Feeds

Mastercard, Syniverse target holiday payment security with mobile verification system

Not in Bora Bora? Crooks can't use your credit card there

Gartner critical capabilities for enterprise endpoint backup

It’s ironic that when people are abroad so many people switch off their mobile phones' data and so many banks switch off customers' credit cards. But a deal between Syniverse and Mastercard aims to keep both switched on.

You’ll have heard of Mastercard but are less likely to know about Syniverse unless you work in the mobile industry. The firm is a kind of central broker for mobile phone networks that want to deal with lots of other networks without having to set up individual arrangements one at a time.

One of the many things Syniverse does in this space is handle number porting. When you move your mobile phone number from one network to another, the protocols to do this probably go through Syniverse.

The new project allows the Mastercard network to tap into the data in mobile phone networks to establish that a credit card being used abroad is kosher.

Mobile phone customers typically report the loss of a phone within three hours, this is something the credit card companies have envied for some time as the typical time to report a lost or stolen card is three days.

If in those three days someone has taken your credit card on holiday you might find it used for all kinds of unusual purchases, so the credit card companies regularly turn down such transactions. Unfortunately this means that between 50 and 80 per cent of the transactions they refuse are genuine.

The tie-up between Mastercard and Syniverse allows customers to register their mobile phone number with their credit card company and then when they present their mobile phone at the checkout in Rio de Exotic, the payment system does a quick check with the mobile phone network's Home Location Register back in the native country to see if the phone is at home. If it's not, the system checks the Visitor Location Register to make sure the phone is where the card is. Assuming it is, the bank will be more inclined to let the transaction through.

There are no mechanisms used to check the position of the phone and card more accurately such as Cell ID, triangulation or correlating phone and point-of-sale locations. Other checks will still be in place, though, as of course your card might be lifted while you are abroad.

Neither credit card numbers nor mobile phone numbers are truly unique. It's quite common for a husband and wife to have joint accounts with the same numbers and this is a problem handled by the Mastercard systems.

Similarly it is possible to have the same mobile phone number on multiple SIMs - although none of the UK operators currently offer this. Mary Clark from Syniverse explained to The Reg that the company handles this by looking at the the IMSI (Individual Mobile Subscriber Identifier), which is the unique serial number for the SIM card. Some international travellers will have multiple IMSI cards which offer cheaper roaming but each IMSI still serves to uniquely identify the customer.

The service is currently in a pilot phase with a number of networks – although only T-Mobile Germany has publicly said that it is part of the trial. Even when it is launched, the service will be opt in.

Aligned with this is a pre-paid data service which will offer customers roaming packages to use while they are abroad – as Syniverse' research shows 70 per cent of customers switch off data when roaming. Mastercard envisages that customers will use their Masterpass Wallet or Mastercard to buy packages of data either in advance of roaming or while roaming.

This uses the Local Break Out (PDF) regulation which comes into force in Europe in July, and while there will be significant savings, Clark would not be drawn on a figure. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
6 Obvious Reasons Why Facebook Will Ban This Article (Thank God)
Clampdown on clickbait ... and El Reg is OK with this
So, Apple won't sell cheap kit? Prepare the iOS garden wall WRECKING BALL
It can throw the low cost race if it looks to the cloud
EE accused of silencing customer gripes on social media pages
Hello. HELLO. Can EVERYTHING EVERYWHERE HEAR ME?!
Time Warner Cable customers SQUEAL as US network goes offline
A rude awakening: North Americans greeted with outage drama
Shoot-em-up: Sony Online Entertainment hit by 'large scale DDoS attack'
Games disrupted as firm struggles to control network
BT customers face broadband and landline price hikes
Poor punters won't be affected, telecoms giant claims
Broadband slow and expensive? Blame Telstra says CloudFlare
Won't peer, will gouge for Internet transit
prev story

Whitepapers

Best practices for enterprise data
Discussing how technology providers have innovated in order to solve new challenges, creating a new framework for enterprise data.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?