Information about MAC tokens

In order to increase the security level of work in the Client-Bank system, CB NMB LLC offers an additional protection device - a MAC token, which is by far the most effective means of protection when making payments.

A MAC token is a compact device equipped with a display and a numeric keypad. The main purpose of the device is to calculate an enhanced unqualified electronic signature under the key details of the payment document.

The procedure for working with a MAC token looks like this:

The client enters the key fields of the document from the keyboard of the MAC token (for example, for a payment order - the amount, account number and BIC of the recipient's bank).The MAC token calculates the electronic signature and displays it on the display.The client sends an electronic signature to the server via the DBO system.The application on the server calculates the electronic signature (the device's secret key stored on the server is used). The calculated electronic signature is compared with the one received from the client. If they coincide, the authorship and integrity of the electronic document are considered correct. Otherwise, the electronic document is rejected.

Key advantages

A MAC token is an autonomous device that is not connected to a computer. No malicious program that has penetrated the user's computer can interfere with the operation of the MAC token.Protection against document substitution. The latest generation of malware is able to display a legitimate document to the client in the DBO system, and send a fraudulent one to the server instead. In this case, the MAC token will calculate the electronic signature under the client's document, and the server - under the attacker's document. Electronic signatures will not match, and the document will be rejected.Efficiency of use. The MAC token calculates the electronic signature immediately after the client enters the payment details. There are no problems inherent in SMS confirmation of payments: delays in receipt and non-guaranteed delivery of the confirmation code.The "Trusted Recipients" functionality. The "Trusted Recipients" functionality allows a corporate client to create a list of counterparties in whose favor payments are made regularly. When sending a payment order to the address of the specified trusted recipient, there will be no additional payment confirmation required.

For more information on connecting to the "MAC-token" service, you need to contact KB "NMB" LLC.

Instructions for using the MAC token are located in the Documentation section