Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers

NIST SP 1800-17 Printed in COLOR
E-commerce fraud increased by 30 percent in 2017, compared to 2016. This is linked to the improvements in EMV credit card technology in the United States, which has shifted malicious actors away from using stolen credit card data in stores at the checkout counter to using stolen credit card data for fraudulent online shopping. This increase in e-commerce fraud mirrors a similar increase observed in Europe following the rollout of similar credit card technology enhancements. Because online retailers cannot utilize all of the benefits of improved credit card technology, they should consider implementing stronger authentication to reduce the risk of e-commerce fraud. This guide explores several risk-based scenarios that use MFA to increase assurance of the purchaser's identity and to reduce fraudulent online purchases.
Retailers can implement multifactor authentication (MFA) to reduce the opportunity for a customer's online account to be used for fraudulent purchases. MFA is a security enhancement that allows a user to present several pieces of evidence when logging into an account. This evidence falls into three categories: something you know (e.g., password), something you have (e.g., smart card), and something you are (e.g., fingerprint). The presented evidence must come from at least two different categories to enhance security.

Why buy a book you can download for free? We print this book so you don't have to.

First you gotta find a good clean (legible) copy and make sure it's the latest version (not always easy). Some documents found on the web are missing some pages or the image quality is so poor, they are difficult to read. We look over each document carefully and replace poor quality images by going back to the original source document. We proof each document to make sure it's all there - including all changes. If you find a good copy, you could print it using a network printer you share with 100 other people (typically its either out of paper or toner). If it's just a 10-page document, no problem, but if it's 250-pages, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour.

It's much more cost-effective to just order the latest version from Amazon.com

This book includes original commentary which is copyright material. Note that government documents are in the public domain. We print these large documents as a service so you don't have to. The books are compact, tightly-bound, full-size (8 1/2 by 11 inches), with large text and glossy covers. 4th Watch Publishing Co. is a SDVOSB. www.usgovpub.com