Gazprom Neft Scientific Technical Center automated process of work with admissions based on Blockhost-ASZP

Works on automation of process of work with admissions are carried out to Gazprom Neft Scientific Technical Center LLC. As technical solution the hardware and software system based on Blockhost-ASZP Open Source of production of Gazinformservice LLC company was selected. The complex of the implemented actions for automation of access control using Blockhost-ASZP allowed to transfer document flow on work with admissions to an electronic form, having ensured safety of personal data processing.

Requirements imposed to the automation system:

• access for a large number of users should be provided via the web interface using the browser;
• ease of use and system maintenance by information security administrators;
• ensuring continuous round-the-clock operation of a complex;
• an opportunity to set different rules of the order and execution of admissions;
• ensuring fixing of all events which are taking place during the work with admissions;
• existence of a system of electronic reports on visitors;
• ensuring pass-through authentication on the basis of accounts in microsoft active directory.
• the system which is meeting requirements of the Federal law "About Personal Data" and having the FSTEC certificate of Russia on information security was required.

Solution

As the means providing complete implementation of the imposed requirements, the Customer selected the Blockhost-ASZP software and hardware complex of production of Gazinformservice LLC company. This complex is intended for automation of process of the order, approval and execution of admissions of different types, and if necessary and access control of visitors and motor transport through the check point. Besides, the complex provides operational receiving different types of reports on visitors and admissions.

The Blockhost-ASZP system is constructed on the basis of web technologies and architecture "Client-server" that allows to use it on the existing corporate information networks, and if necessary – to organize work via channels of the Internet.

As a workplace of the user of a system normal office computer with the installed web browser can be used.

The Blockhost-ASZP system has the high scalability allowing to connect easily new objects and new users by simple change of settings.

The Blockhost-ASZP software and hardware complex implements requirements for information security:

• provides personal data protection of visitors (a system has the FSTEC certificate of Russia);
• access for the user to a system is provided through input of a user name and the password, or through presentation of the certificate x. 509, or by means of pass-through authentication (MS AD);
• between the server and client jobs secure channels of communication are used;
• purpose of the rights to the user in a system is performed on the basis of roles.