NFC Capabilities for Mobile Authentication
<Product feature in roadmap>
We are willing to provide cardholders with one more way to quickly and conveniently authenticate themselves for online payments and banking operations. Now they can simply tap a card to their smartphone.
This feature will be a part of WAY4 Mobile Authentication Application. Issuers use this solution to comply with 3DS requirements for strong customer authentication. In addition to fingerprint scanning, face and voice recognition, OTP and passcodes, this mobile application will support the NFC-based authentication method.
We suggest the two main use cases for NFC-based authentication:
Card-presence confirmation for e-commerce
Issuers may want to “double” security for certain e-commerce operations – e.g. very expensive purchases. NFC can serve as the second step in mobile authentication. The transaction stops being “card-not-present” and becomes even less risky.
During checkout the buyer receives a mobile push notification, opens WAY4 app and follows the instructions. Biometric recognition or OTP/ passcode entry go first. Tapping the card to the smartphone completes authentication. The user sees confirmation on the phone screen and on the checkout page.
Enrollment of cards in the app
To start using the mobile authentication app for online shopping, users should first enroll their card in their app. Issuers can now use an NFC tap and a special e-commerce PIN for Strong Customer Authentication.
The NFC tap is used to transfer card details to the app. Alternatively, users can fill in the details manually.
After that, users enter an e-commerce PIN to complete the enrollment process. An e-commerce PIN is a static security value which issuers can configure in a card's chip when it is issued on WAY4. Cardholders can receive this PIN from their issuer in the same secure way as a normal PIN.
The e-commerce PIN can also serve as a mobile authentication method, along with biometrics, OTP, passcodes and NFC.
Companies can use NFC to authenticate customers and enroll their cards in any mobile application (e.g. banking apps).