Defines the minimum security requirements for a secure and protected exchange of information between a user and a financial service provider. The protection offered will provide integrity for a message during transmission; provide secrecy of the message during transmission; identify the rightful user and financial service provider prior to and during data transmission; and prevent repudiation of a message or transaction by either party.