Rely on InfoCert PSD2 solution suite to be complaint with the new e-payment regulation
Opening banking services to Third-Party Providers (TPPs), at the heart of the Second Payment Services Directive (PSD2), significantly changes traditional business models in the Financial Sector. PSD2 aims to inspire innovation and make banking transactions in the EU easier, more cost effective and more secure.
However, this new banking paradigm also puts customers’ banking information in the hands of more parties, including new FinTech start-ups. It also gives open APIs access to banking data, offering new opportunities for attackers to attack APIs, FinTech companies and users.
eIDAS Certificates: The trusted enabler for PSD2
Operating under the e-IDAS Regulation as a Qualified Trust Service Provider (QTSP), we can create significant value for all actors engaged in the Open Banking Ecosystem.
The European Banking Authority Regulatory Technical Standards created the perfect bridge between the eIDAS Regulation and the PSD2 Directive, establishing that TPP identification must rely on a qualified certificate as defined in EU Regulation 910/2014 (eIDAS).
These qualified certificates are:
QUALIFIED WEBSITE AUTHENTICATION CERTIFICATE (QWAC)
A QWAC can open a secure channel between the Bank and the TPP, allowing the TPP to identify itself to the Bank and create a trusted channel.
Identity Validation Secure Transactions
QUALIFIED ELECTRONIC SEAL CERTIFICATE (QSEALC)
A QSEAL certificate guarantees the authenticity and integrity of transmitted data, providing legal proof of the transaction that can be used as evidence.
Data Authenticity Integrity of Legal Evidence
The use of both certificates is strongly recommended in order to create a fully trusted PSD2 transaction (every TPP is required by regulations to use at least one).
InfoCert’s PSD2 Service Suite
As the largest QTSP in Europe, we have worked actively with European standardization bodies and with many Open Banking alliances to guarantee the trust and the interoperability of this new kind of certificate.
Today, we are pleased to offer the market a fully operational PSD2 Service Suite that provides both Test and Production Qualified Certificates in just a few days.
Testing and production of
testing & production