Secure Payments Confirmation 101

on YouTube ↗27m

" summary

Secure Payment Confirmation builds on WebAuthn/FIDO and integrates with 3DS (spec 2311) to present a browser-rendered, biometric/passkey flow that completes with a signed assertion. Implementations in Europe—two production pilots with issuers and PSPs (Germany, Finland)—show it works in production, reduces the merchant flow to 4 screens vs 7, and is measurably faster than OTP. Current limitations: only Chrome and Edge support SBC, Safari does not, pilots are limited to friends-and-family and full rollout awaits device-binding for PSD2 compliance.

AI-written summary · about

" chapters (17)

1. 0:00Introduction and welcome
2. 1:09Personal note and background
3. 2:17Context and challenges in payments
4. 3:25What is Secure Payment Confirmation
5. 5:58Third-party authentication use case
6. 6:20How SPC works with FIDO and WebAuthn
7. 8:12Benefits of SPC over traditional methods
8. 10:20Live demo comparison
9. 11:26Pilot programs and testing
10. 13:17European pilot details
11. 15:04Credential creation process
12. 16:09Authentication workflow in pilots
13. 20:04Usability study insights
14. 21:52Pilot feedback and value
15. 22:58Next steps and adoption
16. 24:00Future enhancements to SPC
17. 25:26Q&A and PSD2 compliance

" related talks

• 25mKeynote Reshaping Digital Payment AuthenticationDoug Fisher · Authenticate 2022
• 25mEMV® 3DS: Enhancing secure, convenient authentication ...Arman Aygen · Authenticate 2022
• 01h 14mWebAuthn: Theory and practiceMartin Splitt, Semyon Levenson · HolyJS 2020 Moscow
• 33mSimple. Open. Mobile: A Look at the Future of Strong AuthenticationJerrod Chong · BSidesSF 2018
• 33mNavigating Passwordless Authentication with FIDO2 & WebAuthnJerrod Chong · BSidesSF 2019
• 42mSecurity, Fraud, and Compliance PanelPAYMENTSfn 2019
• 32mSecuring Online Identities with Simple, Secure, Open StandardsStina Ehrensvard · BSidesSF 2019
• 28mAuthentication Digital Financial ServicesPedro Martinez · Authenticate 2022