| The CrontoSign solution is built upon the use of the visual channel for tranferring data from the bank to the user for transaction verification and signing. Cronto has designed a unique colour 2D barcode symbology – visual cryptogram – to meet the requirements of online banking security applications for data capacity, speed and realiability of decoding.
CrontoSign offers unrivalled user experience and allows online banking customers to verify transaction details in a fraction of a second, for secure access to banking services anyplace, anytime.
The security of the CrontoSign solution is achieved by providing the trusted display for transaction verification: the bank chooses what data (e.g. account number, payment amount, destination country) should be presented to the customer and the CrontoSign engine encodes all this information into the visual cryptogram, which is then displayed to the customer on bank's website.
The data in the visual cryptogram is fully encrypted ensuring that only a user with valid security credentials can decode it. Once decoded, the information is displayed on the screen of the client device (mobile phone or standalone hardware) for verification by the user. The transaction signature is also generated as a 6-digit code and displayed. If the transaction details displayed by the CrontoSign client are geniune — the customer authorises the payment by entering the code back into the banking website. Otherwise, a potential attack on the customer account could be in progress.
The Cronto solution offers the most optimal combination of the CrontoSign hardware device and CrontoSign mobile application, as the Cronto server technology works seamlessly with both client options, enabling the bank to choose which client option is best for their customers today and to have an option to adapt their deployment mix to the threats and business requirements tomorrow without an need of another back-end integration project.
|
