Diebold, a provider of integrated self-service delivery and security systems and services, has released ValiTech, a two-factor authentication technology that uses a secure USB device to identify and authorize technicians who service ATMs. ValiTech works in concert with Diebold security technologies designed to protect the entire ATM channel.
Reportedly, ValiTech is a solution that provides authorized Diebold service personnel with secure access to the system level of the ATM. This technology delivers an additional layer of protection for financial institutions through access control. It also provides a detailed audit trail. Moreover, it helps financial institutions comply with important Payment Card Industry Data Security Standards (PCI DSS).
According to the Diebold, prior to the introduction of ValiTech, its technicians had to secure a temporary password, provided by the financial institution, each time a service call required a technician to access the system level of the ATM. Diebold’s ValiTech links each authorized service technician to a USB hardware cryptographic device or token using a digital certificate from VeriSign.
Diebold has added that access is controlled through a PIN or pass phrase, set by and known only to the technician, which ties the technician to the digital certificate and the USB device. Through ValiTech, the ATM can identify the authorized Diebold associate who is accessing the system and grant restricted authorization to the unit’s system functions based on the technician’s role and status. ValiTech then creates an audit trail documenting each time a technician is granted access and records all menu activities executed during the service call.
Charles Ducey, senior vice president, global development and services, Diebold, said: “Deploying effective authentication for an entire ATM fleet can be time-consuming and costly. ValiTech, which can be expertly implemented, managed and maintained by our Premier Services’ technicians, offers our customers a higher level of security while relieving them from the additional workload and resources needed to create, track and reset system-level user names and passwords. At a time when sensitive cardholder data requires increasing protection, ValiTech can help financial institutions close the security gap between temporary passwords and ATM access.”
