Chip Authentication Program: Difference between revisions

Revision as of 13:17, 1 September 2008

Revision as of 19:43, 5 September 2008

Line 1:

[[Image:nationwide-CAP-reader.jpg|thumb|right|A CAP reader]]

The '''Chip Authentication Program''' (CAP) is a [[MasterCard]] and [[Visa (company)|Visa]] initiative and technical specification for using [[EMV]] banking [[smartcards]] for [[authentication|authenticating]] users and transactions in online and telephone banking. The CAP specification defines a handheld device ("CAP reader") with a smartcard slot, a decimal keypad, and a display capable of displaying at least 12 characters (e.g., [[starburst display]]). Banking customers who have been issued a CAP reader by their bank can insert their [[Chip and PIN]] ([[EMV]]) card into the CAP reader in order to participate in one of several supported [[authentication protocol]]s. CAP is a form of [[two-factor authentication]] as both a smartcard and a valid PIN must be present for a transaction to succeed. Banks hope that the system will reduce the risk of unsuspecting customers entering their details into fraudulent websites after reading ‘[[phishing]]’ emails.<ref>http://www.theregister.co.uk/2007/04/18/pinsentry/</ref>

==Operating principle==