Faster transactions with greater security – how a leading global mining corporation use MyID for mobile authentication and transaction signing
One of the world’s largest natural resource companies, operating mining, metallurgical and oil production sites across more than 35 countries and employing 145,000 people, required a solution to free up its teams from the slow, in-efficient process of transaction approvals.
With a geographically spread workforce, and operations in many remote locations, employees regularly need access to financial applications without easy access to an office and desktop computer.
Whether it is an employee at a mining operation requiring to sign off a financial transaction to a parts supplier, or accessing an accounting or expenses application remotely. Employees regularly need to sign off on large transactions and so the company will not compromise on security. Strong multi-factor authentication using public key infrastructure (PKI) has been the foundation of the company’s workforce authentication, ensuring only the right people have access to the right applications and funds.
However, the existing method of requiring employees to authenticate to virtual desktops was proving to be slow and unreliable, reducing efficiency and providing a poor user experience for employees.
The company needed a more flexible, user-friendly solution for its employees that would still be backed up by the security of PKI based multi-factor authentication.
Intercede’s MyID credential management platform presented the software needed to maintain PKI based multi-factor authentication whilst also offering a more flexible, improved user experience using mobile devices.
By using MyID’s mobile authentication and transaction signing feature, the company is now able to issue PKI certificates to their employees’ iOS or Android smart phones, allowing mobile based authentication and transaction signing in real time whilst the employee is using applications remotely or in the office.
Using MyID, PKI certificates are issued to employees’ mobile devices, where they are securely held. When authenticating, mobile devices connect to the MyID authentication server before employees are prompted to prove identity using fingerprint, PIN, or facial capture. Standard, easy to operate methods of authentication that enable employees to access the financial applications they need as part of their role using the company’s existing security infrastructure.
Any transaction signing which takes place is then captured by MyID and centrally stored for future auditability and non-repudiation. The authentication and signing operations take a few seconds, providing a fast and seamless experience for employees.
Moving to mobile authentication and transaction signing has enabled the company’s employees around the world to expand from virtual smart card technology and perform the financial transactions they need securely and at speed from wherever they are.
Employees are able to use PKI based strong authentication into financial applications, backed up by a centrally stored audit log of signed transactions for non-repudiation.
SMOOTHER BUSINESS TRANSACTIONS
Simple authentication via standard mobile device PIN, fingerprint, or facial capture.
MyID is vendor independent and has integrated with existing mobile end point device and back-end infrastructure.
The company’s IT team is able to set policies for employee usage of transaction signing and provide a tailored user experience using the MyID mobile app and APIs.
The company uses MyID to manage existing credentials across all devices including smart cards, virtual smart cards and tokens, as well as mobile devices.
MyID software has a quarterly release cycle, ensuring the deployment will continue to offer the functionality, and work with the technologies and vendors the company wants to use.
Trusted by government and large enterprises, worldwide
Where data really matters, you will find MyID. The security, reliability and interoperability of MyID software sets it apart and is why we are proud to help many leading organisations around the world manage the secure digital identities they issue, whether that's governments managing citizen ID or enterprises managing employee, contractor and supplier IDs.