STRONG CUSTOMER AUTHENTIFICATION WHEN PROVIDING A PAYMENT SERVICE

Abstract

Strong customer authentication in the Second Payment Service Directive means customer authentication where customer shall use two or more of the following elements: knowledge (what only the user knows), possession (what only is in the user’s possession) and inherence (user-specific). The purpose of the strong customer authentication is to make payment services more secure and to protect costumer’s personal data. It is mandatory to use at least two of three elements: elements: knowledge, such as password, numeric code, pet name, etc., possession, such as a mobile phone, and inherence, such as a fingerprint. The aim of the article is to find out what is secure customer authentication, what it contains and in which cases secure user authentication does not apply.