Feeds

Mastercard, Syniverse target holiday payment security with mobile verification system

Not in Bora Bora? Crooks can't use your credit card there

Security and trust: The backbone of doing business over the internet

It’s ironic that when people are abroad so many people switch off their mobile phones' data and so many banks switch off customers' credit cards. But a deal between Syniverse and Mastercard aims to keep both switched on.

You’ll have heard of Mastercard but are less likely to know about Syniverse unless you work in the mobile industry. The firm is a kind of central broker for mobile phone networks that want to deal with lots of other networks without having to set up individual arrangements one at a time.

One of the many things Syniverse does in this space is handle number porting. When you move your mobile phone number from one network to another, the protocols to do this probably go through Syniverse.

The new project allows the Mastercard network to tap into the data in mobile phone networks to establish that a credit card being used abroad is kosher.

Mobile phone customers typically report the loss of a phone within three hours, this is something the credit card companies have envied for some time as the typical time to report a lost or stolen card is three days.

If in those three days someone has taken your credit card on holiday you might find it used for all kinds of unusual purchases, so the credit card companies regularly turn down such transactions. Unfortunately this means that between 50 and 80 per cent of the transactions they refuse are genuine.

The tie-up between Mastercard and Syniverse allows customers to register their mobile phone number with their credit card company and then when they present their mobile phone at the checkout in Rio de Exotic, the payment system does a quick check with the mobile phone network's Home Location Register back in the native country to see if the phone is at home. If it's not, the system checks the Visitor Location Register to make sure the phone is where the card is. Assuming it is, the bank will be more inclined to let the transaction through.

There are no mechanisms used to check the position of the phone and card more accurately such as Cell ID, triangulation or correlating phone and point-of-sale locations. Other checks will still be in place, though, as of course your card might be lifted while you are abroad.

Neither credit card numbers nor mobile phone numbers are truly unique. It's quite common for a husband and wife to have joint accounts with the same numbers and this is a problem handled by the Mastercard systems.

Similarly it is possible to have the same mobile phone number on multiple SIMs - although none of the UK operators currently offer this. Mary Clark from Syniverse explained to The Reg that the company handles this by looking at the the IMSI (Individual Mobile Subscriber Identifier), which is the unique serial number for the SIM card. Some international travellers will have multiple IMSI cards which offer cheaper roaming but each IMSI still serves to uniquely identify the customer.

The service is currently in a pilot phase with a number of networks – although only T-Mobile Germany has publicly said that it is part of the trial. Even when it is launched, the service will be opt in.

Aligned with this is a pre-paid data service which will offer customers roaming packages to use while they are abroad – as Syniverse' research shows 70 per cent of customers switch off data when roaming. Mastercard envisages that customers will use their Masterpass Wallet or Mastercard to buy packages of data either in advance of roaming or while roaming.

This uses the Local Break Out (PDF) regulation which comes into force in Europe in July, and while there will be significant savings, Clark would not be drawn on a figure. ®

Protecting users from Firesheep and other Sidejacking attacks with SSL

More from The Register

next story
Brit telcos warn Scots that voting Yes could lead to HEFTY bills
BT and Co: Independence vote likely to mean 'increased costs'
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
New 'Cosmos' browser surfs the net by TXT alone
No data plan? No WiFi? No worries ... except sluggish download speed
Radio hams can encrypt, in emergencies, says Ofcom
Consultation promises new spectrum and hints at relaxed licence conditions
Turnbull: NBN won't turn your town into Silicon Valley
'People have been brainwashed to believe that their world will be changed forever if they get FTTP'
Blockbuster book lays out the first 20 years of the Smartphone Wars
Symbian's David Wood bares all. Not for the faint hearted
Bonking with Apple has POUNDED mobe operators' wallets
... into submission. Weve squeals, ditches payment plans
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.