Personalised security features. For the execution of banking transactions, the User needs the personalised security features and authentication instruments agreed with the Bank in order to prove his/her identity and to authorise orders. Each User may agree with the Bank which personalised security feature and authentication instrument he/she is to use. The personalised security features, which may also be alphanumeric, are:
(i) the personal user number (“Personalized User Number”) and the Personal Identification Number (“PIN”) – collectively the “Individual Authorization Data” to have access to the Portal; and
(ii) the transaction authorisation numbers (photoTAN), usable only once, or
(iii) a the signature PIN/code word and the data of the personal electronic key for the electronic signature and an electronic signature authorized by the Bank (“Electronic Signature”; the Personalized User Number and the transaction authorisation numbers (PhotoTAN) or the PINs plus the Electronic Signature hereinafter referred to as “Identification Means”).
Personalised security features. For the execution of banking transactions, the User must use the personalised security credentials and authentication instruments established with the Bank in order to prove his/her identity and to authorise orders. Each User can arrange which type of personalised security credentials and authentication instruments he/she is to use with the Bank. Personalised security credentials are those personalised elements that the Bank provides to the User for authentication purposes. The personalised security credentials, which may also be alphanumeric, are (hereinafter referred to as the “Security Credentials” and, individually, the “Security Credential”):
(i) the number for personal use (“Number for personal use”) and the Personal Identification Number (“PIN”) – collectively the “Individual Authorisation Data” to have access to the Portal; and
(ii) the transaction authorisation numbers (photoTAN), usable only once, or
(iii) a signature PIN/password and the personal electronic key data and an electronic signature authorised by the Bank (“Electronic Signature”; the Personalised User Number and the transaction authorisation numbers (photoTAN) or the PINs plus the Electronic Signature will hereinafter be referred to as “Knowledge-Based Authentication Factors”). In those cases established by the applicable regulations, to correctly identify the Customer the Bank shall require the User to provide strong customer authentication, which requires the use of two or more knowledge-based (something only the user knows), possession- based (something only the user has) and inherence-based (something only the user is) authentication factors, which are independent –that is, the violation of one does not compromise the reliability of the others– and designed to protect the confidentiality of personal information. Specifically, this type of authentication shall be required when the Customer:
a) accesses his/her online payment account;
b) initiates an electronic payment transaction;
c) performs via a remote channel any action that may involve a risk of payment fraud or other fraudulent use.
