All eBusiness transactions handled over modern data networks (internet, UMTS) require the univocal identification (also called authentication) of the participating business partner. For the explicit confirmation of the business transaction a dedicated transaction release mechanism has often to be established. The quality of the identification depends not only on the chosen mechanism but also heavily on the quality of the underlying registration process.

NOVOSEC AG has analysed a variety of authentication methods (e.g. username/password, PIN/TAN, ID-Token, TAN-generator, electronic signatures with or without certificate, biometric mechanisms) for a diverse range of applications. Therewith we can guarantee that on the one hand your applications fulfil the security requirements, on the other hand a comfortable, cost-efficient and easy business processing is possible. We would like to support you to select and realise the solution which fits best your specific requirements.

PIN / TAN

The PIN/TAN (Personal Identification Number/TransAction Number) procedure is particularly common for banking applications in Germany. The administration of the TAN lists results in some disadvantages for both issuer and customer. The issuer has to administrate the TAN lists and has to assure their proper delivery; the customer must have the TAN list at hand during the transaction. Do you search a convenient and cost-efficient alternative to the TAN lists? Then read up on the Mobile TAN:

Mobile TAN

Alternatively to the TAN lists the customer can request a transaction dependent TAN that is sent to his mobile phone via SMS. This innovation from NOVOSEC AG simplifies your processes and enables your customer to perform transaction spontaneously and mobile. You don't need to issue any additional hard-or software. The range of applications is wider than the transaction release for banking or brokerage. For example, the Mobile TAN can be a cost-efficient and secure authentication method in order to get access to your data center or it can be used for Virtual Private Networks.

TAN-generator

In combination with an offline card reader an EMV Chip card is capable to generate TAN. A central server checks the correctness of the TAN provided by the customer and synchronises the TAN generator. Such synchronisation is necessary since the customer may have generated TAN that he didn't use for any transaction.

Certificates (software / signature cards)

Certificates are used in conjunction with generation and verification of electronic signatures and encrypted communication. For the life cycle management of the certificates special public key infrastructures (PKI) are necessary. Do you ask yourself whether software certificates or certificates on smart cards suit better for your purposes? Do you need help in respect of building up an own PKI or the selection of an eligible service provider? Then talk with us!