Deploying OnePass to a public institution #OnePass #Authentication #FIDO #BIOMETRICS

RAON
RAONSECURE
Published in
5 min readMay 7, 2021

Are you tired of entering same ID and password each time you log in to your working environment? Using biometric seems convenient but you are worried about potential hacking? And how to protect your working environment against regular threats that cause password leakage?

The #Next-GenAuthenticationCaseStudy series will answer these questions by focusing on case studies where authentication technologies provided by RAON have been deployed.

In this post, let’s review how OnePass has been implemented to improve and secure the biometric authentication process of a public utility company in Korea.

Background

Being owned by the Korean government, the public utility company we worked for must comply with a set of strict guidance when it deals with the authentication of its employees. This is no surprise to see that the employees had to undergo several authentication processes relying on ID/password while using certificates as an extra layer of security during the process.

According to the government’s cybersecurity procedure, a password must be changed every three months and its structure shall consist of at least nine digits. Even worse, employees had to remember multiple passwords to get access to different services, such as PC password, working environment passwords (e.g., groupware), and password related to certificates that leveraged a two-factor authentication method!

Source: pcmag.com

Passwords were not the only pain points in this process as the authentication process was also relying on the use of certificates. Certificates brought inconvenience due to its issuance and renewal procedures. Also, when doing business trips, employees were facing challenges when using certificates as they had to manually import the certificates from a safe area and export it to the system they wanted to log in to.

To minimize the tiredness associated with the use of passwords and certificates, the public utility company considered the deployment of a biometric authentication technology as an alternative to this cumbersome legacy system. The COVID-19 pandemic also played a major role in the adoption of a new authentication technology that could increase productivity without compromising security, and that could ensure that remote working can be processed in a secure manner.

OnePass as the reliable alternative

For solving the challenges faced by its employees, the public utility company selected OnePass, a FIDO-based platform for multiple channel authentication developed by RAON. OnePass enables convenient and secure authentication with a design that can be customized according to the customer’s environment (e.g., mobile device, PC, etc.)

Authentication Process using OnePass

Based on FIDO (Fast IDentity Online) biometric authentication technology, OnePass has been used by the public utility company since March 2020 and it already enhanced usability and user convenience of their in-house authentication systems. In particular, OnePass has been deployed to the VPN (Virtual Private Network)-based telecommuting system and mobile messengers. Using OnePass enables these systems to be well-connected while ensuring their compatibility with a variety of business systems.

One of the main strengths of OnePass is its ability in preventing information leakage (e.g., due to user’s carelessness) and external hacking (e.g., during remote working) by providing a highly secure digital infrastructure. In this regard, OnePass enhanced the security of the public utility company’s access control and authentication systems.

A success story

After the deployment of OnePass, the public utility company’s employees expressed their satisfactions as the RAON’s technology improved the way of accessing the working environment while drastically increasing the user convenience by eliminating the reliance on passwords and certificates.

It also eased the life of IT administrators who do not have to fear password leakage or exposure of personal information due to external hacking. Another satisfaction point has been provided by enabling the public utility company to offer internal services securely and conveniently in external environments such as business trips or telecommuting.

“We don’t have to worry about password leakage by external hacking, and we can now safely and conveniently provide internal services for those working in external environments when doing business trips or remote working,” said an official from the Public Utility Company

In the aftermath of the pandemic, the working conditions might evolve consequently in terms of telecommuting, pushing the public utility company to consider establishing a flexible smart office environment. In such environment, the public utility company plans to strengthen corporate security by continuously expanding OnePass to enhance both security and convenience.

More about OnePass

A leading FIDO-based platform. As the first FIDO certified technology in the world, OnePass is a pioneer in the global biometric market. In addition, the project has been developed by RAON, which is a Board Member of the FIDO Alliance.

A wide range of authentication means available. OnePass can be adopted in a variety of environment thanks to the flexibility of its design. If you are thinking to deploy a secure and convenient authentication solution but you are worried about the appropriate authentication means to use, then you should have a look at OnePass. With OnePass, you can choose the authentication means that fits best with your needs (e.g., ­fingerprint, PIN, pattern, iris, voice, and facial recognition)

A convenient installation process. No need to worry about the installation process as we provide a complete solution package that shortens the installation time. Our team also supports stable maintenance based on its rich experience as an installation service provider.

Stay tuned for more information on how RAON’s products improve existing authentication infrastructures. :)

--

--

RAON
RAONSECURE

A leading IT integrated security and authentication group publicly traded in Korea, providing solutions and services to + 1,000 organizations.