topic Re: USSD App Authentication in Member Support

Unstructured Supplementary Service Data Application Authentication

bjonah — Thu, 04 Oct 2018 14:23:41 GMT

In Africa financial inclusion is the big thing and a lot of mobile application are being developed to cater for the unbanked in remote areas. Most of these users do not have android phones with biometric capabilities and end up using USSD apps for financial transactions whether from the MNOs, banks or fintechs. The danger is USSD is susceptible to a number of attacks. Apart from the user's PIN, how else can USSD apps be authenticated?

Re: USSD App Authentication

CraginS — Thu, 04 Oct 2018 14:15:13 GMT

@bjonah What is USSD? Please provide the full name for that acronym so we have more context for your question.

Thanks!

Re: USSD App Authentication

bjonah — Thu, 04 Oct 2018 14:21:19 GMT

Unstructured Supplementary Service Data, sometimes referred to as "Quick Codes" or "Feature codes", is a communications protocol used by GSM cellular telephones to communicate with the mobile network operator's computers.

Re: USSD App Authentication

CraginS — Thu, 04 Oct 2018 15:51:08 GMT

@bjonah wrote:
Unstructured Supplementary Service Data, sometimes referred to as "Quick Codes" or "Feature codes", is a communications protocol used by GSM cellular telephones to communicate with the mobile network operator's computers.

Perfect!. Thank you. I have never delved into GSM details. In fact I don't even carry a GSM phone; Verizon (my carrier) is the big CDMA / non-GSM holdout in the USA. Your quick explanation helps tremendously, especially in further educating me.

Best regards,