Biometrics
Biometrics such as retina scanning could be used to authenticate payments

Banks weigh up biometrics

Extra authentication could be needed for high-value financial transactions

Written by Daniel Thomas and James Watson

Companies could soon have to use biometric technology to authorise major financial transactions, as part of banking industry measures to tackle internet fraud and money laundering.

Industry body the Association for Payment Clearing Services (Apacs) says corporate customers will be among the first to receive devices to physically confirm signatories as well as using passwords, so-called two-factor authentication (Computing, 14 April).

Advertisement

But banks dealing with high-value electronic transactions will require more advanced security, possibly via a third means of authentication such as fingerprint or retina scanning, says Tom Salmond, a consultant for Apacs' ecommerce group.

'If you have multiple signatories on an account it's quite difficult to authenticate all of them, outside of giving them all different passwords,' said Salmond.

'So instead there's something you have, such as a token device or chip. Then there's something you know, such as a password or PIN. Finally, there's something you are, such as a biometric. That kind of architecture would only be deployed for the really high-value payments.'

One insider at a UK high-street bank told Computing that his firm is set to launch an authentication system for major corporate customers next year, which is likely to include biometrics. He expects the rest of the industry to follow.

Salmond says that the industry plans to reach a decision next month on technical standards to authenticate users and check that they have permission to authorise large money transfers.

Banks are also planning to tackle internal fraud by creating an industry-wide database to share information on sacked employees, following attempts by organised-crime gangs to solicit confidential data from staff.

Together with the British Bankers' Association, fraud prevention service CIFAS and the City of London Police, Apacs has set up a working group to outline requirements.

'At the moment, staff dismissed for dishonesty can apply for another job in banking, so the problem continues,' said a City of London Police spokesman.

Tags:

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Podcast image

02 Oct 2008

14.35 MBComputing podcast - Next-generation broadband Britain; and we report from Gartner's IT security summit More...

Shaun Nichols and Iain Thomson

26 Sep 2008

3.43 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

ISSE 2008

Sharing information key to cracking e-crime

Reluctance to report breaches only adding to the problem   More...

AMD logo

AMD expected to split into two

Separate entities to focus on chip design and manufacturing   More...

CA logo

CA pushes into virtualisation management space

Data Center Automation Manager looks after virtual and physical resources   More...

Hacking

Europeans charged in US hack attacks

British man facing 15 years in prison   More...

Primary Navigation