Gemalto is now part of the Thales Group, find out more.

Gemalto: Security to be free

Our blogs: Conversations around digital security

Search for:

Posts tagged: Amsterdam

Home
Mobile
Enterprise Security
IoT
Financial Services
Government
Software Monetization

Featured Bloggers
- Gemalto (504)
- Manfred Kube (111)
- Tim Cawsey (83)
- Jennifer Dean (62)
- Marta Bordonada (59)
- Rémi de Fouchier (53)
- Arta Sylejmani (41)
- Mor Ahuvia (39)
- Dominique Brulé (38)
- Philippe Benitez (37)
- Jason Hart (34)
- Didier Benkoel-Adechy (30)
- Maria Barbieri (29)
- Kristel Teyras (23)
- Haider Iqbal (21)
- Frederic Martinez (20)
- Xavier Larduinat (20)
- Neville Pattinson (20)
- Sebastien Violette (20)
- Ken Abbott (19)
- John Ahlberg (19)
- Sophie Bessin-Py (18)
- Brittany Jedrzejewski (17)
- Juana Catalina Rodriguez (15)
- Nicole Williams (14)
- Isabelle Lodo (13)
- Ronni Kives (12)
- Jennifer Hindle (12)
- Sek Leong (12)
- Sharon Ginga (10)
Latest blog posts by:
See all bloggers
Blogroll
Countries
Tags

Posts Tagged ‘Amsterdam’

Sort by: Most comments

Most recent
Oldest
Most comments

LTE World Summit: Seamless connectivity is the key to customer…

Posted on 24 June 2013 by Kim Depussé in Mobile

The subject of indoor vs. outdoor mobile internet access is much debated. Currently, consumers have very different expectations when they access the internet via a…

TechEd 2012 – Were you there?

Posted on 03 August 2012 by Thierry Musoles in Enterprise Security

Microsoft may not be renowned for throwing wild parties, but when you gather over 7,500 people in Amsterdam for a week, you’re bound to come…

From Twitter

Subscribe to updates

Select a category of interest:

Enter your email address:

Delivered by FeedBurner.
Submitting this form will open a popup window to the FeedBurner website.

Latest comments

06/10/19 @ 14:10 Alexander Edelson Hello Sebastien I wonder if you can tell whether multi-SIM UE using Gemalto eSIM (one SIM is UICC, a second one - Gemalto eSIM) can pass 3GPP certification (PTCRB)? Thank you very much. Best regards, Alexander Edelson.
27/08/19 @ 11:08 Lambert Jean Hi Alexandros, Many thanks for the interest you show on our blog, and on PSD2 in general. About SMS OTP, we of course refer to June 2019’s EBA Opinion Paper, that actually mention it as relevant Possession factor (Table 2, Page 7). Our interpretation on how EBA supports (or does not!) SMS OTP is based on our analyzes of this process’ vulnerability, and the many references of the texts to end to end security of the authentication elements. As a matter of fact, when EBA published its first opinion in June 2018, demonstrating that the current practices with SMS OTP were at least not sufficient to comply, many banks considered it as a severe warning against SMS OTP. This interpretation was also shared by ECSG, the “European Cards Stakeholders Group”, strongly in favor of SMS, in its discussion with EBA. ECSG however always considered evolving to biometrics, for instance, as a must for the future. In summary SMS OTP is seen as an acceptable solution, but EBA however underlines its limits: • It is only one factor (“possession”) and a 2nd factor is needed. On medium term, the usage of SMS OTP without, for instance, an additional password, would have to be reconsidered… • Other security concerns (integrity, confidentiality, SIM swapping…) that we often pointed as risky, even if not emphasized in the paper, are frequently mentioned in various EBA’s texts. At the end of day, it seems now that there is a consensus to say that • SMS is not satisfying, and should at least evolve, possibly be replaced by other methods, and/or be reserved for categories of customers that cannot be reached in another way (Thales/Gemalto message for years already!) • But considering its wide deployment, its acceptance by customers and merchants, and its actual good impacts on fraud, this evolution would take time. That is precisely what the NCAs prepare to do proposing “migration paths” that will be formalized in the next weeks or months, as allowed by EBA in this year’s opinion paper. Your vision “although SMS OTP solution has vulnerabilities, if you connect this solution with a knowledge element (like PIN or password) then you can manage 2FA and SCA”, is a valid approach and I assume it should be backed by NCAs for the short-medium term. But at longer term, in the competition landscape, and to improve the customers’ security, we still say that it should rapidly evolve, and many banks are already in this perspective.
26/08/19 @ 10:08 Tim Cawsey Hi there, please get in touch via the contact form on our website https://safenet.gemalto.com/technical-support/ Thanks

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License.

ACTIVITIES
Defence & Security
Digital Identity and Security
Aerospace
Space
Ground Transportation
Market-specific solutions

GLOBAL
Career
Investor
Journalist
Customer Online

SOCIAL NETWORKS
Facebook
Twitter
LinkedIn
Instagram
Youtube

Decisive technology for decisive moments

www.thalesgroup.com

Be aware that this site uses cookies. Before continuing browsing we advise you to click on Privacy Policy to access and read our cookie policy.Ok Privacy policy