Nowadays, the convenience of being able to shop online with a credit card, quickly and easily, is more important than ever. But how do we ensure online payments are protected from fraud? Various methods exist that can prove the identity of shoppers. However, most modern methods require a mobile device. For customers that do not have one or prefer to make payments via a laptop or computer, there are very few secure alternatives available.
Until now: In a joint project, PLUSCARD, a full-service processor for numerous card-issuing institutions across Germany, Netcetera, a market leader for digital payment solutions, and Entersekt, a specialist in strong customer authentication, launched the first FIDO-certified alternative to app-based authentication in Europe in June 2021. The solution enables secure online credit card payments without the use of a mobile device.
Every online payment must be authenticated. This means that each transaction requires a verification of whether the account or card data were entered by the legitimate cardholder. This authentication procedure has become more complex in the EU due to the introduction of PSD2 and strong customer authentication (SCA). Under the regulation, processing via mobile devices guarantees compliance with the stricter requirements, while offering a better payment experience for consumers at the same time.
FIDO is an international authentication standard that offers an alternative for secure, easy and SCA-compliant payments without the use of a mobile device. PLUSCARD, Netcetera and Entersekt have implemented the FIDO standard in their joint solution. Entersekt has integrated the FIDO server into the solution, which is certified by the FIDO Alliance. Authentication is handled via a physical token. Customers receive this token from the bank for use on their computer. They simply register the token via a registration page. The token is then linked to the credit card and customers can easily authenticate their online transactions.
"Customers without a mobile device now have the option to approve their online payments conveniently and securely with the FIDO token" says Thomas Niederauer, Product Manager at PLUSCARD. "Together with Netcetera and Entersekt, we have implemented a future-proof solution with the FIDO standard. So far, this is a unique alternative to app-based authentication in the German market."
Netcetera, an expert in digital payments, is a long-standing partner of PLUSCARD and has successfully implemented this secure and user-friendly authentication solution. Bernhard Binz, Project Manager at Netcetera comments, "A FIDO token is much more secure than a transaction number sent via SMS and therefore the better choice for end customers. This is the second successful solution we have developed for PLUSCARD. Together, we were the first in the payments industry to introduce app-based authentication 5 years ago and now we are again taking a leading role in the market with the first FIDO implementation."
"With the certification of our FIDO server, we have significantly expanded our portfolio of state-of-the-art authentication solutions. The implementation of a FIDO2 USB Security Key at PLUSCARD is an important first step. Further applications such as authentication with FIDO authenticators in the form of notebooks and smartphones will follow. We are proud to open this new chapter of payment authentication together with PLUSCARD and Netcetera", says Uwe Härtel, Country Manager Central Europe at Entersekt.
