Danish Jyske Bank integrates VACMAN Controller to protect its corporate network
With more than 225,000 shareholders and 3,500 employees, Jyske Bank is the third-largest bank in the Danish market with 108 branches. Every day, these employees log on to the central network in order to access the applications and information they need, including those who regularly work from home. In the latter case, access from the home stations to the corporate network has to be secured thoroughly. Jyske Bank therefore implemented VASCO’s core authentication technology VACMAN Controller.
Protect remote access to the corporate network when employees are working from home.
The entire authentication system had to become part of their current security and application infrastructure (based on Tivoli Access Manager), so that stability could be raised and costs could be reduced.
VASCO’s VACMAN Controller could easily be integrated, avoiding that separate authentication servers had to be installed and maintained. On the client-side, Jyske Bank opted for DIGIPASS GO 3, a physical device rather than a software version, creating an out-of-band authentication solution.
Key Project Principles
Avoiding separate authentication
To satisfy integration concerns (i.e. avoiding the installation of separate authentication servers to secure remote employee access, Jyske wanted the entire authentication system to become part of their current security and application infrastructure. The bank settled on VASCO’s VACMAN Controller which can easily be integrated into the bank’s existing application infrastructure and its existing IBM Tivoli Access Management environment. This solution effectively lowered both costs as well as operational risks.
Integrating VACMAN Controller in the existing environment offers a number of advantages. It is cost-saving because instead of managing and paying for two separate servers, now only the already existing application server needs to be maintained. Secondly, the risk for server downtimes was severely reduced. This assures more continuity and stability in the entire authentication process. In addition, on the client-side, Jyske Bank selected DIGIPASS GO 3 which, in combination with VACMAN Controller on the server-side, harmonized with the existing WebSEAL environment. With one push on the button, an OTP is generated. Furthermore, Jyske Bank preferred a DIGIPASS GO 3 device to a mobile solution to make sure that two separate channels are used within the authentication process.
“We are very pleased with the way the solution works. On the client-side, everything passes off quite smoothly. Also, on the server-side, VACMAN is well -integrated in our WebSEAL, so we are happy that our integration and security concerns are finished," said Erik Ladefoged, Lead Infrastructure Architect at Jyske Bank. This so-called out-of-band principle starts from the idea that two separate networks, of which one is different from the primary network, are used simultaneously to communicate between two parties. This adds an extra layer of security and prevents hackers from grabbing information.
Related Client Stories
DnB NOR, Norway’s largest financial services group, implements VASCO’s DIGIPASS to enable optimum security for digital documents
DnB NOR, Norway’s largest financial services group, implemented VASCO’s DIGIPASS to secure the BankID scheme. BankID delivers a public key infrastructure (PKI) solution enabling members from the Norwegian public to identify themselves and sign digital documents from authorities, companies and other organizations on the Internet. BankID requires no smartcard infrastructure, smartcard readers or any proprietary software on the end-users’ PC. The DnB NOR customers’ private key is stored in a central electronic vault and safeguarded by DIGIPASS solutions.
Leading Saudi bank Riyad Bank takes cutting edge role by banking on VASCO’s DIGIPASS technology
Riyad Bank offers online banking services to its customers. To secure all financial and critical transactions online, Riyad Bank wanted to implement the best-of-breed authentication solutions and deployed VASCO’s patented DIGIPASS® technology; taking a cutting edge role in the Saudi financial sector. Riyad Bank is in fact the very first bank in the Kingdom of Saudi Arabia to deploy authentication devices to both its corporate and retail customer base.
Leading South African Standard Bank eliminates remote access security concerns by deploying DIGIPASS technology
Standard Bank Group is a leading South African banking group. In a time of ever growing internet security threats, the bank realized that traditional static passwords were inadequate to secure remote access for its branch offices worldwide. By deploying DIGIPASS technology, the bank’s employees have real-time access to corporate resources and applications, anywhere at any given time.