EBA (European Banking Authority) Mandates Strong Authentication 2015 from Anders Rundgren on 2014-12-24 (public-webpayments@w3.org from December 2014)

From: Anders Rundgren <anders.rundgren.net@gmail.com>
Date: Wed, 24 Dec 2014 06:47:20 +0100
To: Web Payments CG <public-webpayments@w3.org>
Message-ID: <549A5368.7040503@gmail.com>

https://www.eba.europa.eu/-/eba-issues-guidelines-to-strengthen-requirements-for-the-security-of-internet-payments-across-the-eu

  "Strong customer authentication is, for the purpose of these guidelines, a procedure
   based on the use of two or more of the following elements – categorised as knowledge,
   ownership and inherence: i) something only the user knows, e.g. static password, code,
   personal identification number; ii) something only the user possesses, e.g. token, smart
   card, mobile phone; iii) something the user is, e.g. biometric characteristic, such as a
   fingerprint"

Since they (the banks in the EU) haven't invested a centime on technology development
they won't get anything, particularly not for card payments; This remains entirely in the
hands of the client platform owners.

Anders

Received on Wednesday, 24 December 2014 05:48:00 UTC