacy and security.

3) Customization and Localization Expertise. ING Card also wanted to work with a company that had done implementations in the Dutch language. Arcot had worked with Dutch translators on other projects and had extensive experience in localizing the solution. Arcot has customization expertise in multiple other languages including French, German, Polish, and Taiwanese.

Technical and Commercial Implementation
There are two elements to the implementation. The first is technical. This element was completed in two and a half months and involved setting up the links between the ING Card and Arcot systems. On the risk management side, Arcot provided ING bank with data and experience from previous installations which enable ING Card managers to make quick, informed decisions.

The second part is commercial. A customer pilot program was put into place prior to the full installation. This involved composing text screens, button text and other marketing-related content. Arcot hosts the system on an outsourced basis and is highly responsive to changes as requested by ING Card. ?They are very quick in reacting to what we want,? says Budjhawan.

Arcot completed the implementation rapidly, and in some cases, ahead of schedule. ?They are highly professional,? says Budjhawan.

Future Plans May Include Two-Factor Authentication
In order to launch the new authentication service as quickly as possible, ING Card chose a standard set of 3-D Secure options that would enable ING Card to be fully compliant with card scheme rules. However, in the future, the company plans to look at two-factor authentication and further customization of the solution to better suit ING?s particular needs. Both of these options are available through Arcot. Comments Budjhawan, ?it?s useful to know that there is an upgrade path, with a known and reliable vendor partner.?

There are currently over 11,000 issuing banks and 25,000 online merchants utilizing Arcot?s 3-D Secure solutions worldwide.

3-D Secure is a payment authentication standard developed by Visa and MasterCard. It is designed to reduce online fraud by adding an extra layer of authentication protection to Internet-based transactions. Arcot Systems co-developed the original specification for the protocol, and is listed on the 3-D Secure U.S. patent. The protocol is marketed to the public under the brand names of Verified by VisaTM, MasterCard SecureCodeTM, and J-SecureTM by JCB. These programs provide enrolled online merchants and Internet shoppers with the same legal and business protections in the online world as they currently receive in the physical world with in-store physical card transactions.

3-D secure involves two separate processes:
Initial User Registration and Verification. Typically, the card issuer sends the card holder a one-time password through postal mail. This allows the card holder to log-on to the system and select his or her own password.

Verification During Ecommerce. Participating merchants add an extra step to their normal Internet shopping checkout procedure which queries a directory server to see if the customer?s card is enrolled in the 3-D Secure program. If it is, the directory server sends the merchant a URL for the card issuer?s verification web site. The customer is re-directed to the issuer bank site in order to confirm his or her identity before returning to the merchant web site in order to complete the transaction.

The main benefits of the program are reduced rates of online fraud and identity theft. The card issuer cuts down on fraud and the administrative cost of dealing with it. The merchant also benefits because they shift all liability and risk for fraudulent transactions to the card company by signing up for the program. Arcot?s TransFort solution provides card issuers with two methods for implementing 3-D Secure: 1) they can run the necessary processes in-house on a software license, or 2) they can outsource the service to Arcot?s Hosted Solutions division.

Arcot is a leading provider of secure e-payment, strong authentication, credential management, and digital signature software solutions. The company?s cost-effective and highly scalable software-based authentication products limit online transaction fraud and enable advanced functionality such as the turn-key issuance of roaming credentials and secure electronic document exchange. Arcot?s products meet the need for strong, multi-layered transactional security while providing customers with a seamless, user-friendly experience.

The company?s offerings are compliant with U.S. and international technology and business process standards including 3-D Secure, IdenTrust, SAFE and FFIEC Internet Banking Authentication recommendations. Enterprises also work with Arcot to meet legislative requirements such as Sarbanes-Oxley and HIPAA. Over 11,000 card-issuing banks and 25,000 online merchants and other enterprises use Arcot to protect the identities of millions of consumers worldwide.






About Us Editorial

© 2019 Simplex Knowledge Company. All Rights Reserved.   |   TERMS OF USE  |   PRIVACY POLICY