Arcot RiskFort Risk-based Authentication System - Overview

The Identity Fraud Challenge
The incidence of online identity fraud continues to grow. Criminals have expanded their reach far beyond traditional targets of consumer banking and credit cards, looking to harvest valuable data from any online source. The challenge consumer and enterprise portals face is how to detect and block fraudulent activity while it is occurring, before losses can occur, without affecting legitimate users.

The RiskFort Solution
Arcot RiskFort is your first line of defense against identity fraud. It blocks fraud in real-time, without any interaction from your users. It assesses the fraud potential of every online transaction by examining a range of data collected automatically. It calculates a Risk Score and uses it along with your business rules to approve or decline the transaction, ask for additional authentication, or alert a customer service representative. RiskFort works to reduce fraud in both online portal and online shopping applications.

RiskFort Fraud Prevention Process

Invisible to legitimate users
Affects only those users whose behavior does not match their personal profile, historical data, and your policies. Most of your users will never know it is there.

Protection for multiple applications
Integrates with any Internet-facing application via an API and enables you to add real-time fraud detection quickly and easily to existing business process.

Blocks fraud in real-time
Blocks fraudulent transactions as they occur by identifying unusual activity before suffering any losses rather than trying to investigate afterwards.

Measures risk in every transaction
Examines a wide range of data it collects automatically about each login or transaction, and uses that data to calculate a Risk Score. You have complete flexibility to determine the response to that score based on your policies and risk tolerance.

Multi-component fraud detection
Combines three components for unmatched fraud detection capabilities:

• Customizable policy store
• Optional fraud model
• Callouts to other internal or external tools

Matches rules to your environment
Customizable rules engine enables you to configure RiskFort to match your business practices and risk tolerance, rather than forcing you to change your operations to fit your security tool.

Optional personal assurance message and scrambled pin pad
Provides options that allow you to add site authentication to help your users identify your site with the optional Personal Assurance Message. The optional Scrambled PIN Pad changes the pattern of numbers each time you users log in, to defeat key- and mouse-click loggers.