Innovation is Our Passion Online Banking Past, Present and Future

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 2 Banks with no Online Banking facility Online Banking with username & static password for authentica- tion Banks issue certificates to the user which will be stored on the PC OR Banks issue an OTP token to Generate Dynamic password OR Banks issues a certificate stored inside Smart card or USB Token to every user Banks generate Dynamic password on every user’s Mobile Olden days10years ago5years agoNow and Future The Evolution

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 3 USER SSL guarantees the Online Banking accessed by users is real, not phishing Users can access the Online Banking service only with the username and password that a particular user know. The communication from IE browser or others to Online Banking server has been protected by SSL technology.  Internet Online Banking Router SSL Certificate  SSL service  Username,  Password,  Virtual Keyboard Online Banking now in India

Innovation is Our Passion  Username,  Password,  Virtual Keyboard  Internet Online Banking USER Router SSL Certificate  SSL service Drawbacks The existing SSL in Online Banking is a unidirectional SSL. Users can authenticate the server; on the contrary it can not. The username and password can be hacked easily. The high-risk activity such as fund transfer doesn’t have the user’s e-signature.

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 5  Use of Digital Certificates  For Normal users / Corporate Users, etc. This enabled the online user to use their digital certificates stored on their PC while making Transactions To mitigate the Drawback…

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 6  Weak Storage  The digital certificate, private key and public key are stored in the IE Browser or other browser of the PC.  All of these are easy to be exported to other workstation, including the private key.  The private key may be illegally hacked and used by method of exhaustion, no maximum number of password attempts. The System would not be 100% secure

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 7  Every user has a digital certificate as his/her ID card in the online banking system.  The digital certificate is stored inside a Smart Card or a PKI enabled USB Token.  The RSA key pair is generated inside the USB token, the private key is never exported.  The private key can be used only when the user knows the PIN of USB token.  Banks can set the maximum number of PIN attempts, for example 3 to 5 times.  The USB token gets automatically disabled when the user exceeds the maximum number of wrong PIN attempts. Finally an Ideal Solution – 100% Secure

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 8 Users have the bidirectional SSL authentication. It’s more secure. When doing login and transaction, users can make e-signature for the activities. Users don’t worry about the fraudulence of the password. The fraud can not do anything without the USB token. Up to now, users have two factors authentication.  I know who are you.  I know who are you too.  Yes, this is my signature.  I have the USBKey;  I know the PIN  PIN:******  I don’t have the USBKey. Can’t login. This solution satisfies…

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 9 What we provide? Our USB Key Product Suite

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 10 Specification Physical Characteristics 8-bit/32-bit processor, 32K/64K Byte EEPROM Cryptographic Standards PKCS#11 v 2.11, Microsoft CryptoAPI(CAPI)2.0, X.509 Cryptographic Functions Asymmetric key pair generation (RSA 1024/2048- bit),Symmetric key generation (DES, 3DES, AES), Onboard Random Number Generator, Onboard key generation, digital signing and encryption/decryption Cryptographic Algorithms Asymmetric Key Algorithms, RSA1024-bit, RSA bit; Symmetric Key Algorithms, AES, DES, 3DES Digital SigningRSA 1024-bit, RSA 2048-bit Hash AlgorithmsSHA-1, SHA-256, MD5 Operating system, Browser and Mail Windows 2000/XP/2003/Vista and 7 IE, Mozilla Firefox, Outlook, Thunderbird CommunicationPC/SC protocol; Mass Storage protocol; ConnectivityUSB 1.1/2.0 compliant, USB power Weight and SizeApprox. 8g, 78mm x 23mm x 9mm WatchKEY

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 11 Specification Physical Characteristics 32-bit processor, 32K Byte EEPROM, With Fingerprint sensor, Cryptographic Standards PKCS#11 v 2.11, Microsoft CryptoAPI(CAPI)2.0, X.509 Cryptographic Functions Asymmetric key pair generation (RSA 1024/2048- bit),Symmetric key generation (DES, 3DES, AES), Onboard Random Number Generator, Onboard key generation, digital signing and encryption/decryption Cryptographic Algorithms Asymmetric Key Algorithms, RSA1024-bit, RSA bit; Symmetric Key Algorithms, AES, DES, 3DES Digital SigningRSA 1024-bit, RSA 2048-bit Hash AlgorithmsSHA-1, SHA-256, MD5 Operating system, Browser and Mail Windows 2000/XP/2003/Vista and 7 IE, Mozilla Firefox, Outlook CommunicationMass Storage protocol; ConnectivityUSB 1.1/2.0 compliant, USB power Weight and SizeApprox. 8g, 78mm x 23mm x 9mm BioKEY

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 12 Specification Physical Characteristics 32-bit processor, 32K Byte EEPROM, With screen display and button press operations, Cryptographic Standards PKCS#11 v 2.11, Microsoft CryptoAPI(CAPI)2.0, X.509 Cryptographic Functions Asymmetric key pair generation (RSA 1024/2048- bit),Symmetric key generation (DES, 3DES, AES), Onboard Random Number Generator, Onboard key generation, digital signing and encryption/decryption Cryptographic Algorithms Asymmetric Key Algorithms, RSA1024-bit, RSA bit; Symmetric Key Algorithms, AES, DES, 3DES Digital SigningRSA 1024-bit, RSA 2048-bit Hash AlgorithmsSHA-1, SHA-256, MD5 Operating system, Browser and Mail Windows 2000/XP/2003/Vista and 7 IE, Mozilla Firefox, Outlook CommunicationMass Storage protocol; ConnectivityUSB 1.1/2.0 compliant, USB power Weight and SizeApprox. 20g-50g, 80mm x (25-43)mm x 10mm WatchKEY OCL

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 13 URpass  URpass™ is an innovative product combining secure online payment (& top-up) and contactless micropayment in a single device ++ Form factor:

Innovation is Our Passion © 2010 WATCHDATA TECHNOLOGIES PTE LTD 14 Thank You R. Srinivasan - Sales Director Watchdata Technologies (India) Pvt. Ltd #681, 6 th ‘C’ Main, 14 th Cross, J.P Nagar 3 rd Phase, Bangalore – For Further Details Please Contact K. Srinivasan - Technical Manager