{"id":6028,"date":"2022-08-10T16:10:28","date_gmt":"2022-08-10T20:10:28","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=6028"},"modified":"2022-08-10T16:10:45","modified_gmt":"2022-08-10T20:10:45","slug":"improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/","title":{"rendered":"Improve the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol"},"content":{"rendered":"

\"Improve<\/a><\/p>\n

As part of Solutions Review’s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014K\u00e1roly Pet\u0151cz<\/span><\/span>, the Director of Sales for<\/span>\u00a0HID <\/a><\/span>Global’s<\/span><\/a> IAM Consumer Authentication<\/span><\/span> solution, explains how moving from 3DS to 3DS2 can help companies improve the customer authentication experience.<\/span><\/strong><\/em><\/p>\n

Not all multi-factor authentication (MFA) or Strong Customer Authentication (SCA) solutions are alike, especially regarding mobile security. Compromised user credentials are still the primary means used against mobile banking apps by attackers, who, in one widely publicized example, intercepted SMS one-time-passwords (OTPs) to drain millions of dollars in a few days. One way to defend against these threats is to move from the <\/span>3D Secure (3DS)<\/span><\/a> to the 3DS2 authentication protocol, which incorporates more powerful and flexible risk profiles while streamlining the consumer experience on mobile devices.<\/span>\u00a0<\/span><\/p>\n

What’s the Difference Between 3DS2 and 3DS?<\/span><\/b>\u00a0<\/span><\/h3>\n

The new 3DS protocol, called 3DS2, is designed to improve the old 3DS, which calls on three separate domains to authenticate consumers and sign digital transactions during card-not-present (CNP) payments. 3DS2 offers a powerful combination of security and usability and was even cited in the EU’s official guidance on compliance with the\u202f<\/span>Strong Customer Authentication (SCA) section<\/span><\/a> of the Revised Payments Services Directive (PSD2).<\/span>\u00a0<\/span><\/p>\n

The original 3DS protocol was the same for all transactions. It did not support biometric authentication and was incompatible with some devices and mobile browsers. Authorization page loading speeds caused frustration, while questions about the authenticity of the 3DS in-session verification window led some consumers to abandon their transactions. <\/span>By contrast, 3DS2 is expected to leave fewer shopping carts abandoned both because of its enhanced capability to maintain a consistent look and feel and because of its seamless fraud-prevention enablement aspect using risk-based authentication.<\/span>\u00a0<\/span><\/p>\n

With this next generation, 3DS2 allows organizations to adapt payment authorization methods and requirements for high-risk transactions<\/span>\u00a0rather than having a one-size fits all approach. The authentication risk level is based on a rich set of data collected about the cardholder and the transaction and then sent to the issuer. <\/span>\u00a0<\/span><\/p>\n

The card issuer is now empowered and more flexible to make better decisions thanks to data-sharing Application Programming Interfaces (API) connecting businesses and banks. These APIs can incorporate more than 150 potential data points representing the information they and card issuers know about their mutual customers. The data comprises the specific cardholder and device information that varies based on the regional or market law restrictions but commonly includes device ID, MAC address, geo-location, and previous transactions.<\/span>\u00a0<\/span><\/p>\n

These data points make it possible to assess the transaction risk level, and if a transaction is categorized as high risk, it can be challenged with a step-up authentication method. The next step can require additional authentication through verifying identity using biometrics, OTP, and MFA, to name a few. If the transaction is deemed low risk, the cardholder is not required to authenticate themselves further. Both high-risk and low-risk use cases can be seamless with the correct authentication journey.<\/span>\u00a0<\/span><\/p>\n

How Else Does 3DS2 Help Prevent Fraud?<\/span><\/b>\u00a0<\/span><\/h3>\n

Most 3DS authentication flows happen in the background\u2014the Software Development Kit (SDK) and servers exchange all necessary data, and the customer sees nothing. However, an OTP\u2014generated by the customer’s card\u2014is an integral part of the process because it enables customers to confirm their identities on a separate channel from the one they’re using to execute the transaction. <\/span>This transaction verification step introduces significant risks in solutions that rely on SMS to transmit the OTP. SMS authentication is cheap, convenient, ubiquitous, and more accessible than ever for hackers to exploit. Unfortunately, our research shows that it’s still the financial services industry’s <\/span>leading authentication method<\/span>.<\/span>\u00a0<\/span><\/p>\n

3DS2, with its support for biometric authentication<\/a><\/strong>, definitively closes this security loophole by enabling customers to authenticate via their fingerprint or face\u2014functionalities built into almost all modern smartphones. What’s more, the simplicity of this authentication flow\u202fincreases security without compromising usability, reducing drop-off rates\u202fand streamlining the customer journey. <\/span>In fact, <\/span>according to Visa<\/span><\/a>, 3DS2 implementation led to an <\/span>85 percent reduction in transaction time, resulting in\u202fa\u202f70 percent decrease in cart abandonment.<\/p>\n

Getting Started<\/span><\/b><\/h3>\n

As 3DS2 moves into the mainstream\u2014and Open Banking regulations mandate the use of SCA in many regions around the world\u2014the search is on for solutions that keep customers safe while maximizing the number of lawful transactions that go through.<\/span>\u00a0<\/span><\/p>\n

One key feature that offers one of the best user experiences for consumers is push notifications or push authentication as part of a risk-based authentication strategy. It enables the validation of transactions in seconds through a highly secure channel and all from the device that the customer is most accustomed to, the smartphone. Push notifications can take full advantage of native smartphone security and biometric capabilities, which are intuitive to the user. This approach allows banks to customize transaction signing flows while complying with 3DS2 protocols. It uses a channel, so service providers do not need to send sensitive information over an insecure network like SMS.<\/span>\u00a0<\/span><\/p>\n

With this push-based authentication solution, customers can securely and conveniently authenticate their access requests and sign transactions with their mobile device using an intuitive swipe motion. This is a much simpler user experience than SMS systems. When push notifications appear on users’ smartphones, they must validate the request by making a binary choice to “Approve” or “Decline” rather than referencing and retyping an OTP received via SMS.<\/span>\u00a0<\/span><\/p>\n

These end-to-end, push-based authentication applications can be fully integrated into the bank’s existing app with an SDK or deployed as a customizable off-the-shelf mobile application. Organizations can meet the most stringent security regulations while providing a seamless consumer experience that they can adapt as required. These applications are often fully customizable from a branding and security policies perspective to secure modern communications channels and prevent fraud. <\/span>\u00a0<\/span><\/p>\n

Moving from 3DS to 3DS2 authentication offers many benefits for banks focused on improving security, fraud prevention, and customer experience. This is especially true when 3DS2 is coupled with push-notification-based authentication using a secure channel. The result is an even more seamless and convenient mobile consumer authentication journey.<\/span><\/p>\n

\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

As part of Solutions Review’s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014K\u00e1roly Pet\u0151cz, the Director of Sales for\u00a0HID Global’s IAM Consumer Authentication solution, explains how moving from 3DS to 3DS2 can help companies improve the customer authentication experience. Not all multi-factor authentication (MFA) or Strong Customer Authentication […]<\/p>\n","protected":false},"author":246,"featured_media":6029,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[1946,1945,1091,1949,145,364,1824,1948,1947],"acf":[],"yoast_head":"\nImprove the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol<\/title>\n<meta name=\"description\" content=\"As part of Solutions Review's Premium Content Series, K\u00e1roly Pet\u0151cz of\u00a0HID Global explains the benefits of moving from 3DS to 3DS2.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"K\u00e1roly Pet\u0151cz\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/\",\"name\":\"Improve the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/08\/Improve-the-Customer-Authentication-Experience-by-Moving-From-the-3DS-to-3DS2-Protocol.jpg\",\"datePublished\":\"2022-08-10T20:10:28+00:00\",\"dateModified\":\"2022-08-10T20:10:45+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/8843559436c1e4ce178f139165ce0e0f\"},\"description\":\"As part of Solutions Review's Premium Content Series, K\u00e1roly Pet\u0151cz of\u00a0HID Global explains the benefits of moving from 3DS to 3DS2.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/08\/Improve-the-Customer-Authentication-Experience-by-Moving-From-the-3DS-to-3DS2-Protocol.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/08\/Improve-the-Customer-Authentication-Experience-by-Moving-From-the-3DS-to-3DS2-Protocol.jpg\",\"width\":800,\"height\":400,\"caption\":\"Improve the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Improve the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/8843559436c1e4ce178f139165ce0e0f\",\"name\":\"K\u00e1roly Pet\u0151cz\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/84d56710189a0547bf2b2152e6188973?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/84d56710189a0547bf2b2152e6188973?s=96&d=mm&r=g\",\"caption\":\"K\u00e1roly Pet\u0151cz\"},\"description\":\"K\u00e1roly Pet\u0151cz is the Director of Sales for the APAC, Middle East, and Africa Markets as part of the IAM Consumer Authentication business unit at HID Global. He has over twenty years of experience in the Financial Services and Insurance (BFSI) industry. In his current role, Karoly supports financial institutions in Emerging Markets with security improvements in their digital customer interactions. His expertise in the market enables him to provide them with advanced digital banking solutions that address their exact needs, bringing security to the entire ecosystem and customer journey.\",\"sameAs\":[\"https:\/\/www.hidglobal.com\/\"],\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/kpetocz\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Improve the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol","description":"As part of Solutions Review's Premium Content Series, K\u00e1roly Pet\u0151cz of\u00a0HID Global explains the benefits of moving from 3DS to 3DS2.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/","twitter_misc":{"Written by":"K\u00e1roly Pet\u0151cz","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/","url":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/","name":"Improve the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/08\/Improve-the-Customer-Authentication-Experience-by-Moving-From-the-3DS-to-3DS2-Protocol.jpg","datePublished":"2022-08-10T20:10:28+00:00","dateModified":"2022-08-10T20:10:45+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/8843559436c1e4ce178f139165ce0e0f"},"description":"As part of Solutions Review's Premium Content Series, K\u00e1roly Pet\u0151cz of\u00a0HID Global explains the benefits of moving from 3DS to 3DS2.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/08\/Improve-the-Customer-Authentication-Experience-by-Moving-From-the-3DS-to-3DS2-Protocol.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2022\/08\/Improve-the-Customer-Authentication-Experience-by-Moving-From-the-3DS-to-3DS2-Protocol.jpg","width":800,"height":400,"caption":"Improve the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/improve-the-customer-authentication-experience-by-moving-from-the-3ds-to-3ds2-protocol\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Improve the Customer Authentication Experience by Moving From the 3DS to 3DS2 Protocol"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/8843559436c1e4ce178f139165ce0e0f","name":"K\u00e1roly Pet\u0151cz","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/84d56710189a0547bf2b2152e6188973?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/84d56710189a0547bf2b2152e6188973?s=96&d=mm&r=g","caption":"K\u00e1roly Pet\u0151cz"},"description":"K\u00e1roly Pet\u0151cz is the Director of Sales for the APAC, Middle East, and Africa Markets as part of the IAM Consumer Authentication business unit at HID Global. He has over twenty years of experience in the Financial Services and Insurance (BFSI) industry. In his current role, Karoly supports financial institutions in Emerging Markets with security improvements in their digital customer interactions. His expertise in the market enables him to provide them with advanced digital banking solutions that address their exact needs, bringing security to the entire ecosystem and customer journey.","sameAs":["https:\/\/www.hidglobal.com\/"],"url":"https:\/\/solutionsreview.com\/identity-management\/author\/kpetocz\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/6028"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/246"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=6028"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/6028\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/6029"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=6028"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=6028"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=6028"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}