Main Button Company Button Services Button Partners Button Events Button Contact Button

Two-Factor Authentication

The additional factor of security in "Two-Factor Authentication" is based on either something the user knows or something the user physically has, while the basic Access ID/Password login is just based on who the user is.

While the basic Access ID/Password login allows anybody who has the correct login information (i.e. anybody claiming to be the account holder) to access their personal and confidential account information, TFA verifies that the user actually is the account holder by requiring answers to questions only the user would know or a physical possession only the account holder would have.

YourCSR.com offers two different types of Two-Factor Authentication: Software-Based and Token-Based:

Software-Based Authentication:

  • Adequate for the vast majority of our clients.
  • Based on something the account holder knows (personal questions) or something they have (an authenticated computer).
  • When account holders first use the system they will be asked 20 simple personal questions and they will answer any 10 of their choice. These questions are designed to be easy for the account holder to remember yet personal enough that other would not know the answers.
  • They will then have the option of authenticating the computer they are using-- we advise to only authenticate a home computer or a computer to which only the account holder has access.
  • The next time the account holder logs in to an authenticated computer, our TFA system will see that computer has been authenticated and the account holder will be able to access their account with only their Access ID and Password .
  • If the account holder logs in from an unauthenticated computer, such as a new home computer or public PC, they will answer 3 of their 10 questions to confirm their identity. If the answers match the answers initially setup, the account holder will have the option to authenticate that computer.
  • If TFA is activated for Internet Banking, it will automatically extend to Mobile Banking using the same 10 security answers.
  • A simillar TFA product is also available seperately for Telephone Banking.

Token-Based Authentication:

  • Provides the highest level of security for business or high-end account holders.
  • YourCSR.com provides each account holder a small, key-ring size, token that displays a randomly generated number that changes every minute .
  • When the account holder logs into Internet Banking, they are required to enter the number from the token in order to access their accounts.
  • Provides the maximum level of security by requiring anybody who accesses the account holder's account to physically have the token in their possession.

In many cases, auditors are requiring financial institutions to add this additional level of security to their remote account access services. Check with your auditor to find out if it is a requirement for your bank. Even if it is not mandatory, TFA will give your customers additional peace of mind knowing that their account information is secure.

Worldwide Interactive Services, Inc. is an exclusive distributor for CRYPTOCard, World-Leading Authentication Technologies. Click here for more information about CRYPTOCard and their products.


CLICK HERE for additional information about our products and services
Copyright © 2010 Worldwide Interactive Services, Inc. All rights reserved.