Two factor strong authentication Complex solution for two factor strong authentication
Company brief BMS Consulting is established as IT system integrator since 1997 Leading positons in Eastern Europe country Product portfolio IT Security Clouds, Migration and IT Support Business software development Internal processes are certified according to the quility requirements of ISO 9001 international standard 60+ technology partners around the world Our honorable clients: 80+ certified engeneers and consultants 500+ projects in government, industry, banking and telecom sectors
200+ Employees 60+ Vendors InfoPulse A part of thepartner Nordic IT group EVRY
Two factor strong authentication Brif description Two-factor authentication is used to increase security by requiring you to provide strong authentication something you know (a password, PIN) and something you have (laptop, mobile phone, token). The use of two distinct authentication factors helps eliminate an organization s security concerns around granting access based on a single knowledge-based factor Main features Using data encryption together with pre-boot authentication is in fact locking your data Using encryption key is the key to your computer Flexible authentication platform which expands with you and your requirements Configurable apply the appropriate authentication method to the user, group or application Developed/supported by authentication experts Who will need it If you are using the services that provides important data for you Financial institutions for upgrade their systems of authenticate clients to the level of strong authentication
What is Strong Authentication? 1. What you know 2. What you have 3. What you are Strong authentication means using two or more authentication methods Example 1 Example 2
Where to Save Your Key Placing your key on the PC/Laptop is not safe! It is exposed to malicious software and insider attacks The key must be kept outside of the computer on an external device The question is - On which device?
Token devices in the Market Types of token devices Each type of token devices used by the customer's needs
Token devices All token devices allow secure key storage, and are also: Portable Easy to use Easy to deploy Enable easy and secure implementation of certificate-based (PKI) solutions Automatic generation of PKI keys on-board the token Secure and portable storage of PKI keys and certificates Enable a variety of security applications in one device - secure Web access, password management, laptop protection, secure e-mails, and more
How Does it Work using token device? (OS Authentication) For a user to reach the data he/she must: 1. Insert the Token device into the USB port 2. Enter the Token password As a result: Only authorized users can decrypt sensitive data The private key stored on-board the token Key does not reside in the vulnerable PC Environment
How Does it Work using token device? (Pre Boot Authentication) For a user to start the boot procedure he/she must: 1. Insert the Token device into the USB port 2. Enter the Token password As a result: Only authorized users can boot the PC With encryption impossible to target hard disk directly
General Architecture Organizational Policies Auditing Reporting Devices & User User Repository Token Repository Policy Management Certification Center Network Logon OTP Authentication More Security Applications
Two factor strong authentication Project Results Benefits Increased security - add an extra layer of authentication to application access, VPN access, or during a self-service password reset Reduce Risk - prevent attacks by leveraging credentials which expire after one use Establish mutual trust between the your organization, your customers and partners by implementing end-to-end data and network security Robust strong authentication process requires strong authentication Significantly decrease password-related helpdesk costs Flexibility - multiple OTP delivery methods available Gives you the ability to provide a wide variety of security services all with the same token: Laptop security Credential management File encryption And more Pricing Up to 100 tokens 1 000 * From 101 to 500 tokens 5 000 * From 501 to 1 000 tokens 10 000 * *Without licenses and taxes
Building Information Security Management System to the State Savings Bank of Ukraine About customer The State Savings Bank of Ukraine is one of the largest financial institutions of Ukraine. It has over 4500 branches throughout the country which carry out various functions, such as the disbursement of pensions, social aid, processing of utility payments and other banking transactions. Oschadbank is the only Ukrainian bank whose clients demand deposits are fully guaranteed by state law Problem solved Our customer is used one factor authentication by requirements of the regulator National Bank of Ukraine, the customer must use strong authentication (two-factor authentication) Our solution BMS Consulting Engineers have audited the current needs of the customer and perform the following works: Planning architecture of system of the model twofactor authentication user Selection and implementation solution of twofactor authentication «SafeNet» Training of employees of the Bank Developing instructions for administrators and users
Construction of the integrated systems of information protection to State Agency of Land Resources of Ukraine About customer The State Agency of Land Resources of Ukraine is the central body of executive power with activity directed and coordinated by the Cabinet of Ministers of Ukraine by Vice Prime Minister of Ukraine - Minister of Regional Development, Construction and Housing and implements state policy survey and mapping activities and land relations, as well as in the State Land cadaster. Problem solved Our customer is used one factor authentication but by requirements of the regulator in the construction of an integrated system of information protection, the customer must use strong authentication (two-factor authentication) Our solution BMS Consulting Engineers have audited the current needs of the customer and perform the following works: Planning architecture of system of the model twofactor authentication user Selection and implementation solution of twofactor authentication «SafeNet» Training of employees of the Bank Developing instructions for administrators and users
Our competences and experience Our team "BMS Consulting" specializes in the development and implementation of projects construction of IT infrastructure monitoring, security and management of your IT environment, implementation of the decisions to implement and expand the application systems, focusing its activities on the corporate market segment BMS strengths We deliver high quality and always in time Certified specialists English level Upper Intermediate Real experience in real projects varying complexity International projects experience Developed and ready to use various automation and optimization tools Ready to long term collaboration
Thank you for attention! 16