Security and Authentication

Identity Management

In addition to providing the capability to store the usernames and encrypted passwords, Infinity identity management provides configurable options to manage different business rules associated with passwords. All these business rules are configurable by the banks and credit unions and can be managed from Spotlight.

The credential policy feature within Spotlight allows employees to manage username and password policies for customers and prospects of financial institutions. Customers and prospects use their username and password to log into Infinity applications including Retail Banking, Consumer Lending and Small Business Banking.

The following features are explained in this section:

• Credential Policy
• Password Settings
• MFA Configurations
• MFA Scenarios

The password setting feature within Spotlight allows employees to manage the password expiry settings for the customers. Customers and prospects use their password to log into Infinity applications including Retail Banking, Consumer Lending, and Small Business Banking.

Multi Factor Authentication (MFA)

Multi factor authentication (MFA) is a secure process of authentication which requires more than one authentication techniques chosen from independent categories of credentials. MFA combines two or more types of authentication to provide better and secure way of authenticating Infinity users. Typically, the most common types of authentication factors are:

• Knowledge. It is what the user knows, usually the cognitive information of the users (example- passwords).
• Possession. It is what the user has, usually the items that a user possesses (example- smart cards).
• Inherence. It is what the user is - user's physiological and biometric traits (example - face, fingerprint, and voice).
• Location. It is where the user is - user's location information (example - GPS, IP address).

Two or more combinations of the factors mentioned above can provide a robust and secure authentication to the end users.

The goal of MFA in Infinity is to validate legitimate users to secure their sensitive information by providing a layered defense and at the same time make it harder for unauthorized individuals to gain access and perform financial transactions using Infinity apps.

Infinity applications support the following additional factors of authentication:

• Secure Access Code 
• Security Questions

The administrator (bank staff) can configure the various MFA options that a customer can be challenged with when the situation warrants and also create scenarios for MFA triggers.