Looking to enhance the security of your financial transactions and comply with European regulatory requirements? Discover the Strong Customer Authentication (SCA) solution offered by Treezor.
Designed to meet the strict standards of the PSD2 directive and RTS technical standards, our solution combines cutting-edge cryptographic technology with a smooth user experience to protect your clients against fraud and identity theft.
The system combines at least two independent authentication factors (something I know, something I have, something I am) and adapts to the sensitivity of each operation.
During onboarding, a component representing the device’s identity is created locally:
This component generates and stores unique asymmetric cryptographic keys.
When a sensitive operation is initiated, the second factor is required. The mobile SDK or WebAuthn protocol prompts the user to validate their identity via their PIN code (knowledge factor) or biometrics (inherence factor), seamlessly leveraging the device’s native interfaces.
Once authenticated locally by the device’s secure environment, the Passkey or SDK uses its private key to generate a cryptographic signature (JSON Web Signature – JWS). This serves as tamper-proof authentication proof.
The SCA proof (JWS) is transmitted along with the request to the Treezor API. Treezor verifies the authenticity of the signature using the associated public key. If the proof is valid, Treezor securely authorizes the financial operation or account access.
factors at least combined for each authentication
minute-validity for the active session, automatically renewed with each API action
days of exemption validity for per-session account consultation
Treezor’s SCA solution stands out with four key elements:
Asymmetric cryptographic security: By generating private keys stored in a local digital vault (SCA Wallet), SCA proofs (JWS) guarantee non-repudiation and absolute protection for every transaction payload.
Delegated Mode or Standard Mode: If you already have your own approved SCA solution, Treezor offers a delegated mode subject to a compliance audit. If not, you can benefit from Treezor’s turnkey standard mode.
Lifecycle management & Fraud prevention: Full control via API and Dashboard allowing you to instantly block an SCA Wallet in case of suspected fraud, reset a PIN code, or unblock a device seamlessly.
Cross-platform & integration flexibility: We offer universal coverage thanks to our WebNative (WebAuthn) solution. Based on Passkey technology, it operates in a fully omnichannel manner: on desktop web browsers as well as natively on mobile devices (Android and iOS). For specific integration needs at the core of your applications, we also provide native SDKs (iOS, Android) and hybrid bridges (React Native, Flutter, Capacitor).
To perfectly adapt to your technical architecture and user journeys, Treezor offers two complementary approaches to implementing strong authentication:
Based on the global standard WebAuthn (Passkeys & Passcode), the WebNative solution is the most versatile and modern approach.
Dedicated to businesses operating primarily through a proprietary mobile app and seeking maximum visual and technical customization.
Regulatory compliance: Fully comply with the obligations of the European PSD2 Directive (EU 2015/2366) and RTS standards, validated by the Banque de France and European regulators.
Enhanced fraud protection: Drastically reduce the risks of identity theft and payment data theft through systematic validation of every sensitive action on behalf of the end user.
Optimized and native User Experience (UX): Authentication occurs directly through the device’s system interfaces (PIN code and biometrics), offering a familiar, frictionless journey. Furthermore, intelligent session management (180-day exemption for consultation and 5-minute active session with automatic renewal) restricts strong authentication to high-risk operations only.
To facilitate deployment, Treezor accompanies you through the technical and functional setup of SCA in your applications.
Do you want to grow your payment project? Just fill out this form. One of our experts will contact you as soon as possible.
