iDATA Corporation

iDATA Releases WealthMgr, A Mobile Solution for Financial Advisors

Wed, 21 Dec 2011 10:53:10 -0500

The iDATA WealthMgr application for mobile devices is a break-through tool for financial advisors. An advisor’s entire book of business is organized into an intuitive, easy to use mobile application for iPhone, iPad, and Android phones and tablets.

More Info

iDATA Releases Finster, A Check-In App for Stocks!

Thu, 01 Sep 2011 17:40:43 -0400

iDATA recently released a beta version of Finster, a social check-in app for stocks. Finster is the first of its kind.

Finster is social, easily share your latest stock picks with all of your followers and your Facebook friends. Check-in as bullish, bearish, I bought, I sold on a specific stock, or share news you’ve heard.

Follow others that are experts with certain stocks. Quickly look at stocks that are trending and more.

Find it here in the app store.

Security Considerations for Mobile Financial Apps

Wed, 13 Jul 2011 11:35:00 -0400

Apparently, according to a recent survey, 54% of Bankers Call Creating Mobile Corporate Banking Services A High Priority.

Yet their primary concern is mobile device security. Asked about the biggest barriers to growth in mobile corporate banking, 77% cited fraud and security concerns.

Having built an iPhone/iPad app for a major wall street bank, here are a few steps you should consider.

Don’t store any sensitive information on the device. Actually we don’t store anything at all, other than the login username, and this is only if the app user chooses to save this for ease of future login. Citigroup reported a security flaw in it’s iPhone app in July 2010. The problem: they were storing sensitive information on the device. If you need to store sensitive information, encrypt it using the software encryption libraries included with iOS (RC4, AES128, AES256, etc).

Check for a jailbroken device at startup. When a device is jailbroken, you can gain full access (root access) to unlock all features of the said operating system, thereby removing limitations imposed by Apple. This means a hacker can get at the apps and the data on the device. They might even be able to decrypt your application binary and determine the logic, communication endpoints, and more.

Ensure that all external communication is secure. Use secure protocols when communicating with external bank systems (HTTPS, SSL, etc). We actually implemented an additional redirection layer on top of this.

App timeout and/or closure upon exit. In case a phone is left somewhere unlocked or let’s say without a password on the device, you want to make sure someone can’t just pickup the device and get to the app without providing credentials. You can employ a timeout on the app, requiring login after let’s say 5 minutes of inactivity.

Apple also has an option in it’s build settings called “Application does not run in background”. This is in the build plist file and if checked, when the home button is pressed the application will close completely, requiring a reload. The default setting is unselected, meaning that the app stays in memory unless the device is rebooted. In this case, you had better employ some kind of timeout period requiring credentials after timeout.

Hire an external vendor to perform a penetration test. We hired a 3rd party security specialist firm to do this. They tested all communication endpoint urls as well as the protocol and the actual device. This is a relatively new area, so find a vendor that has experience with mobile device security.

Courtesy: http://toddfearn.com

iDATA Creates GlobalPrime Mobile for Deutsche Bank

Tue, 04 Jan 2011 00:00:00 -0500

Today, Deutsche Bank launched GlobalPrime Mobile, an iPad and iPhone application for their Global Prime Finance clients including hedge funds, private equity firms and large institutional investors.

The iDATA team was proud to take the lead in creating and delivering the first iOS application released by a major prime brokerage firm.

A full description of the app can be found in iTunes store for both the iPhone & iPad versions.