Case study: vinACCESS in banking industry

CASE STUDY APPLICATION 01 Product: vinACCESS速 Sector: Banking Launch date: 2010 Number of users: 280

CLIENT CHARACTERISTICS Spanish banking group with 6,500 employees and a network of more than 1,000 offices

THE

SOLUTION

A versatile system for strong authentication STARTING POINT

NEED

Weak authentication (login and password) is used for access to internal web applications from external locations by mobile managers and employees. This provides no safeguards concerning user authenticity and could allow access by intruders.

Secure, controlled access from external locations to different internal platforms with a two-step verification, without using an active directory password and with subsequent SSO to internal applications, regulating access by user profile.

In addition, users must enter their login and password for each application, which is arguably inconvenient during the daily work routine.

SOLUTION CHARACTERISTICS

AUTHENTICATION SYSTEMS USED

Implementation of the vinACCESS® multiplatform OTP solution, integrated with WebSEAL and Citrix Access Gateway. The solution involves SSO to internal applications (ISAM, Citrix XenApp, Citrix XenDesktop, Lotus Notes and different web portals, among others). Remote access by means of a two-step verification and SSO to internal applications without providing the active directory password +H10.

From among the ten authentication methods provided by vinACCESS®, the banking institution uses the following ones:

Access is granted by means of two-step verification, thus creating different OTP options based on user profile.

In this way, the system provides users with the authentication method best suited to their needs, the risk level of their data or the company’s budget.

IMPLEMENTATION SPECIFICS Development of an architecture with single sign-on to internal applications, with permissions based on the applications the user is authorised to use.

Barcelona Bilbao Madrid Valencia

CLIENT SATISFACTION In particular, the organisation values: 1. The capacity and convenience that vinACCESS® offers by combining different authentication methods, as well as its intuitive and user-friendly interface and the usage audit provided by the system.

2. The Help Desk option: when unable to use the authentication system provided for a user (i.e. due to forgetting the code card or a failure of wireless coverage), the administrator is able to generate a unique OTP to grant the user temporary access.

3. With its agility and flexibility, vinACCESS® can be adapted to the different technical and management needs that arise in the organisation due to continuously evolving market technology and the organisational evolution of the financial sector.

HEADQUARTERS

Av. Carrilet, 3. Edificio D, 4º B 08902 L’Hospitalet de Llobregat (Barcelona) T +34 93 432 90 98 · F +34 93 432 93 44

+34 902 362 436 info@vintegris.com vintegris.com

DECEMBER 2014

vinACCESS® is a strong and flexible authentication system where proprietary technology can be shared though strong authentication systems such as code cards, OTP via SMS, digital National ID Cards and digital certificates.

• Code cards • E-mail • SMS