The Avanpost 3.0 PC in TRUST bank

The Avanpost company, the Russian developer of the systems of identification and access control to information resources of the enterprise (IDM), and LETA company, announced in March, 2013 project completion in TRUST bank regarding ensuring two-factor authentication of users in systems processing data of payment cards.

The project was executed by LETA company, having applied as a technology platform of the created solution the software package (SP) "Avanpost 3.0". A system is implemented and functions in full.

The TRUST bank has one of the most large-scale regional networks: it is provided in 160 cities located in 65 regions of Russia, customer service is performed at 253 offices from Kaliningrad to Vladivostok. The coordinated work of large-scale geographically distributed structure depends, including, from smooth functioning of an information system and, in particular, on high-quality solving of tasks of cybersecurity.

During this project for TRUST bank procedures of two-factor authentication were developed and implemented. In the technical plan they rely on the modules PKI (infrastructure of control of hardware keys of authentication – tokens) and SSO (single authentication) of the Avanpost PC complex IDM system which, in turn, interacts with Microsoft CA certification center. Let's emphasize that, within the project, the Avanpost PC was integrated also with the automation system of personnel records of bank. Besides, the complex of the organizational and technical measures providing failsafe functioning of a system of two-factor authentication and management of certificates was performed.

"The implemented system controls important functions of Information security which reliability in no small measure defines that how effective will be work of other elements of the cybersecurity system, – the Chief information security officer of ""TRUST bank Said Al-Ulyafi commented on project implementation. – The scalability, functionality, reliability and a high integration scale of functions of the implemented system correspond to tasks of bank in information security field".