This implementation was done for a leading commercial bank, headquartered in Chennai, India, which has completed 100 years of operation.
OBJECTIVE OF THE ESTABLISHMENT
- Secure CBS Login by enabling Biometric based 2nd factor authentication
- Secure Windows Login to enhance security, using Biometric Authentication for Windows Active Directory
THE EXISTING SYSTEM USED BY THE BANK
- No. of users: 7,000+ concurrent users
- CBS – Flexcube
- CBS uses simple password for login into the application, where user shares the password for easy access, which in turn leads to human error and improper audit trails
- Windows Active Directory was protected by Single Factor Authentication (Password)
- Problems with the conventional ‘User ID & Password’ based security systems are:
- Password/Identity theft was possible and exchange of password within colleagues was common
- Password policy was required to ensure consistency and uniformity
- Periodic password changes required to ensure data security
THE BANK’S REQUIREMENT
- Enable 2nd factor fingerprint biometric in CBS
- Windows Active Directory Synchronization
- Password Policy Maintenance
- Automatic, Periodic Password change
- Biometric Integration with Windows Active Directory
- Offline Biometric Verification for Windows Login
HOW PRECISION HELPED SOLVE THE ISSUE?
Precision Biometric proposed InnaIT – 2FA and BioWinAD to be integrated with the existing CBS and Windows Active Directory to provide the required Biometric based authentication
InnaIT – 2FA: The solution is designed to integrate Fingerprint Biometric with the existing application as an enhanced security layer. 2FA solution is a client server / browser-based environment.
2FA consists of the below mentioned three components:
- Client Driver – The client-side driver needs to be installed. It contains the fingerprint capturing and extraction process.
- InnaIT Server – InnaIT Server Component contains the fingerprint matcher, DB and Application Configuration Modules.
- Hardware – Scanner will be connected to every PC/ Thin client via USB port
InnaIT – BioWinAD: The solution is designed to integrate the Biometric solution in a client server / Windows Active Directory based environment. BioWinAD solution consists of the below mentioned four components:
- AD Client – AD client manages Client/Server communication and configuration of the server
- Device Driver – The client-side driver contains the fingerprint capturing and extraction process
- InnaIT Server – InnaIT Server contains Biometric Engine, Database, Configuration and Synchronization Modules
- Password Manager – Password Manager manages the password of Active Directory users and changes the password automatically as per the Active Directory Password Policy and converts the AD password into random string for enhancing security.
HOW DID IT BENEFIT THE ORGANISATION?
This integration by Precision helped the bank enhance security with Biometric Authentication, which preserves the confidentiality of sensitive data. It can also capture User Access Logs for Audit & Compliance.
