Independent Banker - June 2019 - 26

PORTFOLIO
good, " he says. " Moreover, passwords
weren't invented to be used on thousands,
if not millions of platforms.
They don't scale. "
Knowledge-based authentication,
such as asking customers personal
questions, has also proved to be fairly
insecure, White says. Fraudsters can
learn a lot about a customer by accessing
their LinkedIn profile and reading
their Facebook, Twitter and Instagram
" This three-factor
authentication
method-user
ID, account or
identity; plus
phone; plus
biometric-is one
of the strongest
authentication
methods that can
be used today
across a large
population. "
-Avivah Litan,
Gartner Research
messages. They can also use social
engineering-or tricking someone to
give up their personal information-to
successfully masquerade as that customer
when interacting with a bank.
" It's particularly successful if a
fraudster calls pretending to be
someone very important and acts
irritable, " White says. " The call center
representative who gets graded based
on metrics around performance
will let them though. It's a human
nature thing. "
White says Daon's IdentityX platform
activates facial, voice and
fingerprint biometric sensors embedded
in mobile devices. These sensors
can be combined in various ways to
create a multi-factor authentication
system for better security.
A number of community banks
now use Daon's platform directly and
through third parties, such as banking
platform providers and system
integrators that provide call center
services for banks on an outsourcing
basis, White says. However, Daon's
IdentityX platform prompts a customer
to use the biometric sensors
on their smartphone to authenticate
themselves and alleviate the risk of
contact center representatives being
duped through social engineering.
While there's " no such thing " as 100
percent security in any authentication
measure, biometrics is best, according
to White.
" If a fraudster records someone's
voice and tries to use that to get past
biometric authentication, we have
technology that detects when a record26
Q ICBA Independent Banker Q June 2019
ing is being replayed, " he says. " We
have an automatic challenge in the
biometric voice protocol, and any prerecorded
response won't work. "
IdentityX also includes face " liveness
detection " measures to spot
fraudsters who download photos from
a customer's LinkedIn profile and then
try to use that to authenticate via the
facial recognition modality, White
says. The person would be prompted
to nod or shake their head, smile or
blink, and a fraudster using a downloaded
photo would fail such tests.
Balancing convenience
and security
Another biometric authentication
solution for bank contact centers is
offered by CallVU in Tel Aviv, Israel.
CallVU incorporates fingerprint and
facial recognition sensors within
smartphones to identify callers. Banks
can choose to integrate either or both
types of authentication to maximize
customer security or ease of use.
For banks, CallVU provides solutions
directly or works with integrator
companies that provide outsourced
contact center services to such institutions,
says Ori Faran, the company's
CEO and founder.
Everyone who's ever created an
online login knows how frustrating
Independent Banker - June 2019

Table of Contents for the Digital Edition of Independent Banker - June 2019
