Consumers are managing their financial services in more digital and diverse ways than ever before. But as card-not-present (CNP) transactions across e-commerce, m-commerce and remote commerce rise across the globe, so does fraud. Adding security without simply creating more points of friction is a real challenge, but one that the EMV 3-D Secure protocol – EMV 3DS for short – is trying to combat.

The protocols are generating real interest across the industry, but what exactly is EMV 3DS? And what are the key considerations stakeholders in the online payments and financial services world should be making?

Verifying CNP transactions

Three-Domain Secure (3DS) is a standard messaging protocol used to identify and verify cardholders for CNP transactionsThree-Domain Secure (3DS) is a standard messaging protocol used to identify and verify cardholders for CNP transactions. It creates a standardized, harmonized and secure authentication solution for all stakeholders: merchants, issuers, acquirers and schemes. Initiated by Visa and followed by other payment schemes such as Mastercard, a new version of EMV 3DS has now been developed and is being maintained by the industry body, EMVCo.

Goals of EMV 3DS specifications

The main goals of the latest EMV 3DS specifications can be broken down into three:

  • Increase approval rates

Fundamentally, achieving this boost the total volume of transactions and increases revenues for retailers, banks and schemes alike.

  • Reduce fraud

Merchants or issuing banks have historically been liable for fraudulent chargebacks, but now the responsibility is shifting depending on which version of EMV 3DS is supported during the authentication. EMV 3DS risk-based-authentication helps reduce fraud and brings huge savings, as well as more confident consumers.

  • Enhance the user-experience

Improved online authentication solutions – remembering the 3rd, 4th and 7th digit of a password set five years ago, for example – are far from user-friendly. And the stats speak for themselves: eCommerce cart abandonment rate is at nearly 70%, and around 28% of US online shoppers admit to quitting orders due to checkout processes being too long or complicated.

Cutting out complex additional steps for consumers will reduce cart abandonment and result in better sales for retailers (as well as customers happier to return!).

Intelligent risk-Based decision-Making

EMVCo’s latest specification features even more intelligent risk-based decision-making with advanced algorithms

By improving communication ‘in the background’ between the issuing bank, the acquirer and the merchant, EMV 3DS streamlines the user experience. At a high level, basic account holder information can now be automatically retrieved and verified without additional consumer input.

EMVCo’s latest specification features even more intelligent risk-based decision-making with advanced algorithms and smarter data sharing that help evaluate if a purchase is ‘normal’ or not. For example, considering user location, amount spent and frequency of transactions. This means additional authentication processes are only requested when really needed.

Say if one is making an m-commerce payment on holiday in Australia from a site they’ve never visited before – they may then be taken through some of the new, simpler additional authentication solutions defined. These now include one-time passwords sent via SMS, biometric authentication, use of existing authentication on mobile devices and background authentication checks.

Compelling authentication solution

Thorough testing and certification needs to be championed throughout

Crucially, EMV 3DS is no longer just for payments. The use cases for identification and verification (ID&V) are expanding, so the scope of EMV 3DS has become much broader to include adding cards to a digital wallet, open banking services and financial services apps, etc. EMV 3DS is a compelling authentication solution fit for the digital, omnichannel age. But as with any major system upgrade, implementation does not come without its challenges.

Selecting a trusted partner who understands the nuances and complexities of this new payments infrastructure can help take the strain of compliance. Whether defining and certifying a new solution, or upgrading an existing implementation, thorough testing and certification needs to be championed throughout. This is key to minimizing unexpected delays and costs on the path to service launch.

FIME’s long history supporting the industry’s digital transformation and participation in EMVCo enable them to deliver unrivaled expert support for your projects.

Share with LinkedIn Share with Twitter Share with Facebook Share with Facebook
Download PDF version Download PDF version

In case you missed it

What New Technologies And Trends Will Shape Video Analytics?
What New Technologies And Trends Will Shape Video Analytics?

The topic of video analytics has been talked and written about for decades, and yet is still one of the cutting-edge themes in the physical security industry. Some say yesterday’s analytics systems tended to overpromise and underdeliver, and there are still some skeptics. However, newer technologies such as artificial intelligence (AI) are reinvigorating the sector and enabling it to finally live up to its promise. We asked this week’s Expert Panel Roundtable: What new technologies and trends will shape video analytics in 2021?

Tackling The Challenge Of The Growing Cybersecurity Gap
Tackling The Challenge Of The Growing Cybersecurity Gap

The SolarWinds cyberattack of 2020 was cited by security experts as “one of the potentially largest penetrations of Western governments” since the Cold War. This attack put cybersecurity front and center on people’s minds again. Hacking communication protocol The attack targeted the US government and reportedly compromised the treasury and commerce departments and Homeland Security. What’s interesting about the SolarWinds attack is that it was caused by the exploitation of a hacker who injected a backdoor communications protocol.  This means that months ahead of the attack, hackers broke into SolarWinds systems and added malicious code into the company’s software development system. Later on, updates being pushed out included the malicious code, creating a backdoor communication for the hackers to use. Once a body is hacked, access can be gained to many. An explosion of network devices What has made the threat of cyberattacks much more prominent these days has been IT's growth in the last 20 years, notably cheaper and cheaper IoT devices. This has led to an explosion of network devices. IT spending has never really matched the pace of hardware and software growth Compounding this issue is that IT spending has never really matched the pace of hardware and software growth. Inevitably, leading to vulnerabilities, limited IT resources, and an increase in IoT devices get more attention from would-be hackers. Bridging the cybersecurity gap In the author’s view, this is the main reason why the cybersecurity gap is growing. This is because it inevitably boils down to counter-strike versus counter-strike. IT teams plug holes, and hackers find new ones, that is never going to stop. The companies must continue fighting cyber threats by developing new ways of protecting through in-house testing, security best practice sources, and both market and customer leads. End-user awareness One of the key battlegrounds here is the education of end-users. This is an area where the battle is being won at present, in the author’s opinion. End-users awareness of cybersecurity is increasing. It is crucial to educate end-users on what IoT devices are available, how they are configured, how to enable it effectively, and critically, how to use it correctly and safely. Physical security network A valuable product that tackles cybersecurity is, of course, Razberi Monitor™, which is new to ComNet’s portfolio. Monitor™ is a software platform that provides a top-down view of the physical security network and ecosystem. Monitor™ is a software platform that provides a top-down view of the physical security network and ecosystem It monitors and manages all the system components for cybersecurity and system health, providing secure visibility into the availability, performance, and cyber posture of servers, storage, cameras, and networked security devices. Proactive maintenance By intelligently utilizing system properties and sensor data, Razberi’s award-winning cybersecurity software prevents problems while providing a centralized location for asset and alert management. Monitor™ enables proactive maintenance by offering problem resolutions before they become more significant problems. Identifying issues before they fail and become an outage is key to system availability and, moreover, is a considerable cost saving.

Hikvision Ensures Building-Wide Security And Optimising Parking Flow For Luxury Four-Star Hotel In Kigali
Hikvision Ensures Building-Wide Security And Optimising Parking Flow For Luxury Four-Star Hotel In Kigali

Security monitoring, intrusion detection, parking management, one installation of Hikvision technology can do all this, and more. Discover how the 2000 Hotel in Kigali is using Hikvision technology to make operations more secure and efficient on every floor of its luxury four-star accommodation. The 2000 Hotel in Kigali, Rwanda, is known as the ‘highest hotel in Kigali’, offering captivating views over the city and the mountains. Guests enjoy the hotel’s four-star luxury facilities for work and leisure, taking advantage of its central location in the heart of Rwanda’s bustling capital city. Security of hotel guests has always been paramount, and so soon after the hotel was built, the management team installed security cameras throughout. However, over time it turned out that the imagery captured simply wasn’t clear enough to be useful in many situations. Underground parking lot Unfortunately, we started to notice that goods were going missing in the supermarket, as well as in the warehouse" What’s more, there were further security issues following the opening of a new supermarket on the hotel’s second floor. “Unfortunately, we started to notice that goods were going missing in the supermarket, as well as in the warehouse,” explains Miao Zhang, the Managing Director, 2000 Hotel. “Sometimes we noticed cash was missing from the registers, too.” In addition to this, the hotel was seeking a more efficient way to manage its underground parking lot. “The hotel was using a guard to let people in and out of the parking lot, and to calculate payments. But with more than 500 spaces to look after, this took time, often causing traffic jams as visitors waited to leave. Plus, the parking fees were sometimes incorrect,” explains Jaden. “Consequently, the team decided to explore how technology might be able to help.” Intrusion alarm system The 2000 Hotel chose a complete Hikvision solution, featuring 70 security cameras, a 60-channel intrusion alarm system for the supermarket, and an entrance/exit and payment system for the parking lot. In the corridors of the hotel and in the supermarket, the team installed Hikvision Dome Network Cameras (DS-2CD2145FWD-I). These discreet cameras offer high-quality images, even in low light conditions. In the hotel lobby, the stairwells and in the supermarket, the team installed Hikvision Bullet Network Cameras (DS-2CD2T45FWD-I5), with extended zoom and infrared capabilities that are ideal for these larger spaces. At the supermarket checkouts, the team installed Hikvision Varifocal Bullet Network Cameras (DS-2CD2645FWD-IZS), which feature a motorised varifocal lens for close monitoring of this busy location. Varifocal IR bullet cameras Meanwhile, Hikvision Varifocal IR DarkFighter Bullet Cameras (DS-2CD5A26G0-IZS) were installed at the main entrance of the hotel and the supermarket. These feature a wide dynamic range, ensuring clear images even when the cameras are facing strong light. To protect the supermarket outside of opening hours, the 2000 Hotel installed a complete Hikvision intrusion alarm system. The alarm system contains a PIR sensor (DS-PD2-D15AME), which is installed near the window of the supermarket. If someone intrudes in from the window at night, the system will be triggered and an alarm will be issued. Not only that, there is also a panic alarm station (DS-PEA1-21) in the control room of the supermarket. If an emergency occurs, people can use the tool to realise alarm aid at the first time. ANPR video unit The 2000 Hotel is managing the whole solution through Hikvision IVMS-5200E software Finally, at the entrance and exit of the underground parking lot, the hotel installed the Hikvision ANPR Video Unit (DS-TCG227-A), along with barriers, a card station and an integrated payment system, also from Hikvision. The 2000 Hotel is managing the whole solution through Hikvision IVMS-5200E software. Thanks to the high quality Hikvision technology, live review is very clear, making it ideal to support the investigation of any security incidents. However, since cameras were installed, there have been fewer incidents to deal with. What’s more, the supermarket team are better equipped to respond in the event of an out-of-hours breach. “If an intruder triggers the alarm, the duty manager gets an instant alert on their phone with quick access to relevant footage. This gives them real peace of mind,” says Jaden Huang, the Project Manager from Hikvision. “Indeed, it’s possible to view the status of the whole hotel system from a laptop or phone.” Parking management solution Down in the basement parking lot, the Hikvision parking management solution is working effectively. “Parking has become faster and more automated. For example, barriers will open and close automatically when customers take or insert a card, and parking charges are automatically calculated. And there are no more jams on exit,” confirms Jaden. The 2000 Hotel team are working on a new building in Kigali, with construction almost completed. The plan is to use Hikvision technology here, too. Miao says “Hikvision has provided the 2000 Hotel in Rwanda with world-class video technology that solved a host of our security and operational challenges. They also offer excellent support in one centralised location. We fully appreciate their professional service, and look forward to continuing our working relationship.”