Developers: | Step Up |
Last Release Date: | 2014/07/28 |
Branches: | Financial services, investments and audit |
Technology: | Cybersecurity - Fraud detection system (fraud), Systems of remote banking |
Step Up company, the Russian vendor of the Remote Banking systems of the class Hi-End, provided in November, 2011 new development — RBS for service of corporate clients on the Microsoft .Net platform. In a system Telebank.Net\Enterprise the set of the innovative technologies allowing to reach effect of synergy in service of legal entities and physical persons on different channels of access, says Step Up is applied.
So, Personal account allows corporate client to register independently the users in a system, to define for them necessary access rights (powers), to prepare all necessary documents for connection to services RBS for one visit to sales office of bank.
Strict two-factor authentication of the user can be made on the basis of the smart cards emitted by bank. Besides, it is also possible to use cards to carrying out most collection (at the same time the client places money in the ATM with the device of acceptance of cash, without visiting point of sale of bank).
In turn, the "true thin client" technology used when implementing subsystems of Front and Back Office allows to provide to the user a user-friendly modern interface with full use of navigation aids of the browser and also to reach the required security level, including to organize protection against insiders in Back Office (sales point).
Complex approach to security provides a possibility of use of "the entrusted environment" on the client's computer in Telebank.Net\Enterprise. On the party of bank Authentication Center where all objects of security of a system and also the Fraud Monitoring and Alerting complexes for operational tracking of suspicious transactions are taken out is applied.
The Microsoft dotNet platform, along with industrial DBMS Microsoft SQL Server 2008 R2, allows to make scaling of a system without any limit. Within a system implementation project by specialists of Step Up it is executed load (a stress-) testing and also development of strategy of scaling of a hardware platform taking into account the predicted quantitative indices of growth of the customer base determined by business divisions of bank.
According to the statement of Step Up, above-mentioned features of a system have no direct analogs in the Russian market that allows bank to use Telebank.Net\Enterprise as competitive advantage at service of legal entities, attracting with the innovation service of new clients. Now a system is in the mode of pilot operation in one of the largest banks of the Russian Federation.
2014: Integration with JaCarta
On July 28, 2014 the companies Aladdin R.D. also Step Up announced completion of works on integration of a line of smart cards, USB tokens JaCarta and the solution "Antifraud terminal" with the system of service of corporate clients Telebank\enterprise to the company Step Up.
Since July 28, 2014 the legal entities using the Telebank\enterprise system can apply the line of smart cards and USB tokens of JaCarta implementing formation of the strengthened qualified electronic signature (ES), providing strict two - three-factor authentication and safe storage of keys and digital certificates, to protection of transactions.
Integration about "Antifraud terminal"
For safe user authentication and work with the EDS from not entrusted environment with the Telebank\enterprise system of the company integrated in it the innovative solution "Antifraud terminal" - for protection against the newest attacks of cybercriminals, including during the work in the systems of Internet banking using smart cards.
As a part of the complete solution:
- "Antifraud terminal", the representing reader protected smart cards with the built-in monitor of visual control of the signed documents and the number pad for safe input of the PIN code,
- smart card of JaCarta of GOST.
Key advantage "Antifraud terminal", providing effective protection against the attacks of substitution and imposing to the server of the counterfeit, signed on keys of the legal user documents, is the innovative technology of SWYX (Sign What You eXecuted).
The device keeps the protected magazine of all transactions executed using a smart card which is signed by own EDS of the terminal using the cryptographic chip which is built in it. At the same time the decision on adoption of the signed document on execution is made on server side on the basis of successful authentication of the terminal and an analysis result of the transaction journal at which the data confirmed with the user on the device screen correspond to information which is contained in the signed document.
"We are glad that the Step Up company became one of the first which made the decision on integration of the RBS system about "Antifraud terminal". We hope that shortly the number of such projects will increase thanks to what banking organizations will be able not only to protect transactions of the clients from cyber attacks, but also to provide evidential base at investigation of incidents, and end users will receive safe and simple service in use", - Yakov Stavrinov, the account manager of Aladdin R.D. company noted.