cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Newcomer I

Unstructured Supplementary Service Data Application Authentication

In Africa financial inclusion is the big thing and a lot of mobile application are being developed to cater for the unbanked in remote areas. Most of these users do not have android phones with biometric capabilities and end up using USSD apps for financial transactions whether from the MNOs, banks or fintechs. The danger is USSD is susceptible to a number of attacks. Apart from the user's PIN, how else can USSD apps be authenticated?
3 Replies
Highlighted
Community Champion

Re: USSD App Authentication

@bjonah What is USSD? Please provide the full name for that acronym so we have more context for your question. 

Thanks!

 

 

Dr. D. Cragin Shelton, CISSP
Dr.Cragin@iCloud.com
https://CraginS.blogspot.com/
My Community Profile
My LinkedIn Profile
href="Not Passing a Cert Exam is Not the Same as Failing" target="new";;https://cragins.blogspot.com/2018/08/pass-rates-for-professional-exams.html
Highlighted
Newcomer I

Re: USSD App Authentication

Unstructured Supplementary Service Data, sometimes referred to as "Quick Codes" or "Feature codes", is a communications protocol used by GSM cellular telephones to communicate with the mobile network operator's computers.
Highlighted
Community Champion

Re: USSD App Authentication


@bjonah wrote:
Unstructured Supplementary Service Data, sometimes referred to as "Quick Codes" or "Feature codes", is a communications protocol used by GSM cellular telephones to communicate with the mobile network operator's computers.

Perfect!. Thank you. I have never delved into GSM details. In fact I don't even carry a GSM phone; Verizon (my carrier) is the big CDMA / non-GSM holdout in the USA. Your quick explanation helps tremendously, especially in further educating me.

 

Best regards,

 

 

 

 

Dr. D. Cragin Shelton, CISSP
Dr.Cragin@iCloud.com
https://CraginS.blogspot.com/
My Community Profile
My LinkedIn Profile
href="Not Passing a Cert Exam is Not the Same as Failing" target="new";;https://cragins.blogspot.com/2018/08/pass-rates-for-professional-exams.html