Authentication Methods

Decoupled Model D: PSU with a TPP Account

This version is:

This is the latest version Published 5 months ago 28 Jun 2024

A decoupled authentication flow in which the TPP (AISP/PISP/CBPII) provides the ASPSP a stored PSU identifier from a previous PSU transaction. This is used by the ASPSP to enable the PSU to authenticate using thier ASPSP app on a separate device.

Other pages in this section

TPP (AISP/PISP/CBPII) passes the PSU’s stored unique identifier to the ASPSP to identify the PSU

User Journey

Main content image

A decoupled authentication flow where the TPP (AISP/PISP/CBPII) provides the ASPSP a stored PSU identifier, generated by the ASPSP from a previous PSU transaction. This is used by the ASPSP to notify the PSU such that the PSU can authenticate using the ASPSP app on a separate device.

This model is ideally suited where the services offered by the TPP involves POS, telephony, or where PSU interaction with the TPP is not possible through a graphical interface (IoT devices), or even when the PSU may not be present within the TPP channel.

Wireframes

We have used one variation of the PIS journey (Single Domestic Payments – a/c selection @ PISP) as an example, where the ASPSP receives all the details of the payment order via the TPP device.

The voice commands are an example of how the PSU interacts with the TPP.

This flow applies to other variations of PIS journeys covered in detail under section Payment Initiation Services (PIS), AISP journeys covered under section Account Information Services (AIS) and CBPII journeys covered under section Card Based Payment Instrument Issuers (CBPIIs).

This content is best viewed on a desktop browser.

1

CX Considerations 1
PISP IoT device through voice enabled commands asks if they would like to checkout for the requested payment using their stored ASPSP account. After the PSU confirms, the PISP uses the stored PSU identity with the ASPSP to request for payment.

2

CEG Checklist Requirements 2
The ASPSP must notify the PSU through the ASPSP app for authentication purposes only without introducing any additional screens. The notification must clearly mention the payment request with the amount and the payee.

3

CEG Checklist Requirements 3
The ASPSP app based authentication must have no more than the number of steps that the PSU would experience when directly accessing the ASPSP mobile app (biometric, passcode, credentials).

4

CX Considerations 4
The ASPSP must make the PSU aware that they have been logged off from the ASPSP app and notify them to check back on the originating PISP app.

5

CEG Checklist Requirements 5
The PISP must confirm successful confirmation of payment initiation.

CEG Checklist Requirements & CX Considerations
CEG Checklist Reference

1

PISP IoT device through voice enabled commands asks if they would like to checkout for the requested payment using their stored ASPSP account. After the PSU confirms, the PISP uses the stored PSU identity with the ASPSP to request for payment.

2

The ASPSP must notify the PSU through the ASPSP app for authentication purposes only without introducing any additional screens. The notification must clearly mention the payment request with the amount and the payee.

1 28

3

The ASPSP app based authentication must have no more than the number of steps that the PSU would experience when directly accessing the ASPSP mobile app (biometric, passcode, credentials). 

1

4

The ASPSP must make the PSU aware that they have been logged off from the ASPSP app and notify them to check back on the originating PISP app.

5

The PISP must confirm successful confirmation of payment initiation.

26

What the research says

 

Click for customer research