Secure Mobile Payment Solution: Difference between revisions

From SecuTech Wiki
Jump to navigationJump to search
Victor (talk | contribs)
Created page with "The mobile devices equipped with UniMate Flex/UniMate STD two-factor authentication tokens can protect sensitive data and programs from frau..."
 
Joseph (talk | contribs)
mNo edit summary
 
(6 intermediate revisions by 2 users not shown)
Line 1: Line 1:
The mobile devices equipped with [[UniMate Flex]]/[[UniMate STD]] [[Two-factor authentication|two-factor authentication]] tokens can protect sensitive data and programs from fraud attacks. User verification, cryptography, off-line authorization can be performed by UniMate technology and customers can buy anything at anytime and place.
[[category:UniMate]]
 
The mobile devices equipped with [[UniMate Flex]]/[[UniMate STD]] two-factor authentication tokens can protect sensitive data and programs from fraud attacks. User verification, cryptography, off-line authorization can be performed by UniMate technology and customers can buy anything at anytime and place.
 
All critical security parameters are stored in the [[UniMate Flex]]/[[UniMate STD]] mobile authentication tokens instead of storing in mobile terminals. When users start a transaction via mobile terminals, users must connect their own authentication devices to sign the transaction information and send to payment server via internet. Server verifies information and compares with the signature sent by users, if the result is equal, the server will approve the transaction, otherwise the transaction will be denied.
 
==Greater security with two-factor authentication technology==
 
To finish a transaction, users must input correct password and present the correct digital certificate to prove the log on users are the person who claim to be. This overcomes the vulnerable of one-factor authentication such like only password.
Store the digital certificate separately from mobile terminals can effectively reduce the potential risk from malware and man in the middle attack, as once the digital certificate imported into the token, there is no way to change it without administrator permission.
 
==Interactive authentication==
 
The LCD screen on the [[UniMate Flex]] is another security measure, as transaction details to be signed by users will display on the screen, users must check all details again before pressing the confirm button to sign transaction information which make sure users can sign what they see.
 
==Offline authorization==
 
The Apps or Mobile terminals can be bound to a [[UniMate Flex]]/[[UniMate STD]] device, therefore without proper UniMate devices, the apps cannot be initiated. Just like binding your mobile phone to one SIM card, if card changed, the phone will not work properly.

Latest revision as of 18:01, 28 August 2012


The mobile devices equipped with UniMate Flex/UniMate STD two-factor authentication tokens can protect sensitive data and programs from fraud attacks. User verification, cryptography, off-line authorization can be performed by UniMate technology and customers can buy anything at anytime and place.

All critical security parameters are stored in the UniMate Flex/UniMate STD mobile authentication tokens instead of storing in mobile terminals. When users start a transaction via mobile terminals, users must connect their own authentication devices to sign the transaction information and send to payment server via internet. Server verifies information and compares with the signature sent by users, if the result is equal, the server will approve the transaction, otherwise the transaction will be denied.

Greater security with two-factor authentication technology

To finish a transaction, users must input correct password and present the correct digital certificate to prove the log on users are the person who claim to be. This overcomes the vulnerable of one-factor authentication such like only password.

Store the digital certificate separately from mobile terminals can effectively reduce the potential risk from malware and man in the middle attack, as once the digital certificate imported into the token, there is no way to change it without administrator permission.

Interactive authentication

The LCD screen on the UniMate Flex is another security measure, as transaction details to be signed by users will display on the screen, users must check all details again before pressing the confirm button to sign transaction information which make sure users can sign what they see.

Offline authorization

The Apps or Mobile terminals can be bound to a UniMate Flex/UniMate STD device, therefore without proper UniMate devices, the apps cannot be initiated. Just like binding your mobile phone to one SIM card, if card changed, the phone will not work properly.