HACKER Q&A
📣 neom

Person to person phone authentication system?


I'm looking for a system similar to one that banks use internally for person-to-person phone verification. If a personal banker at a branch calls HQ or another branch, they both pull up a webpage, they both have some set of numbers they exchange and it provides another level of verification they work for the bank.

I have to implement some type of system like this, I don't know what it's even called, I don't know if someone sells this solution, but most importantly: Does anyone know of any OSS solutions to this?

Thanks!! :)


  👤 ahazred8ta Accepted Answer ✓
A recent example of why banks need good authentication: an HK bank employee transferred US$25M based on a videoconference with what looked like his bosses.

https://lite.cnn.com/2024/02/04/asia/deepfake-cfo-scam-hong-...


👤 ahazred8ta
This is related to 'mutual authentication' https://en.wikipedia.org/wiki/Mutual_authentication as far as eliminating a man-in-the-middle and confirming identities, but you want to combine this with single-sign-on within an organization. Do you have an internal private chat in your organization? Internal email accounts?