INTEGRATION OF BIOMETRICS TO BANCS CORE BANKING SYSTEM FOR A REPUTED BANK IN INDIA

This integration was done for an Indian private sector bank headquartered in Tamil Nadu. The bank preferred the role of a regional bank in Tamil Nadu.

OBJECTIVE OF THE BANK

To provide biometric based 2nd Factor Authentication for CBS

THE EXISTING SYSTEM USED BY THE BANK

• No. of users – 7,000+ concurrent users
• CBS – TCS Bancs
• The CBS was protected by Single Factor Authentication (Password)
• Problems with the conventional ‘User ID & Password’ based security systems are:
  • Password/Identity theft was possible and exchange of password within colleagues in an emergency
  • External hacking of the system was possible
  • Periodic password changes to ensure data security

THE BANK’S REQUIREMENT 

• Bank needed to ensure secure login with complete logs of the users
• Financial application is a critical application, so only limited people have access of the same
• As per-user cost of the application is high, Bank must share the common User-ID and Password with Employees
• Bank needs to maintain the complete log for audit and compliance

HOW PRECISION HELP SOLVE THE ISSUE?

Precision Biometric proposed InnaIT 2FA to be integrated with the financial application & to provide the required biometric based two factor authentications, where the financial application uses a single user ID for multiple InnaIT ID’s

InnaIT – 2FA: The solution is designed to integrate fingerprint with the existing application as an enhanced security layer. 2FA solution is a client server/browser-based environment 2FA consists of the below mentioned components:

1. Client- Driver: The client-side driver needs to be installed. It contains the fingerprint capturing & extraction.
2. InnaIT Server: InnaIT Server component contains the fingerprint matcher, DB & application configuration modules.
3. Hardware – Scanner will be connected to every PC/Thin client via USB port

InnaIT Framework has introduced 2FA Application which is platform agnostic, and it can be integrated with any of the Customer Applications. Precision has integrated Bank’s Financial Application with 2FA.

Bank has limited number of licenses of Financial Application where they need to assign this user ID to many employees. To mitigate this issue and save licensing costs, Precision has introduced the unique solution where multiple InnaIT users will be assigned to one single application user InnaIT will maintain the separate logs of each InnaIT users, where every user will be logged in using biometric.

In Financial Application, Banks wanted to use common user ID Login to save the user license cost, whereas at the same time InnaIT can distinguish these different users using the InnaIT logs.

HOW DID IT BENEFIT THE ESTABLISHMENT?

This integration by Precision helped the bank enhance the security with Biometric Authentication which preserves the confidentiality of sensitive data. It can also capture User Access Logs for Audit & Compliance.