Security Solution Based on Two-Factor Authentication
Protectimus LLC (www.protectimus.com) is a technology start-up founded by INSART jointly with one of the company’s overseas clients.
INSART s R&D expert group noticed a market need for an easy-to-use, technologically advanced, and affordable security solution while taking part in two projects associated with the development of payment systems for the company’s Western-European clients.
When an international technology investor and our client offered INSART to develop the above solution in cooperation with them, Protectimus came into being. The fledgling technology vendor was tasked with creating a robust and highly customizable application that could be used to secure access to customer accounts in a virtually any software system, for example, in a banking system. It was stipulated from the set-out that the solution be superior to similar solutions provided by the competition.
Protectimus is an advanced and comprehensive solution that allows efficient and reliable two-factor authentication. The solution can be easily and expeditiously integrated into an online banking system, or some other system that requires a high level of security. It can be deployed both on a client server, to function as a standalone platform, and be used as a SAAS service.
The two-factor authentication is performed with the help of a token device that is used to receive a one-time password, generated by Protectimus’s proprietary mobile application, or physical devices. The mobile application is installed on the user’s mobile device. It is available on the Android and iPhone platforms. In addition, the solution supports token devices from most well-known vendors.
The Protectimus platform can be installed in an isolated environment, protected additionally with a firewall, or some other security means. The system’s functionality allows the client a fully transparent and all-round view of their security-related data and processes.
The solution is fully OATH-compliant.
To implement the project, INSART put together a team of remarkably qualified development professionals lead by a very experienced Project Manager. Prior to embarking on the project, the bulk of the team had been engaged in the development of a payment solution. During the most intensive phase of the development effort, the number of the Protectimus team peaked at 6 people, including 4 software engineers, 1 QA engineer, and 1 PM.
It took the Protectimus team 12 months to roll out a full-service version of the system. Currently, the solution is being expanded by them with a view to adding several more useful features.
The team has succeeded in overcoming all major challenges the project held, including, but not limited to, the need to support tokens from multiple well-known providers, the need to create an industrial-class sever cluster to be able to support a large number of concurrent users, and the need to meet the high database security requirements.
The solution has been tested by a QA team of One Security Inc., and no significant security gaps or vulnerabilities were identified by them. All insignificant security issues, discovered by the external QA team, have been successfully resolved by the project team.
The INSART team has been using the following technologies to implement the project:
- Java 7
- Web/App Server Tomcat 7.0
- Framework: Spring 3.1.0, Apache Tapestry 5.3.7
- GUI: Twitter Bootstrap, JQuery
- ORM Spring JDBC
- Database Postgres SQL 9.3
- Building Maven 3
- High-performance, distributed memory object caching system Memcached
- Application Load Balancing and Content Caching Nginx
INSART’s technology start-up has developed a highly innovative two-factor authentication solution that is fully capable of successfully competing with any of the well-known competitors across an array of key indicators, including the provided level of security, ease of use, affordability, and more. The solution boasts excellent stability and load-resistance, as well as multiple advantages that are bound to ensure its competitiveness and marketability. This far, it has been integrated by Protectimus with two payment systems of INSART’s UK and Central-European clients that have been able to fill their security needs reliably and cost-efficiently.
Also, our client that has been INSART’s partner for this project can now benefit from the sales of the Protectimus solution that will be made jointly with our company.
For more information, integration or partnership requests, please contact us via email@example.com. We will get back to you within 24 hours.