A leading payments industry news source for more than 17 years. Glenbrook curates the news and keeps you abreast of the important daily headlines in payments.

Search Payments News

February 28, 2019

On the wires

February 26, 2019

On the wires

Nok Nok Labs Announces Successful Deployment of Biometric Authentication for Internet Banking Customers at MUFG Bank, Ltd with Hitachi Ltd:

Nok Nok Labs (Nok Nok), the trusted leader in next-generation authentication today announced that its partner Hitachi, Ltd., successfully deployed the Nok Nok™ S3 Authentication Suite (NNL S3 Suite) at MUFG Bank, Ltd. (MUFG Bank), Japan’s largest bank. MUFG Bank customers who are utilizing the internet banking service, now have a frictionless user experience that enables them to execute banking transactions faster and with strong security using global authentication-standards.”

February 25, 2019

On the web

FIDO2: Android Is Helping Kill Passwords on a Billion Devices

WIRED

“On Monday, Google and the FIDO Alliance announced that Android has added certified support for the FIDO2 standard, meaning that the vast majority of devices running Android 7 or later will now be able to handle password-less logins in mobile browsers like Chrome. Android already offered secure FIDO login options for mobile apps, where you authenticate using a phone’s fingerprint scanner or with a hardware dongle like a YubiKey. But FIDO2 support will make it possible to use these easy authentication steps for web services in a mobile browser instead of laboriously typing in your password every time you want to log in. Web developers can now design their sites to interact with Android’s FIDO2 management infrastructure.”

February 11, 2019

On the wires

Atlanta-based IDology to Be Acquired by GBG for $300m

“GBG, the UK-headquartered Identity Data Intelligence specialist, today announces that it has conditionally agreed to acquire the entire issued share capital of IDology, a US-based provider of identity verification and fraud prevention services, for $300m (£233m) in an all-cash transaction. IDology is a fast-growing provider of identity verification services that helps remove friction both in onboarding customers and in the detection of fraud. Its market-leading US identity verification and fraud prevention services, led by its ExpectID product range, are the perfect strategic complement to GBG’s identity verification solutions.”

Central 1 Launches Integration for Secure Digital Solution for Financial Institutions

Central 1, creating digital solutions that make everyday banking easier, today announces the launch of technology that allows financial institutions to offer SecureKey ConciergeTM, a single sign-on authentication service, to their members. The seamless integration of Central 1’s product means financial institution customers can access additional online services using their existing digital banking credentials, providing fewer complex logins to remember and simplifying login access for over 80 government websites. Vancity credit union and Conexus Credit Union are launching the integration of SecureKey Concierge into their systems, providing the convenient and secure service to their members. “

February 4, 2019

On the web

February 1, 2019

On the web

Temple University Switches on Support for iPhone Campus Cards

NFC World

“Students and staff at Temple University in the US can now use their iPhone or Apple Watch as their campus identification card. The programme, which was announced by Apple last year, allows holders of the University’s physical OWLcard to use their Apple device instead for a number of services around the campus. These include gaining entry to buildings, accessing facilities including computers and printers and to buy meals.”

December 19, 2018

On the web

Fintech companies seek access to Aadhaar

The Economic Times (India)

“Financial service providers are looking forward to regaining access to Aadhaar-based verification after the Union Cabinet said it would seek approval from Parliament to amend laws that will allow banks and telecom companies to verify user details stored within the country’s largest identification database.”

December 18, 2018

On the web

Aadhaar authentication through QR codes to resume soon

Entrackr

“This time it will be allowed in offline mode. The authentication process will stand scrutiny, according to UIDAI CEO Ajay Bhushan Pandey. All the regulators are on the same page in respect to this, he added. The process will require a change in existing infrastructure to accommodate with offline mode. However, the private firms would not have access to the Aadhaar database, said the ET report.”

On the wires

FIDO Alliance Specifications Now Adopted As ITU International Standards

“The FIDO Alliance, the industry consortium developing open, interoperable authentication standards, announced today that two of its specifications are now recognized as international standards by the International Telecommunication Union’s Telecommunication Standardization Sector (ITU-T). This milestone establishes FIDO UAF 1.11 and CTAP2 as official ITU standards (ITU-T Recommendations) for the global infrastructure of information and communication technologies (ICT).”

December 12, 2018

On the web

Is Facial-Recognition Technology Hurting Apple Pay?

Digital Transactions News

“Adoption and usage rates for the mobile wallets from Apple Inc., Alphabet Inc. (Google), and Samsung Electronics Co. Ltd. have been far from stellar, but now evidence is emerging that Apple’s decision a year ago to ditch fingerprint identification on its newest smart phones in favor of facial-recognition technology could be making it even harder for Apple Pay to win mass consumer acceptance. The problem appears to be most acute in physical-store settings, where critics say the process required on the new iPhones to get to the wallet and unlock payment is now more cumbersome with Face ID, Apple’s new authentication technology. Indeed, some say the technology falls short all too often.”

December 3, 2018

On the web

Here’s Why Account Authentication Shouldn’t Use SMS

Bank Info Security

“The database, which wasn’t protected by a password, contained 26 million text messages, some of which were two-step verification codes and password reset links, TechCrunch reports. When it was found, the database was still recording texts in near real-time, offering a huge resource for potential attackers. The database ran on Amazon’s Elasticsearch and used Kibana, a visualization and querying tool that made it possible to search through the mass of data for text strings and phone numbers, TechCrunch reports.”

November 5, 2018

On the web

Why Passwords Might (Finally) Go Away

PC Magazine

“Widespread replacement of password-only authentication needs more than regulations. Without a set of standard protocols, organisations and companies will struggle to find an authentication technology that keeps them in line with security regulations while making their applications available to their users.”

October 9, 2018

On the web

Pointing the Finger at Biometric Card Misconceptions

Mastercard blog

“Now biometric cards are being added to the payment mix. With these cards, you can use your thumbprint as an alternative to a PIN or signature at the same in-store chip or contactless terminals you use every day. Mastercard developed the biometric card, combining chip technology with fingerprints to conveniently and safely verify cardholder identity for in-store purchases. Introduced in 2017, the Mastercard biometric card has been piloted in Africa, Europe and the Middle East with additional countries being added this year.”

October 4, 2018

On the web

The Devil Is in The Details Of Project Verify’s Goal To Eliminate Passwords

Electronic Frontier Foundation

“A coalition of the four largest U.S. wireless providers calling itself the Mobile Authentication Taskforce recently announced an initiative named Project Verify. This project would let users log in to apps and websites with their phone instead of a password, or serve as an alternative to multi-factor authentication methods such as SMS or hardware tokens. Any work to find a more secure and user-friendly solution than passwords is worthwhile. However, the devil is always in the details—and this project is the work of many devils we already know well.”

October 2, 2018

On the web

UIDAI asks telecom firms to submit plan to discontinue Aadhaar-based e-KYC

Live Mint

“The Unique Identification Authority of India (UIDAI) has asked telecom companies to submit a detailed plan within the next 15 days on discontinuation of Aadhaar-based authentication service used by them to verify their customer. A circular to this effect has already been issued to the telecom service providers (TSPs) including Bharti Airtel Ltd, Reliance Jio Infocomm Ltd and Vodafone Idea Ltd.”

September 28, 2018

On the web

In Boarding New Accounts And Reducing Abandonment, Biometrics May Be Nearing the Mainstream

Digital Transactions News

“On biometric authentication, “The biggest comment we learned from payments customers is it has helped with abandonment,” says Daon’s Bourke. Prospects for the increased use of biometric authentication are positive. Over the next five years, Juniper Research predicts the estimated number of users of the technology will increase from 429 million today to more than 1.5 billion.”

September 26, 2018

On the wires

Tech Industry Leaders Ship FIDO2 Certified Solutions to Reduce Password Use on the Web

“FIDO2 browser support and first certified products are now available to reduce password use on the web, the FIDO Alliance announced today. Now, any website can leverage FIDO2 strong authentication protocols from the W3C and FIDO Alliance to replace passwords with cryptographically secure logins using convenient alternatives like on-device biometrics and FIDO Security Keys. Google ChromeMicrosoft Edge and Mozilla Firefox browsers now support FIDO2, a big advancement since the standards were introduced last April. Between this support and newly certified products supporting a wide variety of use cases, service providers have all of the tools needed to roll out FIDO Authentication for their websites and applications. FIDO Authentication has been proven to protect against the phishing and security risks associated with passwords, provide better user experiences over remembering and typing passwords, and lower authentication support costs.”

September 24, 2018

On the web

September 20, 2018

On the web

Finnish firm trials face payments

Planet Biometrics

“The users participating in the pilot can currently use facial recognition when paying for lunch. “The initial feedback has been very encouraging. The employees have been surprised how convenient the method is and how smoothly the new checkout works. Unlike with, say, mobile payments, customers don’t have to get their wallet or smartphone out to complete the transaction. Through the pilot, we can assess when the technology could be ready for rollout to the general public”, says Nummela. “

September 11, 2018

On the web

UIDAI’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm

Huffington Post India

“The authenticity of the data stored in India’s controversial Aadhaaridentity database, which contains the biometrics and personal information of over 1 billion Indians, has been compromised by a software patch that disables critical security features of the software used to enrol new Aadhaar users, a three month-long investigation by HuffPost India reveals.”

September 6, 2018

On the web

Passwords Are Dying Faster at Home Than at Work: Study

Mobile ID World

“The survey found a significant difference in authentication preferences between workplace and personal settings: At work, 56 percent of respondents expressed a preference for password-based authentication, whereas that number dropped to 45 percent in personal settings. Biometric authentication, meanwhile, was preferred by 30 percent of respondents when it comes to access online accounts or making digital purchases, whereas only 15 percent preferred biometric authentication at work.”

On the wires

FIDO Alliance Launches Biometrics Certification Program

“Biometric user verification has become a popular way to replace passwords and PINs, but the lack of an industry-defined program to validate performance claims has led to concerns over variances in the accuracy and reliability of these solutions. To fill this gap, the FIDO Alliance today announced its Biometric Component Certification Program – the first such program for the industry at large. The program utilizes accredited independent labs to certify that biometric subcomponents meet globally recognized performance standards for biometric recognition performance and Presentation Attack Detection (PAD) and are fit for commercial use. “

September 5, 2018

On the web

August 30, 2018

On the web

Getting Started With Safaricom’s Voice Biometrics System, Jitambulishe

Android Kenya

Since the start of the year, Safaricom has implemented the use of biometrics to add an extra layer of protection as well as streamline the process of providing services to customers. By use of voice biometrics (the same technology that is relied on by the likes of Apple and Google to know it’s really you who is talking to Siri or Google Assistant and respond accordingly), customers enroll their voices just once and only have to repeat a single pass phrase (at Safaricom, my voice is my password) when requesting for support or assistance from the customer care team in order to be served.”

August 29, 2018

On the wires

August 28, 2018

On the wires

Thinfilm and Clause Collaborate to Deliver NFC Technology to Blockchain Smart Legal Contracts

“Through the collaboration, Clause and Thinfilm will use NFC to facilitate the pairing of physical goods to digital contracts through the tap of a smartphone. The resulting connection will deliver key functional and efficiency improvements for customers across the Clause “connected contracting” platform, including contract creation and management, supply chain administration, and invoice/payment automation.”

August 27, 2018

On the web

Entersekt Signs on to Mobile Connect

Payments Afrika

“Entersekt, an innovator in mobile-first fintech solutions, announced it has signed an agreement with the GSMA to offer Mobile Connect to its institutional customers. Developed by the mobile industry as a universal mobile-device–based authentication service, Mobile Connect allows consumers across the globe to access their digital accounts via a single login.”

August 22, 2018

On the web

Before You Turn On Two-Factor Authentication…

Medium

“However, in trying to persuade users to adopt second factors, advocates sometimes forget to disclose that all security measures have trade-offs . As second factors reduce the risk of some attacks, they also introduce new risks. One risk is that you could be locked out of your account when you lose your second factor, which may be when you need it the most.”

Payments News

Give us your email address or link to our RSS feed and we’ll push the daily Payments News headlines to you.

Glenbrook Payments Boot camp®

Register for the next Glenbrook Payments Boot Camp®

An intensive and comprehensive overview of the payments industry.

Train your Team

Customized, private Payments Boot Camps tailored to meet your team’s unique needs.

OnDemand Modules

Recorded, one-hour videos covering a broad array of payments concepts.

Glenbrook Press

Comprehensive books that detail the systems and innovations shaping the payments industry.