Authentication: Now OTP Issuing Solution by PayCool
- During 2011 PayFORUM, PayCool launched a new low cost authentication solution likely to replace SMS OTP and responding to the Banque de France requirements.
- Upon reception of an OTP request, a remote server (managed either by a third party or internalised) originates a phone call are adds the required code in the calling number. The user then receives an improved message, which might be necessary to check on the transaction context and describing the procedure needed to validate the operation. Several possible modes exist: allocated phone numbers (in case the customer has to phone back) or unallocated.
- Considering that, in most cases, the authentication server in charge of managing identities is already in place, this solution can easily be integrated and does not require any particular development (besides adapting the user interface to describe the procedure and avoid incomprehension).
- In order to lower the communication costs and challenge the generally used method based on OTPs sent by SMS, PayCool explains that when the user picks up the phone and actually listens to the improved message (10 to 15 seconds), this process still remains less expensive than SMS sending. In addition, the phone call is automatically interrupted once the message delivered.
- As the number of distant services increases (e- and m-commerce/banking) and mobile transactions are today evolving very fast, this low cost solution could respond to the increasing needs in terms of strong authentication.