Authentication Service for Securing Mobile Transactions
For Net Banking transactions, OTP continues to be a very popular 2-factor authentication mechanism. The primary device being used is a desktop computer or a laptop. The one-time password is being sent on a completely different device (out-of-band) and hence it serves as a strong 2FA approach. For Mobile Banking transactions, the primary device used for transactions and the device for receiving OTP is the same. So, this is not out-of-band. Hence it may be considered as a weak 2FA approach. How do different companies resolve this problem ?