Security in financial services industry is of significant importance. Both for intranet applications, internet business to consumer applications and internet business to business applications. As most financial institutions are activrly adopting XML as the basis for future web applications, data transactions and data storage, the need for comprehensive XML Security software is becoming more clear.

While SSL provides transport level encryption, application level security provides additional security for data while in storage or when data is transported offline. Application level security also allows for complex role-based business logic to be inegrated allowing for higher level of business automation.

We see XML at the core of all future data representations. XML protocol such as SOAP will be used for all application level data exchange. With this vision and belief we have developed the SecureXML product.

SecureXML Digital Signatures provide integrity, authentication, non-repudiation, and confidentiality to financial applications. Financial Service providers are able to obtain extensive benefits of the XML Digital Signature technology as it provides assurance that the data indeed came from where is says it came from and that the data was not modified.

Infomosaic's SecureXML Suite helps financial institutions and their customers to securely conduct transactions.

Smart cards improve PKI implementation by providing portability and ease of use, and significantly reduce the legal processes for digitally signing, validating, forms and documents. Financial institutions are the premier users of smart card technology.

Infomosaic SecureXML provides full support for smart cards and allows seamless integration with other smart card based financial applications. By using SecureXML for smart cards, financial institutions are able to

• Authenticate user before transaction processing transactions
• Allow digital signing of forms and transaction by users
• Enjoy faster turn around and cost savings because of the elimination of paperwork

The Visa 3-D Secure protocol is a new Visa payment service designed to enhance and validate payments made through the Internet. 3-D Secure is an authentication technology that uses Secure Sockets Layer (SSL) encryption and a Merchant Server Plug-in to:

o Pass information and query participants to authenticate the cardholder during an online purchase, and
o Protect payment card information as it is transmitted via the Internet.

3-D Secure is based on the three-domain model illustrated in Figure 1.

3D Secure is Visa-authenticated payment program that uses digital certificates (signatures) to verify that the consumer and the merchant are both authorized to use and accept credit cards. The digital certificate is placed on the server side, and the consumer only needs a password (PIN number) to use the digital signature from any device.
The consumer's credit card is provided to the credit card issuer for settlement without the merchant ever seeing the number. The online transaction is the equivalent of a card-present transaction.

Using 3Dsecure, consumers will know that they can shop safely and conveniently while preventing fraud on their card, and merchants will know they are dealing with a legitimate cardholder anywhere in the world.