Biometric security, banking, and why the password is passé

Biometric security, banking, and why the password is passé

Andrius Sutas

CEO and co-founder at AimBrain

Views 795

Biometric security, banking, and why the password is passé

16.11.2018 10:00 am

For banks, technological innovation brings freedom, flexibility, and seemingly inevitable security problems. The rise of mobile brought with it easy segmentation, remote onboarding, and convenience for customers. However, a recent report found that mobile logins saw a 200 percent increase in attack rates in Q2 of this year, compared to the previous quarter.

Safeguarding customer data has never been more important, nor more difficult – particularly since password security remains a default option, even as it proves increasingly outmoded. Banks must find ways to comply with the law and protect their target audience’s most sensitive information. To do so, they must look beyond old methods and towards rigorous, robust, and layered biometric security. 

Stronger security 

Even the strongest password can be stolen or cracked. It doesn’t matter if it’s the name of a childhood pet, a first school, or a string of random characters: the fact that it can be compromised means that it will be – if not often, then often enough to cause a problem. 

This is, in all fairness, true of most individual layers of security. The key is to layer security on top of security. Here, biometric verification can be more useful: focusing on a user, rather than their device, can be a more reliable way to prevent data theft. 

However, biometrics alone won’t work; a voice passphrase, for example, could theoretically be mimicked by a stolen recording. Multiple checks are therefore necessary: biometrics, passive bot detection, and other detection tools working in tandem can effectively stop sensitive information from being compromised in most instances. 

Multiple biometric layers 

Fingerprints, face identification, voice recognition, and retinal scans alone may all be individually hackable to some extent – but attackers will have a more difficult time hacking all of them. Using a mix of physical and behavioural layers can form a unique security matrix for each user. 

AimBrain’s AimFace//LipSyncsolution is an example of this in practice, as it combines facial recognition with voice challenges and lip synchronisation analysis. Customers simply take a photo of themselves and read a randomised number, which then becomes the authentication protocol for their account. This prevents cyber criminals from accessing their information without compromising usability.

It’s a simple approach, but one that makes life much harder for those with malicious intent. 

Smart detection tools

Better yet, these biometric checks can be bolstered with smart detection tools – particularly the latest anti-spoofing and liveliness detection devices. These tools combine straightforward user challenges, time-sensitivity, and artificial intelligence to boost security. For example, they make it easy to complement facial recognition with audio prompts – making it simple for users to access their account (it’s easy to lose a password, but somewhat harder to lose a face) and making it tough for cyber criminals to break into an account. 

Here, biometric data is safe precisely because it’s in plain sight. 

Passive bot detection 

It’s preferable to prevent attacks rather than stop them. Here, passive bot detection can be highly useful: it uses institutional and industry-specific fraud data in tandem with a passive anomaly detection module which is designed to identify signs of suspicious activity at the earliest opportunity. This catches bots, but it can also identify unusual behaviour from human users at the onboarding stage. It’s another layer of protection – one that might not address security challenges on its own but serves as a vital piece of a larger mosaic. 

In 2018, this is how banks should approach security - password protection alone simply won’t cut it. Fraudsters are too intelligent, new technologies are too vulnerable, and sensitive information is too valuable. Banks must focus on a multi-level, multi-layered approach to security because it is a multi-level, multi-layered problem. The aim should be to create a model where authentication checks are, if not impossible to beat, at least close to impossible. Working with a biometrics partner to create a truly complex security system – instead of one that relies on outdated tools and tactics – will help institutions to protect customer data today and in the future. 

AimBrainis a BIDaaS (Biometric Identity as-a-Service) platform for global B2C and B2B2C organisations that need to be sure their users are who they say they are.

 

Latest blogs

Gemma Doswell Paybase

Retaining Buyers and Sellers Is Easy, Right?

So, you’ve launched your own online marketplace, gig economy or sharing economy platform. What’s next? You need to attract users and, more importantly, retain them. But it’s actually one of the biggest challenges for a platform business to overcome Read more »

Jorge Martínez Taboada buguroo

Three main types of fraud

With an 8 percent increase on the previous year, identity fraud is on the rise. More fraud means more victims, but the victims do not exist without perpetrators and it’s important to understand exactly who these perpetrators are. The fraudsters fall Read more »

Philippe Martineau OSPT Alliance

Open Standards – a Remedy to PTO and PTA Headaches

With the world’s smart transportation market predicted to reach USD 149.21 billion by 2023, it’s clear the industry is in a period of great change, with a bright future ahead. To date, however, the evolution of the market and innovation of services Read more »

Jorge Martínez buguroo

Review Of The Main Authentication Mechanisms Used

Technology is advancing at a rapid pace. This not only favors the development of new products that facilitate users’ lives, but also becomes a new attack vector for attackers, who see fresh opportunities to obtain economic gain. This is why Read more »

Andrew Stevens Quadient

Banks to Use Mobile Channels and Customer Data to Differentiate Themselves in 2020

Digitally native neo-banks will continue to differentiate themselves in the market in 2020 by the experience they offer to customers. As a result, these banks will begin to pick up the critical minimum number of customers to become profitable, Read more »

Magazine
ALL
Free Newsletter Sign-up
+44 (0) 208 819 32 53 +44 (0) 173 261 71 47
Download Our Mobile App
Financial It Youtube channel