Is this the end of the PIN code and password?
Author: huifan Time: 2017-12-12
At the moment, contactless payments are restricted to a certain level of transaction – in the UK they can only be used when spending up to £30. If you want to pay for something slightly more expensive, you still need to use your PIN. But what if there was a card which you could pay with for transactions of any value, without having to use a PIN at all?
The development of EMV cards with embedded fingerprint authentication holds the key to this. They not just convenience, but also extremely high levels of security. Biometrics being used in the development of bank cards is a direct result of the mainstream adoption of biometrics on smartphones; we’ve become accustomed to using our fingerprint as a means of identification. This means it’s only a small jump to begin using them for authentication as well.
This new breed of payments cards brings with them a new type of authentication – the “What I Am” authentication factor. For example, when using an EMV banking card, the use of the PIN code authenticates, but does not identify the cardholder – since the 4-digit PIN may have also been shared by the genuine user with other people. In contrast, “What I Am” uses factors like biometrics in order to determine the user’s true identity. This provides greater security as there is no easy way you can share your biometric characteristics with someone else; they are unique to the individual.
While there are numerous benefits to EMV cards being fitted with biometric sensors, from added security to consumer experience, the development is not without challenges. It’s imperative that consumers have the same, if not a better, experience as when using a contactless card, and they need to be as durable as a normal bank card. This means that a biometric card needs to have a lifespan of three to five years, and needs to continue working throughout that period. Otherwise, consumer would need to constantly request new ones, which would be an added hassle.
The combination of biometrics and contactless could bring the ultimate payment experience to stores, for consumers and retailers alike. Biometrics for the EMV card go far beyond convenience as it does for mobile. It brings the final touch that is needed to migrate the entire card experience to contactless, regardless of the payment amount. We’re likely to see biometric authenticated cards piloted in 2018, deployed in 2019, and then followed by cards being converted to biometrics in large volumes thereafter. They may be second nature to us now, but in a few years PIN codes will seem incredibly outdated. Biometrics is the natural next step – and using a fingerprint is the easiest, and most seamless method for the consumer.
But fingerprint authentication in payments is just the start. It’s the first step towards a truly zero interface experience in which our fingerprint, voice, face and even behaviour contributes to a biometric matrix of authentication which makes for a completely seamless and highly secure experience. And not just in payments, but in other areas of our lives – from accessing our bank accounts to even driving our cars. When we reach that point, we’ll look back at these days of PIN codes and password and wonder how we ever remembered them.