Overview
Some of the issues facing organisations wishing to implement an in-house multi-factor authentication solution have been:
- Cost of acquisition, deployment and operation
- Non-income producing investment
- 'Device necklace' effect for users.
As many industry groups are facing compliance issues or competitive pressures to implement multi-factor authentication solutions, one of the benefits a group of organisations can obtain is economies of scale.
To address the drawbacks of single in-house implementations and to encourage the widespread adoption of multi-factor authentication by device issuing and non-issuing organisations, an industry-wide solution provides a unique solution.
Challenge
The challenge of the organisations is to provide a multi-factor authentication solution with the following requirements:
- The system should authenticate a users' second factor device
- Allow any organisation to utilise the service, whether they have issued devices or not
- Provide a return on investment for organisations who issue devices
- Authenticate devices from multiple vendors
- Allow users to carry one device to be used across multiple organisations
Solution Features
|
Feature
|
Benefit |
|
Performance, Scalability and Redundancy
|
ActiveAccess components are independently scalable across multiple physical servers for increased performance, high availability and redundancy.
|
|
Multi-Organisation Support
|
ActiveAccess is designed to manage a single organisation, multiple organisations or organisations with multiple divisions. In this case, the system can be configured to support multiple organisations.
|
|
Multiple Vendor Devices
|
ActiveAccess supports a number of vendor devices allowing organisations to choose which vendor device best suites their needs.
|
|
Multiple Form Factors
|
Organisations can choose from a wide range of authentication form factors such as software, TAN lists, one-time password devices, mobile phone applet and SMS, chip cards and biometric devices.
|
|
Device Sharing Across Multiple Organisations
|
Device issuing organisations can choose to share their devices with partner organisations, reducing the need for users to carry multiple devices and creating a revenue generation opportunity.
|
|
Easy Integration
|
To reduce the cost associated with deployment of a multi-factor authentication system, GPayments ActiveDevice Plug-In reduces the time and associated cost of integration.
|
|
Multiple Implementation Models
|
The solution allows for multiple client implementation models creating different user experiences and can be customised to suite an organisations requirements. In the interests of user privacy in an industry-wide solution, the system can be configured to authenticate users based on a user identifier, meaningless to anyone other than the organisation who requests the authentication.
|
|
Multi-Purpose Solution
|
The solution is multi-purpose allowing it to be used for authenticating access to information, secure login, transaction authentication, authentication of MOTO transactions and eCommerce.
|
|
Multiple User-Device Enrolment Options
|
The solution provides a self-registration process and a self-service enrolment website, allowing users to register, manage and maintain their authentication devices.
|
|
Device Sharing Amongst Users
|
The solution allows multiple users to share an authentication device where this is an acceptable business requirement of the system.
|
|
Multiple Hosting Options
|
The solution can be implemented in an in-house deployment or provided as an on-behalf-of service hosted by a trusted third party. By providing an outsourced multi-factor authentication service, the solution host is in a unique position to offer services to device issuing organisations, non device issuers and organisations who have implemented their own solution but would like to gain revenue by sharing devices with other organisations.
|
