Proactive solutions to difficulties in biometric authentication services

Deploying security solutions in online payments and bank card payments

On December 18, 2023, the Governor of the State Bank of Vietnam (SBV) issued Decision No. 2345/QD-NHNN on implementing safety and security solutions in online payments and bank card payments (Decision 2345), effective from July 1, 2024.

For customers who do not have an ID card or a Citizen Identification Card (CCCD) with a chip , the authentication measure using the customer's biometric identification mark for type C and D transactions specified in Article 1 of Decision 2345 is implemented by matching the biometric data stored in the collected and verified customer biometric database, in which the verification is performed by face-to-face meeting.

For customers with chip-embedded ID cards but using phones that do not support NFC, the method of authentication using the customer's biometric identification mark for transactions of types C and D as prescribed in Article 1 of Decision 2345 is implemented in the following ways: Through authentication of the customer's electronic identification account created by the electronic identification and authentication system; or matching with the biometric data stored in the collected and verified customer biometric database.

For storing information on devices (including computers using web browsers) performing transactions: The unit stores identifying information about the device performing transactions according to the principle that it only needs to store information to uniquely identify the device. The information stated in Clause 3, Article 2 of Decision 2345 is suggested information and it is not mandatory to store all of this information.

For deposit and withdrawal transactions from e-Wallets via payment accounts/debit cards linked to the owner , if the customer has authenticated the owner with the bank when linking using authentication measures for type B transactions or higher (except for authentication measures using biometric identification signs attached to smart handheld devices), it is not mandatory to apply authentication measures for deposit and withdrawal transactions from e-Wallets with limits: G ≤ 10 million VND and G + Tksth ≤ 20 million VND. Other transactions are implemented according to the provisions of Decision 2345.

Requirements for payment implementation organizations

To prepare for the implementation of Decision 2345 from July 1, 2024, the units will carry out the following tasks:

Organize communication and provide instructions to all customers on implementing transaction authentication measures corresponding to transaction limits as prescribed in Decision 2345.

Prepare plans, hotline channels and arrange staff on duty 24/7 to promptly guide and support customers in registering and using biometric authentication information.

Proactively coordinate with the National Population Data Center - Department of Administrative Police for Social Order - Ministry of Public Security and other relevant organizations to prepare plans to handle difficulties and problems in the process of registering and using biometric authentication services from July 1, 2024.

Deploy technical solutions to ensure security and safety of information and customer data, comply with legal regulations on personal data protection and legal regulations on ensuring security and safety of information systems.

To avoid transaction congestion and support customers promptly, we encourage units that have completed implementation to promptly provide services to customers.

Source: https://laodong.vn/kinh-doanh/chu-dong-phuong-an-xu-ly-kho-khan-trong-dich-vu-xac-thuc-bang-sinh-trac-hoc-1358032.ldo