1. Securing Online Banking By Ben White CS 591

2. Who Federal Financial Institutions Examination Council What To authenticate the identity of retail and commercial customers accessing Internet-based financial services.

3. Why Single-factor authentication is insufficient (Password and Username) Multi-factor authentication technology Is better now and less expensive

4. How Types of factors: Something the user knows (e.g., password, PIN) Something the user has (e.g., ATM card, smart card, One time password tokens) Something the user is (e.g., biometric characteristic, such as a fingerprint, voice, facial recognition)

5. One time password tokens GELXQ V4M2C RHBJ7 1WD0Y T6SAN

6. Smart Cards Microprocessor embedded in card Reader on PC or contactless reader Public Key Infrastructure Certificates are stored on card Authenticate using SSL and stored certificates

7. When Implement by the end of 2006 For retail and commercial customers ? For personal users