Cryptomathic Authenticator
Overview
Banks and payment providers have to meet Strong Customer Authentication (SCA) requirements without putting customers off. Cryptomathic Authenticator is a server-based platform that combines two-factor authentication with transaction signing to do exactly that. Unsung, a Cryptomathic Bronze Partner, supplies and implements Authenticator for UK financial services organisations.
Buying Cryptomathic Authenticator through Unsung
- Specialist support. Authentication problems affect customers immediately. Unsung PKI specialists provide first-line triage and escalate to Cryptomathic when needed.
- Independent licensing advice. We help you select the licensing model and product mix that represent value for money from Cryptomathic.
- Fits your estate. We integrate Authenticator with your online and mobile banking platforms, payment systems and HSMs, and with Cryptomathic Signer or MASC where you use them.
- Partner pricing through our Cryptomathic partnership.
The Challenge
SCA rules require multi-factor authentication for customer access and transaction authorisation across online banking, mobile banking and payment channels. That calls for authentication infrastructure that behaves consistently at every customer touchpoint. Getting the balance right is difficult. Authentication must be strong enough to stand up to regulatory scrutiny and flexible enough to support different channels and devices, yet simple enough that customers do not abandon transactions because of friction. Many institutions also find that authentication has grown channel by channel, leaving separate systems that are harder to manage and audit.
What It Does
Authenticator provides centralised, server-based authentication across multiple factors and channels from one platform. It combines possession, knowledge and biometric factors with transaction signing, so organisations can match authentication strength to the level of risk. Transaction signing cryptographically links the customer's authentication to the specific transaction details, providing non-repudiation and protection against man-in-the-middle attacks. Authenticator supports SCA under PSD2 and other regulatory frameworks. It can be deployed alongside Cryptomathic Signer where qualified electronic signatures are also needed, and integrates with Cryptomathic MASC to secure the mobile channel.
How Unsung Helps
We work with financial services teams to understand their SCA obligations, design an authentication architecture that satisfies them, and implement Authenticator alongside existing banking and payment systems. That includes the PKI and HSM infrastructure that underpins strong authentication, along with testing and handover to operations.
For protecting the mobile app itself, Mobile Application Security Core (MASC) complements Authenticator. Where the need is workforce rather than customer authentication, the MyID Enterprise range may be more appropriate. Because we supply both, we recommend what fits.
Related Unsung Services
- PKI Consultancy: Advice on authentication architecture, SCA compliance and supporting PKI.
- PKI Design & Build: Design and implementation of authentication and identity infrastructure.
- Hardware Security Modules: HSM deployment for authentication key protection.
