ENPF of the Republic of Kazakhstan completed the project on ensuring personal data protection of citizens

On October 30, 2018 the Aladdin R.D. company and NILE Gamma Tekhnologii LLP announced completion of works on providing a comprehensive protection of personal data of citizens in JSC Uniform Accumulation Pension Fund of the Republic of Kazakhstan (ENPF). On project deliverables two-factor authentication of employees, centralized operation with means of authentication and digital certificates and also protection against information leaks from DBMS were provided.

For October, 2018 in ENPF means more than 10 million investors, according to fund more than a half of the population of the country are accumulated. For this reason ensuring personal data protection is one of the main tasks of IT and cybersecurity services of fund. For this purpose in 2015 the project on increase in level of security of information resources of fund by implementation of technologies of two-factor authentication and the specialized system of information loss prevention from DBMS was begun.

As means of authentication the republics modified according to the legislation Kazakhstan USB- the tokens Russian of Aladdin R.D. producer which received JaCarta the name Tumar were selected. In them are applied Kazakhstan cryptographic algorithms, implemented by specialists of NILE Gamma Tekhnologii LLP. For data protection, processed in DBMS, a system"Crypto DB", intended for prevention information leaks from DBMS was used Oracle Microsoft SQL Server, Tibero or PostgreSQL. Within the project this system was specially localized and certified for full compliance with requirements of the legislation of the Republic of Kazakhstan. certification center Development IOK CERTEX of production of NILE Gamma Tekhnologii LLP was selected from quality.

After end of the first stage of works the staff of ENPF began to provide access for users to information resources of fund only using JaCarta Tumar USB tokens. At the same time information in DBMS began to be stored and be processed in encrypted form, and access to it can be got only when using means of authentication. It allowed to provide secure access in the ENPF systems and protection against possible personal data leakages of citizens, including because of the database administrator.

At the second stage of the project in ENPF the management system for the park of USB tokens of JaCarta Management System (JMS), the most suitable for this purpose on the functional characteristics was unrolled. At the expense of opportunities for automatic accounting and management of tokens, user profiles and their digital certificates it was succeeded to reduce several times time demanded from IT and cybersecurity departments for maintenance of infrastructure of authentication in a relevant type. For example, due to integration of JMS with the IOK CERTEX certification center implemented by specialists of NILE Gamma Tekhnologii LLP using open API JMS.

"The management system of JaCarta Management System will help the customer to automate the most labor-intensive transactions with key carriers thanks to full automation of processes of issue, replacement, rerelease and a withdrawal of key carriers and certificates and also will allow to provide the high level of security of information system ENPF of the Republic of Kazakhstan and uninterrupted operation in work of end users". Nikolay Kovorotny, leading specialist of NILE Gamma tekhnologii LLP