SMS OTP – PSD2 SCA Compliant or not?

xxx

“or now EBA (5th Oct) has clarified that SMS does constitute as SCA (possession) feature – EBA Single Rulebook Q&A They have also quoted RTS article 22, which refers to confidentiality, integrity & security. While creating the OTP with dynamic linking is SCA compliant but transmission & delivery medium is debated.

Article 22.1 Payment service providers shall ensure the confidentiality and integrity of the personalised security credentials of the payment service user, including authentication codes, during all phases of the authentication

Article 22.4 Payment service providers shall ensure that the processing and routing of personalised security credentials and of the authentication codes generated in accordance with Chapter II take place in secure environments in accordance with strong and widely recognised industry standards

EBA has gone with practicality rather than enforcing RTS stringently. SMS has long been stable form of second factor authentication in legacy plagued banking infrastructure. Also educating customers on new SCA devices and methods will lead to issues in terms of customer experience.

So SMS is it? Probably not. We would advise banks to use SMS with caution.”

From “SMS OTP – PSD2 SCA Compliant or not?”.

xxx

Top 5 IoT Innovations at CES 2019 that Caught our Eye | Internet of Things

xxx

“Bare Conductive’s focus is on solutions which connect basic objects, rather than more complex devices. Their 3D-printable sensors can be adhered to surfaces and spaces to provide very low power connectivity – an interactive wall, for instance, or a connected sink. An ingenious form of conductive paint allows electrical wires to be ‘drawn’ across surfaces with liquid dispensers, allows such previously unthought of innovations like connected wallpaper to be knocked out cheaply and with ease”

From “Top 5 IoT Innovations at CES 2019 that Caught our Eye | Internet of Things”.

xxx

New, revised paperback edition of Before Babylon, Beyond Bitcoin is published!

 

The new, revised paperback edition of Before Babylon, Beyond Bitcoin has been published by the London Publishing Partnership. Here is the foreword by Andrew Haldane of the Bank of England:

Often, the most interesting issues in economics arise from the intersection—sometimes the collision—between technology and society. To take an example, there is no more topical, and vexed, an economic issue right now than the impact of new technol- ogies (such as robots, artificial intelligence and big data) on the world of work (individuals, sectors, communities, societies). Indeed, history makes clear that this creative friction between technology and work has existed for many millennia. Money is another issue that, through the ages, has illustrated vividly this complex tango between societies and technologies. Money is a technology—indeed, a key one for discharging obligations between people, for keeping score in the economy, for facilitating trade, finance and commerce. But money is also a social good—indeed, a key one as an emblem of civic identity, as a measure of societal trust and order.

Technology and society have, in the main, operated in harmony when it comes to monetary issues. As money technologies have improved, this has tended to enhance trust in money, thereby boosting its supply and enhancing its public good properties in society. For example, one of the most transformative shifts in monetary technologies was from commodity to fiat monies. This not only freed up resources for more productive uses but over time enhanced the attractiveness of money. But new monetary technologies have not always been trust boosting, certainly not immediately. Indeed, in the hands of the wrong government or private entrepreneur, some money technologies have been trust busting. Some of the relative tranquillity in fiat monies over recent centuries can probably be put down to the stabilizing role of central banks.

Now a new technological wave may be about to break over money. For some, this could herald a completely new monetary epoch —perhaps one where money is fully digital rather than physical, where the structures that engender trust in money are distributed rather than centralized—where central banks’ role is changed fundamentally or even circumvented. This issue is shaping up to be every bit as vexed as those of robots and jobs. Passions around cashless societies run high. If nothing else, this tells us that money is, always has been and always will be much more than a cryptographic code; it is a social convention. Old conventions tend to change slowly. And it is society, rather than technology, that tends to choose the destination.

This book by David Birch brings out in rich and lucid detail the full historical journey money has been undertaking and the technological revolutions it has encountered en route. More speculatively, it also sketches the possible contours of future monetary paths, given the possibility of transformative technological change. Historical scholars, technologists, monetary economists and policy makers will all find something in here to hold their attention, to reshape their view of history or technology, finance or policy. They may or may not agree on what the next chapter in the history of money holds. But this book provides a well-researched and engaging account of the story so far, of money in retrospect and money in prospect.

Andrew Haldane
Chief Economist and Executive Director for Monetary Analysis, Research and Statistics
Member of the Monetary Policy Committee
Bank of England

Is Big Tech Merging With Big Brother? Kinda Looks Like It | WIRED

xxx

“Yet it seems to me there is little reason to imagine that the people who run large technology companies have any vested interest in allowing pre-digital folkways to interfere with their 21st-century engineering and business models, any more than 19th-century robber barons showed any particular regard for laws or people that got in the way of their railroads and steel trusts.”

From “Is Big Tech Merging With Big Brother? Kinda Looks Like It | WIRED”.

xxx

Crypto Critic Nouriel Roubini: Blockchain is ‘No Better Than an Excel Spreadsheet’

xxx

Furthermore, Roubini expressed his idea that CBDCs will dominate cryptocurrencies and change banking in radical ways. Moreover, while he foresees that fintech will change finance and that cash will disappear, he is of the opinion that blockchain and crypto won’t play a role in this change.

From Crypto Critic Nouriel Roubini: Blockchain is ‘No Better Than an Excel Spreadsheet’.

xxx

Matt Warman MP: As cashless transactions become the norm, Gov’t must ensure most vulnerable are not left behind | PoliticsHome.com

xxx

“Given the choice and an ideal world, I’d abolish cash tomorrow and have done away with cheques a decade ago. But in the absence of an ideal world, cash does remain a lifeline for many vulnerable groups… Government has a profound responsibility to those vulnerable groups to smooth that transition, and to find creative ways to hasten it so that nobody is left behind.”

From “Matt Warman MP: As cashless transactions become the norm, Gov’t must ensure most vulnerable are not left behind | PoliticsHome.com”.

I completely agree with the Honourable Member for Boston & Skegness on this one and have long said that we must plan for cashlessness, not simply slide into cashlessness as Sweden has done.

POST Digital identity down under

I had the good fortune to attend the Australian Payment Summit 2018 in Sydney at the end of last year, chairing the panel on Digital Currency and giving the first day closing keynote on the impact of artificial intelligence in the transaction space (I was developing the “where are the customers’ bots” theme). 

Naturally, one of the areas that I wanted to find out about was digital identity. As in many other countries, Australia is trying to deal with a complex mixture of requirements, goals and constraints for some form of digital identity infrastructure and it is far from clear what is going to happen. In the lead up to the event, the CTO of Westpac was quoted saying that “if you are going to move to a more open data-connected world, which we clearly are… you have to solve the problem of digital identity”. Well, yes. I agree 100%.

But how?

There is scepticism about a government solution. The Department of Home Affairs is looking at a single national digital identifier, which I am not sure is the right way forward since identity, as far as I am concerned, should be a menu. A recent report from Australian Strategic Policy Institute (a think tank) cautioned that an attempt to create some sort of digital identity could end up as “a repeat of the failed attempt to roll out the Australia Card” unless the government builds in privacy which, naturally, I agree with. So perhaps it is better to look to the private sector.

With a private sector solution, my preferred first step, of course, is to have regulated financial institutions do it. In Australia,this is indeed what is happening. Their approach is to have the Australian Payment Network (AusPayNet) tackle the problem under the auspices of the Australian Payments Council and they have been doing an interesting experiment in “agile” development to begin to explore what might be practical in the mass market, but it is still not clear how the banks will work together to deliver a mass-market solution that will be the platform that a modern economy needs. And, it turns out, I am not the only one.

Philip Lowe//embedr.flickr.com/assets/client-code.js 

In his keynote speech at the Summit the Governor of the Reserve Bank of Australia (RBA), Philip Lowe, said that digital identity is likely to become increasingly important as more and more activity takes place online and went on to say that the RBA is “highly supportive” of industry collaboration on this issue and views it as important that substantive progress is made. During the Q&A session he said (I paraphrase) “we all agree that something must done, but we can’t agree on what is it” and that the “institutions will need to compromise in the national interest”. I think these are very interesting (and very insightful) remarks.

I strongly agree with this view, because I think that the benefits of having a digital identity infrastructure provided by regulated institutions are so great as to 

The Australian approach to this is, I think, really interesting. They 

POST Ranting and rating

xxx

“China’s social credit system was launched in 2014 and is supposed to be nationwide by 2020.”

From “China Social Credit: The odd reality of life under China’s credit system | WIRED UK”.

xxx

xxx

China’s plan to judge each of its 1.3 billion people based on their social behavior is moving a step closer to reality, with Beijing set to adopt a lifelong points program by 2021 that assigns personalized ratings for each resident.

The capital city will pool data from several departments to reward and punish some 22 million citizens based on their actions and reputations by the end of 2020, according to a plan posted on the Beijing municipal government’s website on Monday. Those with better so-called social credit will get “green channel” benefits while those who violate laws will find life more difficult.

From Beijing to Judge Every Resident Based on Behavior by End of 2020 – Bloomberg.

 

xxx

xxx

There is a fear that people with contacts and resources will be able to rig their credit scores to enjoy the benefits. In a country where corruption is commonplace it’s not impossible to see the social credit system increasing the divide between the haves and have-nots.

From China’s worrying mandatory social credit system | Global-is-Asian.

 

xxx

xxx

Already there have been reports of residents using black data markets to boost their scores so they could be approved for a low-interest loan.

From China’s worrying mandatory social credit system | Global-is-Asian.

 

xxx

Design a site like this with WordPress.com
Get started