Strong Customer Authentication - Revision history

imported>Doug Williamson: Add link.

2023-03-11T17:22:32Z

Add link.

← Older revision		Revision as of 17:22, 11 March 2023
Line 28:		Line 28:
	* [[3D Secure]]		* [[3D Secure]]
	* [[Compromise]]		* [[Compromise]]
			* [[Customer]]
	* [[eIDAS]]		* [[eIDAS]]
	* [[PSD2]]		* [[PSD2]]

imported>Doug Williamson: Add link.

2022-11-17T19:15:31Z

Add link.

← Older revision		Revision as of 19:15, 17 November 2022
Line 27:		Line 27:
	== See also ==		== See also ==
	* [[3D Secure]]		* [[3D Secure]]
			* [[Compromise]]
	* [[eIDAS]]		* [[eIDAS]]
	* [[PSD2]]		* [[PSD2]]

imported>Doug Williamson: Add link.

2020-07-25T19:56:13Z

Add link.

← Older revision		Revision as of 19:56, 25 July 2020
Line 30:		Line 30:
	* [[PSD2]]		* [[PSD2]]
	* [[Regulatory Technical Standard]]		* [[Regulatory Technical Standard]]
			* [[Token]]
	* [[Transaction risk analysis]]		* [[Transaction risk analysis]]
	* [[Two-factor authentication]]		* [[Two-factor authentication]]

imported>Doug Williamson: Update. Source: The Treasurer, December 2019 https://www.treasurers.org/hub/treasurer-magazine/what-on-radar-treasury-2020?cmp=news-la-1912&_cldee=ZG91Z0Bkb3Vnd2lsbGlhbXNvbi5jb20%3d&recipientid=contact-61e01a18fd04e61180d1000d3ab15408-1a47beaf93064a619ebb

2019-12-22T22:20:02Z

Update. Source: The Treasurer, December 2019 https://www.treasurers.org/hub/treasurer-magazine/what-on-radar-treasury-2020?cmp=news-la-1912&_cldee=ZG91Z0Bkb3Vnd2lsbGlhbXNvbi5jb20%3d&recipientid=contact-61e01a18fd04e61180d1000d3ab15408-1a47beaf93064a619ebb

← Older revision		Revision as of 22:20, 22 December 2019
Line 18:		Line 18:
	The use of a single device for authentication and shopping is expressly permitted. This means, for example, that a smartphone may be used at the same time for transacting and for authenticating the cardholder. The risk connected to the use of multi-purpose devices (e.g. smartphones and tablets) must be mitigated through the use of separated secure execution environments.		The use of a single device for authentication and shopping is expressly permitted. This means, for example, that a smartphone may be used at the same time for transacting and for authenticating the cardholder. The risk connected to the use of multi-purpose devices (e.g. smartphones and tablets) must be mitigated through the use of separated secure execution environments.


	~~Banks are required to comply with the relevant technical standards for SCA by 14 September 2019 at the latest.~~

	A number of exemptions are available, including trusted beneficiaries and recurring payments, low-value transactions and Transaction risk analysis (TRA).		A number of exemptions are available, including trusted beneficiaries and recurring payments, low-value transactions and Transaction risk analysis (TRA).

imported>Doug Williamson: Add link.

2019-12-13T07:45:46Z

Add link.

← Older revision		Revision as of 07:45, 13 December 2019
Line 29:		Line 29:
	== See also ==		== See also ==
	* [[3D Secure]]		* [[3D Secure]]
			* [[eIDAS]]
	* [[PSD2]]		* [[PSD2]]
	* [[Regulatory Technical Standard]]		* [[Regulatory Technical Standard]]

imported>Doug Williamson: Expand definition. Source: EPSM webpage https://www.epsm.eu/wp-content/uploads/2019/07/2019-07-10-EPSM-%E2%80%93-Overview-on-SCA-for-Further-Discussion-v1.0-1.pdf?iframe=true and The Treasurer online, What is Secure Customer Authentication? June 2019.

2019-07-22T09:40:30Z

Expand definition. Source: EPSM webpage https://www.epsm.eu/wp-content/uploads/2019/07/2019-07-10-EPSM-%E2%80%93-Overview-on-SCA-for-Further-Discussion-v1.0-1.pdf?iframe=true and The Treasurer online, What is Secure Customer Authentication? June 2019.

← Older revision		Revision as of 09:40, 22 July 2019
Line 10:		Line 10:
	* Something only the user possesses (e.g., mobile phone or token);		* Something only the user possesses (e.g., mobile phone or token);

	* Something the user is (e.g., fingerprint, facial, iris or eye vein).		* Something the user is (e.g., fingerprint, facial, iris or eye vein), sometimes known as 'inherence'.


Line 22:		Line 22:

	A number of exemptions are available, including trusted beneficiaries and recurring payments, low-value transactions and Transaction risk analysis (TRA).		A number of exemptions are available, including trusted beneficiaries and recurring payments, low-value transactions and Transaction risk analysis (TRA).


			In addition, certain transaction types are outside the scope of the rules, for example mail order and telephone orders (MOTO).

imported>Doug Williamson: Add summary of exemptions. Source: The Treasurer, online, What is secure customer authentication? June 2019.

2019-07-22T09:20:19Z

Add summary of exemptions. Source: The Treasurer, online, What is secure customer authentication? June 2019.

← Older revision		Revision as of 09:20, 22 July 2019
Line 20:		Line 20:

	Banks are required to comply with the relevant technical standards for SCA by 14 September 2019 at the latest.		Banks are required to comply with the relevant technical standards for SCA by 14 September 2019 at the latest.

			A number of exemptions are available, including trusted beneficiaries and recurring payments, low-value transactions and Transaction risk analysis (TRA).


Line 26:		Line 28:
	* [[PSD2]]		* [[PSD2]]
	* [[Regulatory Technical Standard]]		* [[Regulatory Technical Standard]]
			* [[Transaction risk analysis]]
	* [[Two-factor authentication]]		* [[Two-factor authentication]]

imported>Doug Williamson: Link with 3D Secure page.

2019-07-22T08:37:21Z

Link with 3D Secure page.

← Older revision		Revision as of 08:37, 22 July 2019
Line 23:		Line 23:

	== See also ==		== See also ==
			* [[3D Secure]]
	* [[PSD2]]		* [[PSD2]]
	* [[Regulatory Technical Standard]]		* [[Regulatory Technical Standard]]

imported>Doug Williamson: Add deadline. Source: The Treasurer online June 2019.

2019-07-22T07:40:25Z

Add deadline. Source: The Treasurer online June 2019.

← Older revision		Revision as of 07:40, 22 July 2019
Line 17:		Line 17:

	The use of a single device for authentication and shopping is expressly permitted. This means, for example, that a smartphone may be used at the same time for transacting and for authenticating the cardholder. The risk connected to the use of multi-purpose devices (e.g. smartphones and tablets) must be mitigated through the use of separated secure execution environments.		The use of a single device for authentication and shopping is expressly permitted. This means, for example, that a smartphone may be used at the same time for transacting and for authenticating the cardholder. The risk connected to the use of multi-purpose devices (e.g. smartphones and tablets) must be mitigated through the use of separated secure execution environments.


			Banks are required to comply with the relevant technical standards for SCA by 14 September 2019 at the latest.

imported>Doug Williamson: Mend link.

2019-07-22T07:38:57Z

Mend link.

← Older revision		Revision as of 07:38, 22 July 2019
Line 21:		Line 21:
	== See also ==		== See also ==
	* [[PSD2]]		* [[PSD2]]
	* [[~~RTS~~]]		* [[Regulatory Technical Standard]]
	* [[Two-factor authentication]]		* [[Two-factor authentication]]