CHAPIN, S.C. – A third level of authentication – which adds another level of protection against automated scriptwriters able to hack past the typical PIN and password system – is now being offered by PM Systems Corp. to credit unions using its WebFederal2 online banking solution. The three-way system adds a graphic image of an additional four-character security code. It changes randomly each time a member goes to the log-in area and the user then simply types in the number shown on the JPEG image, the company said. "Automated hacking scripts cannot see this JPEG security code because it is a graphic image as opposed to a text image. This kills the efforts of all but the most sophisticated of the scriptwriters," said Robert Broadwell, vice president at PM Systems. "They just move on to easier targets . the thousands of credit unions and banks that use account numbers and four-digit PIN's," Broadwell said. Broadwell said specialists in his firm's security unit, CU Defense, have demonstrated to him and clients how the typical two-way system can be penetrated by automated scriptwriters that move slowly enough that many intrusion detectors perceive it as normal activity. Because of that, he said, "multi-layered authentication is now being widely used and many large institutions have moved away from two-way authentication schemes."
Complete your profile to continue reading and get FREE access to CUTimes.com, part of your ALM digital membership.
Your access to unlimited CUTimes.com content isn’t changing.
Once you are an ALM digital member, you’ll receive:
- Breaking credit union news and analysis, on-site and via our newsletters and custom alerts
- Weekly Shared Accounts podcast featuring exclusive interviews with industry leaders
- Educational webcasts, white papers, and ebooks from industry thought leaders
- Critical coverage of the commercial real estate and financial advisory markets on our other ALM sites, GlobeSt.com and ThinkAdvisor.com
Already have an account? Sign In Now
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.