Security for online customers

Every adult shops in one of the top 10 online stores every month, without even counting the small providers and traders' web shops. In 2012, more than three quarters of all Germans older than 16 bought products or services over the Internet, according to Eurostat.

The German organization for commercial affairs estimates that in Germany, the online turnover in 2013 will reach to 32 billion euros, which is a double digit percentage from the total commercial value of the German commercial effort. It is yet only 10 percent, but online commerce is definitely growing.
Despite this growth, there is still a manifest restraint for online shopping. This is partly because a whole range of food is not fit for online selling. Another obstacle is the lack of buying experience. If a consumerwho has never bought something online is asked about his greatest stumbling block, he mentions fraud and identity theft.

Eurostat states that this worrykeeps millions of consumers away from purchasing services and products online. Even consumers whoregularly buy things online have doubts about security, so they only order at big brands and large companies in which they have more confidence.
Most consumers know that online security has two sides. On the one hand, they are afraid to fall victim to obscure criminals; on the other hand, they are well aware that malware on their own pc can forward banking and credit card information to criminal units, even though they only deal with serious and trustworthy traders.

Of course, the consumer himself needs to take precautions to make sure his own pc is secure enough, yet this doesnot release the online shop from its duty.

The shopkeeper has to take stringent measures to protect customer data fromonline theft and abuse, and he has to put encrypted channels for the transaction of those data at the customers' disposal.

Online providers that want to differentiate and ensure a safe shopping experience for their customers can do more than just the bare necessities. They can, for instance,set up a defense against online theft and password hijacking by Trojans and rootkits. They cannot avoid that there may be some malware on the consumer's pc that can have a negative impact on the shopping process, but at least, they can diminish the risks and consequences.

Banks for example have increasingly done so by offering one-time password (OTP) solutions to enable financial transactions. Whenever requested, an authentication device or application generates an OTP that can only be used once during a limited period of time. When a password is stolen, it cannot bereused for malicious activities.

Even hijacking a password by keylogging is not interesting anymore, since the only thing the thief obtains, is a password that is not valid for later use. When a fraudster can put his hands on a user name, he will not be able to complete a transaction, as he doesnot have the one-time password authentication application and, as a consequence, no valid password.
Also online gaming providers offer their customers authentication solutions to protect their avatars and associated value from being stolen. The authentication devices or applications they offer are easy-to-use, secure and cost-efficient, combining security and comfort. However, most online providers shrink at the implementation of an authentication solution, because they would need the appropriate infrastructure in the back-office.
VASCO was aware of these challenges and therefore, created a platform for both providers and endusers, that enables an authentication procedure with one-time passwords: MYDIGIPASS.COM.

The company puts the needed infrastructure as a service at the providers' disposal, so that they can integrate this authentication solution in their online presence, in an easy and almost effortless manner. For smaller shops and other online applications, WordPress and Drupal plugins are available to guarantee an even easier installation and integration.
Customers only need an authentication application that generates a one-time password to log on to all online applications that are supported by MYDIGIPASS.COM. The customer can easily download the free authentication application on his smartphone (MYDIGIPASS.COM mobile application) on the MYDIGIPASS.COM website.

For the enduser, MYDIGIPASS.COM offers a combination of security and comfort. Firstly,hehas a more secure way to access and log on tohis favorite online providers' websites. Secondly,he doesnot need to worry anymore about password management, asMYDIGIPASS.COM is a single-sign-on portal. This means a user can log on to the platform and have secure access to hisfavorite websites, without having to remember complex and different passwords.

Thirdly, MYDIGIPASS.COM can also be used as a central point of assembly for all personal information that the consumer needs to fill out when registering for an online shop or portal. These registration processesarevery obsolete, so the MYDIGIPASS.COM alternative of just picking on the platform the details he wants to share with the new website without losing control, is unmistakably a big advantage.

For online traders, MYDIGIPASS.COM provides an easy-to-use and effective possibility to offer their customers a trustworthy environment and a comfortable and secure shopping experience. This is a clear benefit, unique selling point and retention tool for their conscious customers. Investing in an infrastructure is no longer needed, so also smaller shops can participate in the MYDIGIPASS.COM community.

The author is president and COO of VASCO Data Security.

First published in CIOL