The FinFA app is part of a Two Factor verification application security architecture. It will be used in all types of Business and Fintech applications with the target to provide
a. an alternative flow to log into business applications
b. the ability to use the smartphone for Two Factor Authentication with connected business applications
the easiest and most secure way possible. The app will perform the verification without collecting or compromising any user information stored on the user’s smartphone and needs access to
a. Biometric User Verification allowing to verify the user using the app
b. The Camera to register and connect the FinFA app via a QR Code with the Business / Fintech application
c. Push Messaging Service to allow the user to authorize Login or Two Factor requests of the connected application via Biometric User Verification
1. Biometric User Verification on App Start
The biometric user verification on app start is necessary as smartphones can be configured to provide smartphone access with very little or even no identity verification
2. Camera Access to connect the FinFA App with a Business application and User
A business application, a user and his smartphone require to be registered and connected with the FinFA application Security System. To achieve this the business application will generate a QR Code for the logged in user. The user will scan this QR code via the FinFa App. This will configure and connect the business application, the user and his smartphone FinFA app to enable authorization using the FinFA app.
3. Push Messaging and Authorization
In regular usage, following proper configuration a user will
a. open his desktop app,
b. enter his login id,
c. the desktop web app will ask the FinFA application Security System for user verification
d. the FinFA application Security System requests to execute a push message to the respective user smartphone
e. the push message gets shown on the smartphone
f. the user clicks on the push message this opens the FinFA App
g. the user clicks on the button to authorize the “Login”
h. authorization will be granted following biometric verification
i. the authorization result will be handed over to the FinFA application Security System
j. the FinFA application Security System will inform the desktop web app
k. the desktop web app will grant access if the authorization was successful and in time otherwise the user can login using his desktop web app password