GLOBAL MINING CORPORATION
MyID® credential management enables Governments and their departments to issue and manage secure digital identities to protect user access to software, data, systems and buildings for cyber secure operations
Faster transactions with greater security – how a leading global mining corporation use MyID for mobile authentication and transaction signing.
One of the world’s largest natural resource companies, operating mining, metallurgical and oil production sites across more than 35 countries and employing 145,000 people, required a solution to free up its teams from the slow, in-efficient process of transaction approvals.
THE CHALLENGE
With a geographically spread workforce, and operations in many remote locations, employees regularly need access to financial applications without easy access to an office and desktop computer.
Whether it is an employee at a mining operation requiring to sign off a financial transaction to a parts supplier, or accessing an accounting or expenses application remotely. Employees regularly need to sign off on large transactions and so the company will not compromise on security. Strong multi-factor authentication using public key infrastructure (PKI) has been the foundation of the company’s workforce authentication, ensuring only the right people have access to the right applications and funds.
However, the existing method of requiring employees to authenticate to virtual desktops was proving to be slow and unreliable, reducing efficiency and providing a poor user experience for employees.
The company needed a more flexible, user-friendly solution for its employees that would still be backed up by the security of PKI based multi-factor authentication.
THE SOLUTION
Intercede’s MyID Enterprise credential management platform presented the software needed to maintain PKI based multi-factor authentication whilst also offering a more flexible, improved user experience using mobile devices.
By using MyID’s mobile authentication and transaction signing feature, the company is now able to issue PKI certificates to their employees’ iOS or Android smart phones, allowing mobile based authentication and transaction signing in real time whilst the employee is using applications remotely or in the office.
Using MyID, PKI certificates are issued to employees’ mobile devices, where they are securely held. When authenticating, mobile devices connect to the MyID authentication server before employees are prompted to prove identity using fingerprint, PIN, or facial capture. Standard, easy to operate methods of authentication that enable employees to access the financial applications they need as part of their role using the company’s existing security infrastructure.
Any transaction signing which takes place is then captured by MyID and centrally stored for future auditability and non-repudiation. The authentication and signing operations take a few seconds, providing a fast and seamless experience for employees.
Moving to mobile authentication and transaction signing has enabled the company’s employees around the world to expand from virtual smart card technology and perform the financial transactions they need securely and at speed from wherever they are.