Thales Confirm Authentication Server (CAS) is a high-performance authentication solution designed to protect customer identities, online access and digital transactions across eBanking, eCommerce and mobile banking environments. Built to support multiple authentication technologies, devices and banking channels, Confirm Authentication Server enables financial institutions to implement flexible and secure customer authentication through Multi-Factor Authentication (MFA), One-Time Passwords (OTP), Challenge/Response and advanced transaction verification methods. The solution provides centralized authentication management, integration with existing banking infrastructures and secure cryptographic key protection through software security modules or external Hardware Security Modules (HSMs). With scalable architecture, support for on-premises and cloud deployment, and compatibility with various hardware and software authentication devices, Thales Confirm Authentication Server helps banks strengthen identity security, protect digital transactions and deliver secure yet convenient banking experiences.

Key Features

Multi-Factor Authentication (MFA)

Strengthen customer identity verification through multiple authentication factors, helping financial institutions prevent unauthorized access to online banking accounts and sensitive services.

One-Time Password (OTP) Authentication

Support time-based and event-based OTP authentication through hardware tokens, software tokens and mobile-based authentication methods to provide an additional layer of security.

Challenge/Response Authentication

Verify customer identities through challenge-response mechanisms, providing secure authentication for online access and sensitive banking operations.

Transaction Verification & Signing

Secure sensitive financial transactions through advanced verification and signing technologies, including EMV CAP, OATH, OCRA and Thales Dynamic Signature technology.

Multiple Authentication Devices

Support a wide range of authentication devices, including hardware tokens, software tokens, smart cards, mobile phones, QR tokens, PINPad devices and EMV CAP readers.

Mobile Authentication

Enable mobile-based authentication through SMS OTP, mobile tokens and out-of-band push notifications, providing customers with flexible authentication options.

Multi-Channel Authentication

Centralize authentication across multiple banking and digital channels, including internet banking, mobile banking, phone banking, eCommerce, eBroker and multi-issuer environments.

Flexible Integration & Open Standards

Integrate with existing banking infrastructures through REST APIs and industry-standard protocols such as LDAP, RADIUS, OATH, OpenID Connect and OAuth 2.0.

Secure Cryptographic Key Management

Protect cryptographic keys used for authentication through an integrated software security module or an external Hardware Security Module (HSM).

High Availability & Scalability

Support multi-tenant architecture, clustering and load balancing to help financial institutions maintain authentication service availability and support disaster recovery requirements.

Centralized Administration & Audit Logging

Provide centralized web-based administration, comprehensive audit logging and reporting to simplify authentication management and support security monitoring.

Benefits

Strengthen Customer Identity Security
Protect customer accounts and digital banking services with strong authentication mechanisms that help reduce unauthorized access and account compromise.

Secure Digital Transactions
Verify customer identities and protect sensitive financial operations through advanced transaction verification and signing capabilities.

Improve Customer Experience
Offer multiple authentication methods and devices, allowing banks to provide security options that suit different customer preferences and usage patterns.

Simplify Authentication Management
Centralize authentication across multiple banking channels and devices through a unified authentication server.

Protect Cryptographic Keys
Integrate with secure software modules or external HSMs to protect cryptographic keys used in authentication operations.

Support Digital Banking Transformation
Enable flexible deployment and integration with existing banking infrastructures to support evolving digital banking requirements.

Improve System Availability
Leverage scalable architecture, clustering and load balancing to support business continuity and reliable authentication services.

Common Use Cases

Internet Banking Authentication
Secure customer access to internet banking platforms through MFA, OTP and other strong authentication methods.

Mobile Banking Authentication
Protect mobile banking applications with mobile tokens, SMS OTP and push-based authentication.

eCommerce Transaction Security
Verify customer identities and secure online payment transactions through strong authentication and transaction verification.

Transaction Signing
Provide additional verification for sensitive financial transactions using EMV CAP, OCRA and Dynamic Signature technologies.

Phone Banking Authentication
Authenticate customers accessing banking services through telephone-based channels.

Multi-Channel Customer Authentication
Manage authentication across internet banking, mobile banking, eCommerce and other digital service channels through a centralized platform.

Strong Customer Authentication (SCA)
Support stronger customer verification requirements through multi-factor authentication and advanced transaction authentication methods.

Risk-Based Authentication Segmentation
Assign different authentication devices and methods based on customer risk profiles, usage patterns and preferences.

Thales Confirm Authentication Server

Thales Confirm Authentication Server (CAS) is part of Thales’ digital banking authentication portfolio, providing a centralized authentication engine for securing customer identities and transactions across multiple digital channels.

The solution supports various authentication technologies and devices, allowing financial institutions to implement different authentication strategies based on their security requirements and customer needs. By integrating with existing banking infrastructures and external HSMs, Confirm Authentication Server provides a flexible foundation for secure digital banking authentication.

Why Thales Confirm Authentication Server?

As digital banking services continue to expand, financial institutions face increasing challenges in protecting customer identities and securing transactions across multiple channels. Relying on a single authentication method may not be sufficient to address different customer needs, evolving security threats and increasingly complex digital banking environments.

Thales Confirm Authentication Server addresses these challenges by providing a centralized and flexible authentication platform that supports multiple authentication technologies, devices and transaction verification methods. Its open architecture enables integration with existing banking systems, while its scalable deployment options help financial institutions adapt their authentication infrastructure as business requirements evolve.

By combining strong customer authentication, secure cryptographic key protection and multi-channel support, Thales Confirm Authentication Server helps banks strengthen digital banking security while maintaining a convenient customer experience.

Ideal For

• Banks and financial institutions
• Digital banking providers
• Retail banking organizations
• eCommerce payment providers
• Payment service providers
• Financial technology companies
• Internet banking operators
• Mobile banking providers
• eBrokerage platforms
• Multi-issuer banking environments
• Organizations requiring strong customer authentication
• Financial institutions managing multiple digital authentication channels

Thales Confirm Authentication Server at a Glance