Entersekt Awarded New Patent for Frictionless Multi-Factor Authentication (MFA)
ATLANTA, GA/Cape Town, South Africa: Entersekt, The Financial Authentication Company, continues its trailblazing innovation in the fight against financial fraud with its 99th software technology patent application being granted by the US Patent office. Entersekt was recently awarded a new patent for its approach in enabling frictionless, multi-factor authentication (US granted patent “Frictionless SCA”). This now enables Entersekt to provide a multi-factor authentication solution without any explicit user interaction required.
By combining possession and inherence factors, Entersekt’s Browser ID or Mobile App ID technology, combined with behavioral biometrics identifies “trusted interactions” and makes frictionless, Context Aware™ Authentication for digital banking and payment fraud prevention possible. Entersekt now is the patent holder for multi-factor authentication via the integrated combination of possession (cryptographically signed Browser ID/App ID) and inherence (behavioral biometrics during user action) factors, which enables authentication without requiring an active authenticator, such as a one-time passcode or a biometric FIDO authentication. This means consumers can interact with their digital banking platform and shop online as they always do, and through their existing actions provide authentication for digital transactions, for example e-commerce via 3-D Secure. The patent also includes a mechanism to digitally sign the transaction on the customer device, enabling dynamic linking, a requirement in European PSD2 regulations, to happen at the same time.
Browser technology providers including Apple, Google, Mozilla and Microsoft are actively restricting the use of third-party browser cookies to track users in response to privacy regulations like the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Simultaneously, industry bodies like the W3C and EMVCo are working to recommend alternatives, even though many financial institutions use and depend on browser cookies for security, fraud prevention and personalization. New, complex fraud schemes use phishing attacks and session cookies to capture login credentials and access accounts. Entersekt embraces this privacy friendly and tracking-free future with several innovations to preserve strong customer authentication while still allowing a frictionless user experience for customers that want it. The latest patent confirms that Entersekt's technologies can qualify as possession and inherence factors, thereby achieving strong multi-factor authentication without subjecting the user to active challenges such as the ones used by current multi-factor authentication solutions.
“The value of our unique Browser ID/App ID is a key differentiator. Where most vendors still focus on fingerprinting to identify devices, we’re going further to provide a privacy friendly signal, that provides cryptographic proof of possession, thereby giving banks comfort that the client is using a known and trusted device. This patent (filed in 2021, adding the inherence factor for an integrated frictionless, multi-factor experience) is game-changing in our mission to improve transaction approval rates, while maintaining security, and an emphasis on frictionless authentication,” Gerhard Oosthuizen, Chief Technology Officer at Entersekt.
A Liminal Research Report from January 2024, Customer Authentication Market and Buyer’s Guide states, “Of the 87% of organizations that have not fully transitioned to passwordless authentication, 97% indicate a readiness to do so.”
Financial institutions mostly depend on one-time passcodes (OTP) combined with username and password or mobile phone biometrics for digital banking logins, password resets, push payments/money movement or customer service authentication, while merchants leveraging 3-D Secure depend on an issuer for cardholder authentication. While fraudsters may use a SIM-swap, social engineering, or other techniques to access an account from an unknown device, silent attestation of a trusted device and a trusted user protects against these attacks and enables frictionless authentication for both login and payments, while achieving regulatory compliance with much less friction and a better customer experience. This new patent underscores Entersekt’s pioneering role in shaping the financial authentication market and a commitment to continued innovation.
About Entersekt
Entersekt, The Financial Authentication Company, provides financial institutions with digital banking fraud prevention and payment security solutions through its cross-channel, Context Aware™ Authentication platform that secures digital transactions and optimizes user experiences. Founded in 2010, Entersekt serves financial institutions around the world, and holds 120+ patents for its security innovations. In 2023, Entersekt acquired Modirum, a 3-D Secure solutions provider, positioning Entersekt as a global industry leader in authentication solutions for financial services. Entersekt processes 2.5bn+ transactions for 250m+ cardholders and 450,000+ merchants from 850 banks+ in nearly 70 countries. Backed by companies like Silicon Valley-based Accel-KKR, one of the world’s top private equity firms, Entersekt continues to expand its footprint across key regions. For more information, visit entersekt.com.