Online banking and eCommerce are spreading rapidly. Banks therefore want to equip their customers with devices and appli­ca­tions that enable them to securely authen­ticate towards the background system. In particular, payment trans­ac­tions with smart­phones and tablets are driven by customer needs. Despite simple operation, security must not be neglected. Such devices and appli­ca­tions must meet the require­ments of the Regulatory Technical Standard (RTS) within the Payment Service Directive 2 (PSD2). In addition, devices that require approval from the German banking industry (Secoder) can also be used.

SRC’s security reports provide a quick insight into the security level to be achieved with a product; the reports can be designed in such a way that they satisfy the oblig­ation to provide evidence to super­visory author­ities (SecuRePay). Thanks to our extensive know-how in electronic payment trans­ac­tions, we also have extensive knowledge of security mecha­nisms used in online banking and e‑commerce.

SRC has already provided security-assess­ments for TAN-gener­ators, smart­phone-based authen­ti­cation solutions and Secoder implementations.

In addition, SRC is a partic­i­pating test laboratory in the VISA mPOS Technology programme for secure payment trans­ac­tions and is therefore allowed to submit security assess­ments of mobile VISA appli­ca­tions to VISA.