Secure Mobile Payment Solution

From SecuTech Wiki
Revision as of 18:13, 13 April 2012 by Victor (talk | contribs)
Jump to navigationJump to search

The mobile devices equipped with UniMate Flex/UniMate STD two-factor authentication tokens can protect sensitive data and programs from fraud attacks. User verification, cryptography, off-line authorization can be performed by UniMate technology and customers can buy anything at anytime and place.

All critical security parameters are stored in the UniMate Flex/UniMate STD mobile authentication tokens instead of storing in mobile terminals. When users start a transaction via mobile terminals, users must connect their own authentication devices to sign the transaction information and send to payment server via internet. Server verifies information and compares with the signature sent by users, if the result is equal, the server will approve the transaction, otherwise the transaction will be denied.

More secure with Two-factor authentication technology

Tow finish a transaction, users must input correct password and present the correct digital certificate to prove the log on users are the person who claim to be. This overcomes the vulnerable of one-factor authentication such like only password.

Store the digital certificate separately from mobile terminals can effectively reduce the potential risk from malware and man in the middle attack, as once the digital certificate imported into the token, there is no way to change it without administrator permission.

Interactive Operation - Sign what you see

The LCD screen on the UniMate Flex is another security measure, as transaction details to be signed by users will display on the screen, users must check all details again before pressing the confirm button to sign transaction information which make sure users can sign what they see.

Off-line Authorization

The Apps or Mobile terminals can be bound to a UniMate Flex/UniMate STD device, therefore without proper UniMate devices, the apps cannot be initiated. Just like binding your mobile phone to one SIM card, if card changed, the phone will not work properly.