TS ISO 9807

TS ISO 9807 is a withdrawn standard addressing message authentication in retail banking and related financial services. It specifies procedures used to protect the integrity of retail banking messages and to verify that a message originated from an authorized source; it also describes how the algorithms used for authenticating retail banking messages are approved. In practical terms, this topic is central to sensitive financial communication such as payments and account-related instructions, where it is important to know that a message has not been altered and comes from the expected sender.

The role of authentication in financial messaging

In general technical terms, message authentication helps detect corruption, unauthorized modification, or fraudulent creation of data during transmission. In banking, this objective is usually supported by more than one mechanism: integrity protection, source authentication, and careful selection of authentication algorithms. The standard’s focus is on the procedures for protecting retail banking messages and confirming their source.

Algorithm approval and scope boundaries

The standard also refers to procedures for approving the algorithms used in authentication. In practice, that means the methods employed must be assessed against defined suitability and security expectations, although this listing does not specify which exact algorithms are required or any numerical thresholds. The scope is focused on retail banking messages, so it should not be assumed to automatically cover corporate banking or all other forms of financial messaging.