Online banking and e-commerce are becoming increasingly widespread. That’s why credit institutions want to equip their customers with devices and applications that allow them to authenticate securely against the background system. Smartphone and tablet payments in particular are driven by customer needs. Despite simple operation, safety must not be neglected. In doing so, such devices and applications must meet the requirements of the Regulatory Technical Standard (RTS) within the Payment Service Directive 2 (PSD2). In addition, devices that require approval from the German banking industry (encoders) can be used, for example.
SRC’s security assessments provide quick insight into the level of security to be achieved with a product; the assessments can be designed to satisfy the obligation to provide evidence to supervisory authorities (SecuRePay). Thanks to our extensive expertise in electronic payments, we also have extensive knowledge of security mechanisms used in online banking and eCommerce.
SRC has already provided security assessments for TAN generators, smartphone-based authentication solutions and secoder implementations.
In addition, SRC is a participating testing laboratory in the VISA mPOS Technology program for secure payment transactions, and is thus allowed to submit security tests of mobile VISA applications to VISA.