The HCE cloud-based security infrastructure consists of four main pillars:
- Tokenization
- Risk Management
- Session Keys
- User/Device Authentication
Tokenization: Indicates the type of token generation. There are three different types of tokenization.
- Static Tokenization (One token – One card)
- Semi-Dynamic Tokenization (generating the token for a specific purpose) (e.g., for authentication only)
- Dynamic Tokenization (generating a different token per transaction)
Risk Management: Involves carrying out risk checks on transactions.
- User Habits
- Fraud Checks (ATC (Application Transaction Counter) verification, etc.)
Session Keys: Indicates how session management will be carried out.
- Static Use
- Dynamic Use
- Multiple Session Keys
User/Device Authentication: Indicates the types of authentication used for the user or device during transactions. If the user or device authentication is not successful, the transaction is not initiated.
For example, if our mobile phone is copied onto another device and that device tries to generate tokens by acting as our mobile device, the application automatically takes actions such as deleting the mobile application from the device, deleting the tokens generated on it, and so on.
- Card PIN (authentication using the card PIN during transactions)
- Wallet PIN (authentication of the mobile application with a password)
- User Fingerprint (verifying the identity of the user on the device)
- Device Fingerprint (checking that a different device is not generating tokens as if it were the original device)
