Authentium Archives

Trusteer’s Rapport Security Solution Now Available at UK’s RBS and NatWest

By Jim Bruene Posted on March 23, 2009
Categories: Authentium, NatWest Bank, Royal Bank of Scotland, Security, Security & Privacy, Trusteer

Last May, Trusteer launched an optional added security measure for customers of ING Direct in the United States (note 1, see previous post). Although, it’s not perfect, users of the Rapport service are less vulnerable to viruses and malware running on the their PCs. We gave the new service an OBR Best of the Web award last fall in our Online Banking Report on Security Innovations.

Although, ING Direct is a great reference account, being endorsed by Royal Bank of Scotland, really puts Trusteer on the map. The security solution is offered for download at both Royal Bank’s RBS and NatWest sites (see screenshots below). Anyone visiting the banking sites can download the software, you don’t have to be an RBS/NatWest customer.

Trusteer also lists Huntington Bank as a customer but there is no mention of Rapport on the bank site yet. Other providers include Authentium’s SafeCentral (note 2) and Check Point’s ZoneAlarm (note 3).

Bottom line: Security is an issue for many bank customers, now more so than ever. Extra security options deserve consideration to improve customer satisfaction/trust and help reduce fraud losses.

Rapport download page at NatWest (link, 23 March 2009)

Rapport download page at RBS (link, 23 March 2009)

Notes:
1. Later ING Direct Canada and ING Direct’s Sharebuilder added Rapport support.
2. Authentium demo’d SafeCentral at FinovateStartup 2008 (video here). A new version of SafeCentral is in the works.
3. Check Point demo’d ZoneAlarm at Finovate 2008 (video here).

Online Banking Report Looks at New Security Technologies that Promise More Peace of Mind

By Jim Bruene Posted on September 18, 2008
Categories: Authentium, Best of the Web, ING Direct, Online Banking Report, Security & Privacy, Trusteer

With bad news pouring down from all corners of the financial services world, it’s a difficult time to be a bank marketer no matter what condition your financial institution is in (see note 1).

But besides sending reassuring emails to your customers, highlighting your strong balance sheet on your website (see inset), and for the few with blogs, dropping the occasional rosy post into the RSS or Twitter feed (note 2), what’s a banker to do?

When fear is rampant, little things can make a difference. Your customers have long been nervous about banking online. Most aren’t afraid enough not to use it, but lingering doubt remains.

Now might be a great time to follow the lead of ING Direct, Firstrade, and Muriel Siebert and introduce a software solution that provides extra security for online banking. While it won’t make a Fannie Mae shareholder any happier, it’s reassuring in these times that at least there are no crooks stealing your username and password.

obr_bestofweb Online Banking Report publishes Security 4.0 (note 3)
In the latest Online Banking Report, we look at several promising software solutions that allow even malware-infested users to connect safely to their bank. Both solutions earned OBR Best of the Web designations (note 4):

Rapport from Trusteer, now being distributed by ING Direct in the United States and Canada (previous post here)
SafeCentral from Authentium, being distributed by Firstrade and in testing at several major banks (Finovate Startup demo video here)

We also take a closer look at Bank of America’s SafePass (previous post here), which is an easy way for customers to add an extra security layer to their login, although it won’t prevent certain malware to hijack the session. See the inset for the complete Table of Contents.

Online Banking Report subscribers may download it now here. Others may download abstract here, or purchase here. Cost is US$495.

Notes:
1. But be thankful if your financial institution is not in the headlines right now. I’m in the hometown of WaMu and the headlines this morning were not pretty.
2. Blog post from Verity CU on 16 Sept.; Twitter update from First Federal today
3. Our fourth full Online Banking Report on security/privacy; previous reports were #119, #93/94, and #48.
4. OBR Best of the Web awards are given periodically to pioneering online banking features. It is not an endorsement of the company or product, just recognition for what we believe is an important development. Trusteer and Authentium were the 71st and 72nd recipients of the designation since we began awarding them in 1997.

ING Direct to Offer Desktop Security Plug-in from Trusteer

By Jim Bruene Posted on May 27, 2008
Categories: Authentium, ING Direct, Security & Privacy, Trusteer

While everyone wants better online banking security, the business case for most solutions is elusive. Even the simple step of adding an password in front of sensitive transactions can cost millions in customer service, enrollment procedures, employee training, and other soft costs.

So financial institutions, especially in the U.S., have taken a pragmatic approach to security, adding behind-the-scenes monitoring and making it difficult to transfer large amounts of cash out of the bank, rather than incur the expense of more robust login security. Banks have been especially reluctant to get involved in the security of the customer’s desktop due to the potential tech support costs and liability issues.

That’s what makes ING Direct’s new solution especially novel. The large U.S. direct bank, which has pioneered several security procedures, including multi-factor login and PINpad data entry, will offer a downloadable 400k plugin that creates a “secure tunnel” from the user’s computer to the bank (more analysis from Gartner’s Avivah Litan here).

According to the software provider, Israel-based Trusteer, even if the user’s computer is infected with malware, the company’s Rapport software defeats all attempts to view, capture, or take over the transaction. It also encrypts keyboard entry without impacting the speed of the interaction with the bank. If it works as billed, it could be a boon for online banking security.

The optional plug-in is expected to be made available to the direct bank’s 14 million customers worldwide, including 6.5 million in the U.S. The software is already in use by U.S. brokerage Muriel Siebert & Co. which mentions it in the What’s New section of its homepage (see screenshot below; read more here).

” width=”539″ height=”378″>

Cost
The software is now available here. It is free-of-charge to communicate with ING Direct and three other websites. Users will likely have the option to purchase a premium version that communicates with a larger number of websites.

This so-called freemium business model should help minimize the cost of the software to the financial institution. But the bigger cost issue for the bank is the customer service expense. ING Direct, which has famously kept customer-service costs down by focusing on serving only profitable customers, likely will offload as much of the tech-support burden as possible to Trusteer. But there’s no such thing as zero impact. So it will be interesting to see if they can make the ROI work across 6.5 million customers, many of whom haven’t a clue about safe computing basics.

A competing system, Safe Central from Authentium, was showcased at our Finovate Startup conference in April. The full-length demo of the program will be available here within a few days.