CASE STUDY APPLICATION 02 Product: vinACCESS速 Sector: Banking Launch date: 2011 Number of users: 275
CLIENT CHARACTERISTICS Spanish banking institution with 2,900 employees and 370 branches
THE
SOLUTION
A versatile system for strong authentication STARTING POINT
NEED
Weak authentication (login and password) is used for access to internal web applications from external locations by mobile employees and providers. This provides no safeguards concerning user authenticity and could allow access by intruders.
Secure, controlled access from external locations by means of an OTP to different internal platforms connected though an SSL VPN for different internal user profiles in the active directory and database providers.
SOLUTION CHARACTERISTICS
AUTHENTICATION SYSTEMS USED
Implementation of the vinACCESS® multiplatform OTP solution in the JUNIPER SSL VPN. vinACCESS® is a strong and flexible authentication system where proprietary technology can be shared though strong authentication systems such as code cards, OTP via SMS, digital National ID Cards and digital certificates.
From among the ten authentication methods provided by vinACCESS®, the banking institution uses the following ones:
IMPLEMENTATION SPECIFICS The vinACCESS® system has been adapted to point not only to the active directory but also to the provider database in order to authenticate both internal users and providers.
Barcelona Bilbao Madrid Valencia
CLIENT SATISFACTION In particular, the organisation values the capacity and convenience that vinACCESS® offers by combining different authentication methods, as well as its intuitive and user-friendly interface and the usage audit provided by the system. The Help Desk option is another element which the institution particularly appreciates. When unable to use the authentication system provided for a user (i.e. due to forgetting the code card or a failure of wireless coverage), the administrator is able to generate a unique OTP to grant the user temporary access.
HEADQUARTERS
Av. Carrilet, 3. Edificio D, 4º B 08902 L’Hospitalet de Llobregat (Barcelona) T +34 93 432 90 98 · F +34 93 432 93 44
+34 902 362 436 info@vintegris.com vintegris.com
DECEMBER 2014
Access is granted by means of two-step verification, thus creating different OTP options based on user profile. In this way, the system provides users with the authentication method best suited to their needs, the risk level of their data or the company’s budget.
• Code cards • E-mail • SMS • Software token for smartphones