Skip to main content
Home
  • cs
  • en
  • Solutions
    • Workforce Identity
      Improve the security of your data and eliminate complex passwords in your organization with our PKI systems, smart cards, mobile authentication, qualified electronic signature or eSeal.
      Customer Identity
      Easy-to-use, highly secure solutions for strong customer authentication in your digital channels and applications.
      Citizen Identity
      Our PKI based solutions enable authenticated, secure handling of personal data and other applications of electronic identity in modern digital government.
      Retail Payments
      Sector-specific solutions for acquirers, service providers, payment facilitators, and payment providers.
      Mobility Payments
      EMV card acceptance in public transport and EV charging. Faster check-in, improved convenience and valuable data.
  • Technology
    • Smart Cards
      Chip card applets, proprietary middleware and applications for highly secure identification, authentication and payment processing solutions.
      Secure Mobile ID
      Mobile devices and a variety of connected hardware for strong authentication. Securing the distributed environment of digital banking, identification or logical access scenarios.
      EMV Payments
      Software and hardware solutions for EMV payment card acceptance covering the whole process from your EFT terminal to the processing centre.
      Federated Identity
      Centralized identity security in the distributed environment of various mobile, web or cloud-based business applications.
      PKI
      We apply proven PKI cryptography and symmetrical algorithms, certificate management infrastructure and design a strong security policy, balancing security and business needs of our customers.
      Perso Lab
      One-stop shop for software personalization systems development and complex card issuing services including secure software personalization, flexible physical (graphical) card personalization and logistics.
  • Case studies
  • Company
    • About Us
    • Our Story
    • Contacts
  • Career
  1. Home
  2. Case studies

New authentication method
for ČSOB Smart key

ČSOB
/ since 2015

MONET+ implemented a consolidated authentication solution for ČSOB based on the CASE authentication server and the CASE mobile authentication method (ČSOB Smart Key) for Android, iOS, and Windows platforms.

The client's requirements

While developing its online banking channels, the bank sought a new method to handle client security that would cover:

  • Secure and fast login to the electronic service

  • Transaction authorization and signatures, including a full visualization of the transaction based on the given means of authentication

The new authentication method was primarily intended to replace STS OTP codes and was targeted towards users of smartphones and tablets running all key operating systems: Apple’s iOS, Google’s Android, and Microsoft Windows.

The solution delivered

During 2014-2015, MONET+ implemented a consolidated authentication solution for ČSOB based on the CASE authentication server and the CASE mobile authentication method (ČSOB Smart Key) for Android, iOS, and Windows platforms. 

In order to support the lifecycle of the new authentication method, MONET+ provided tools for remote management of the mobile app’s dynamic content (graphics, help, etc.), a solution comprising of full transaction visualization dynamically adapted to the contents / channel / transaction (WYSIWYS), as well as a push server for pro-active communication with the mobile app.

The app is designed to be user-friendly, respecting the respective UX concepts and specifications of various mobile platforms.

Integral parts of the delivery were security components (a cryptographic SDK for the mobile platforms, a security gateway, and secure storage of sensitive information on the server).

Benefits of the delivered solution

A full authentication method for smartphone users compliant with PSD2 regulatory requirements (strong authentication as well as the readiness of the method to handle different channels, including those of third parties).

Given the large number of ČSOB’s digital channels, the new authentication method was designed to be channel-neutral. When utilized with a specific electronic channel or service, the mobile app visually adapts to the service that generates the demand for authentication or authorization (by way of a specific transaction visualization).

In complement to online authentication, again via a data network, the app can be run in offline mode to generate one-time passwords or signature codes, using a QR code for transmitting transaction data to the mobile app.

Implemented by MCA (Methods of Client Authentication)
development team
headed by Tomáš Popelka
Fancy joining the team? Let us know.

Similar case studies

Podobná řešení se připravují.
Close
  • Monet+
    • Management
    • Personal Data Processing Policy
    • Integrated Management System policy
  • Solutions
    • Workforce Identity
    • Customer Identity
    • Citizen Identity
    • Retail Payments
    • Mobility Payments
  • Technologies
    • Smart Cards
    • EMV
    • PKI
    • Secure Mobile ID
    • Federated identity
    • Perso Lab
  • Company
    • About Us
    • Our Story
    • Contacts
    • Career
Copyright © 2024 MONET+, a.s. All rights reserved