Customizing and Integrating Applications into Business Operations.

Protection against unauthorized access to self-service systems via operating system login processes

Description:

Terminal Security – Access Protection offers protection against unauthorized access to self-service systems via operating system login processes. A primary feature of this software is operating system ‘hardening’, which helps minimize security vulnerabilities by eliminating as many security risks and non-compatibilities as possible through the removal or disabling of all non-essential operating system components and services.

All these deliver standard users and user groups privilege concepts that are neither compatible nor compliant with stringent self-service environment requirements, and can serve as a ‘back door’ for potential vulnerability attacks. Access Protection follows best-practice e.g. SANS, NISTS, ATMIA and delivers a pre-fabricated operating system hardening blueprint which can be extended according to security and governance needs and requirements.

Benefits

• Operating system hardening for both Microsoft XP and Windows 7 Professional
• Fully multi-vendor compatible from both a hardware and software perspective
• Specifically designed – developed for self-service terminals delivering compliance to the different security industry and best practice guidelines
• Enables the deployment of a Security Governance across the Self-Service Terminal environments

Protection of data on the self-service terminal disk against theft or misuse through hard disk encryption

Description

Terminal Security – Hard Disk Encryption protects data/information from theft or misuse if an ATM is switched off, during decommissioning, or even during unauthorized booting via removable mediums. The software encrypts the entire hard disk, making stored data inaccessible unless a specified authorization process has been successfully executed.

Unlike traditional disk encryption solutions that require a password or a security token for authorization purposes, Hard Disk Encryption uses the natural environment of a self-service terminal to deliver protection based on unique information retrieved from the terminal’s devices, such as the pin pad, card reader or dispenser module. Access is provided to the terminal’s hard disk and boot process only when this unique information from the environment can be retrieved and authorized. If the disk (and/or PC unit) or the entire ATM is removed from its natural environment, the network disables the terminal’s ability to authenticate, and therefore access to its hard disk.

Benefits

• Full ATM hard disk encryption
• Protection of branded or operational data against theft or misuse even when the self-service system is in transit or in rest
• Protection against access to stored data on the ATM hard disk and thus reverse engineering
• Machine-specific encryption to ensure that the hard disk can only be accessed and used in its original secure environment (e.g. ATM)
• Data cannot be accessed if removed from its self-service terminal
• Fully multi-vendor compatible from both hardware and software perspective
• Reduction in losses attributable to unauthorized access to branded or operational data

Protection of self-service systems against unauthorized software installations and malware attacks

Description

Terminal Security – Intrusion Protection protects self-service systems against unauthorized software installations and attacks from malware such as worms, Trojans and viruses, as well as against the manipulation of system components to try to force unauthorized cash withdrawals from ATMs or steal sensitive data.

Intrusion Protection uses the so-called ‘sandbox’ mechanism: all requests for access to files, registries or memory, as well as removable device usage and communications, are inspected for validity and either allowed or denied according to the terminal’s behavior pattern. Utilizing the sandbox mechanism, Terminal Security Intrusion Protection is capable of detecting anomalies immediately, blocking and reporting (issuing security alerts) them. But it is not only the runtime that is protected, Terminal Security Intrusion Protection prevents malware-exploits or for that matter rogue software from being installed or being taken advantage of.

Benefits

• Protection against different forms of internal/external malware or zero-day vulnerabilities
• Utilizes Sandbox (Behavioral Patterns) mechanism and not just so-called Black- and/or White- lists
• Does not require constant updating of so-called signature files or protection lists (whitelists) if changes are made to a software layer
• Specifically developed for self-service environments
• Fully multi-vendor compatible from both a hardware and software perspective
• Delivers the necessary risk mitigation and PCI DSS Compensating Control for the PCI DSS Requirement 6.1 / 6.2 when using the Microsoft XP operating system

IRIS prevents and combats fraud and controls risk for all types of card-based payments

Description

IRIS Analytics’ technology and Wincor Nixdorf’s global presence, long term experience, skilled people, ongoing support and extensive security portfolio have brought this unique solution onto the market – a solution that delivers genuine benefits to its users.

The fraud prevention solution gives you an additional line of defense in the constant fight against financial crime relating to fraudulent use of customer card and account data in electronic payment systems. 

Designed as a holistic, multi-channel solution, IRIS combats fraud and controls risk for all types of card-based payments, online banking, transaction banking (e.g. Faster Payments, SEPA Direct Debits) and mobile payments. IRIS is a true 24x7 real-time system. It prevents fraud by intercepting fraudulent transactions “in flight” and generating case reports for subsequent offline investigation. IRIS is capable of preventing fraud at individual portfolio level, either during the authorization process or at the payment gateway.

Benefit from reduced fraud losses, increase your customer satisfaction and significantly reduce your TCO.

Benefits

• Minimize risk, and fraud losses
• Minimize customer disruption and maximize customer satisfaction
• Reduce TCO
• Compliance with rules and regulations of payment scheme, and legislation
• Multi-tenancy (multi-client) from a single instance of the software, ensures easy addition of portfolios and processing customers whilst protecting privacy with software Chinese walls
• Ultra-high performance, responding to thousands of transactions per second, ensures real-time response to real-time requests from gateways and authorization systems
• Rapid adaptation of decision models means your business is always protected from emerging fraud patterns
• Self-learning algorithms mean that you can maintain the models yourself, without any need for our involvement, thus keeping TOC down and responsiveness up
• Multi-channel capabilities mean that the same system protects all your channels, taking account of any peculiarities of the channel and enabling a holistic view of fraud and customer impact
• PCI DSS compliance
• Standard product with immense flexibility through configuration leads to quick and easy implementation: IRIS works out of the box

Optical recognition and prevention of various forms of tampering such as skimming and trapping

Description

The Terminal Security - Optical Security Guard (OSG) solution operates with optical sensors to monitor ATMs and prevent various forms of tampering such as skimming and trapping. This solution is based on smart image analysis software that interacts with the customer panel cameras and card entry slot cameras that are integrated in the ATM, and continuously analyzes the defined/actual state. If modifications to an ATM are detected, the solution triggers an alarm and, if applicable, stops follow-up transactions immediately.

Benefits

• Optical detection of tampering to ATMs such as:
• Skimming devices
• Cash-trapping overlays
• Pin pad overlays
• Card reader overlays
• Cameras
• Changes in the privacy areas
• Reduction in losses attributable to physical attacks
• Enhances customer experience through secure transaction processing

Using Direct Marketing, a campaign management solution for your Omi-channel environments to enhance customer experience, increase sales opportunity and reduce marketing cost.

Description

PC/E Direct Marketing enables a bank to differentiate itself in the market by delivering personalized customer experience and enhancing customer intimacy/loyalty, while reducing the marketing cost.

With PC/E Direct Marketing you can run your targeted marketing campaigns across multi delivery channels – front office, self- service, Internet, mobile, call center and digital signage. The software enables you to place personalized/interactive advertising and sales promotions for your banking products via the existing infrastructure. Additionally, you can easily manage and measure the effectiveness of targeted marketing campaigns through our embedded reporting tool.

You can turn ATM into a unique marketing channel by implementing PC/E Direct Marketing to increase upselling & cross-selling opportunities. Make your marketing investment lean and effective.

Benefits

Personalized campaigns to targeted customers

Enhance customer experience & customer intimacy

Reduce advertising cost by implementing Direct Marketing in your own self-service channel

Increase cross-selling & up-selling opportunities

Excellent base of information about your customers

Manage and measure the effectiveness of campaigns through the embedded reporting tool

Shorter time to market thanks to fast campaign planning and management

Details

Campaign management for different marketing activities

Personal customer contact on the terminal

Support for Omni-channel operations (Self-Service, Teller, Internet Banking, Mobile, Digital Signage)

Customer feedback acceptance and export

Export interface for individual reports

PCI-compliance

Video security solution reduces the risk of vandalism to ATMs and transaction fraud

Description

Cameras mounted on ATMs record cash transactions from start to finish and thus prevent a wide range of fraud and manipulations of self-service transactions. The analysis of the stored images or video footage is very helpful both when criminals try to alter the device technically and in the clarification of conflict situations such as cases of reversal fraud. 
ProView Video Surveillance software enables both centralized image and video monitoring and image analysis.

Benefits

• Video surveillance and recording of suspicious activities around the ATM in real time
• Increased security in general for the self-service systems through continuous system monitoring
• Immediate response time reduces the risk of fraud or physical damage to the ATM
• Transaction-based real-time monitoring of ATMs delivers up-to-the-minute information
• Information about a potential threat is communicated promptly to the responsible staff