Застосування методів авторизації із використанням Identity Server та принципів RBA для покращення управління та захисту даних користувачів у системі обробки та підтримки банківських транзакцій із розгортанням у хмарі

Abstract

This article presents a solution for optimizing and improving the authorization and authentication process in systems for supporting and processing banking transactions. The solution is built on the basis of Identity Server and the principles of Risk-Based Authentication (RBA) to improve access management and user data protection in systems for processing and supporting banking transactions. The proposed solution is based on a microservice architecture that provides high efficiency, scalability, and reliability of financial transactions. Identity Server is used for centralized authentication management using OpenID Connect and OAuth 2.0, which allows for the implementation of adaptive access verification methods. The Risk-Based Authentication methodology provides a dynamic assessment of the risk level of transactions using behavioral analysis, geolocation data, and access devices. This minimizes fraud threats and improves personal data protection. The implementation of multi-factor authentication (MFA) and token encryption ensures compliance with security requirements, in particular PCI DSS. Identity Server reduces user authentication time by 40%, providing a response latency of less than 100 ms, even when processing more than 10,000 requests simultaneously. This is achieved through distributed token storage and authentication data caching. The use of multi-factor authentication (MFA) and token-level encryption significantly reduces the risk of data leakage, ensuring compliance with PCI DSS standards. Compared to traditional systems, the integration of Identity Server and RBA principles increases the efficiency of account management by 30% by automating session processing and simplifying the access recovery process. Test results have shown that the system provides scalable and reliable support for banking transactions, allowing it to process more than 1 million operations per day without reducing speed or stability. The proposed technology improves user experience and increases the overall security of payment transactions.