The ATM and payment terminal cyber security project for Tinkoff Bank, which uses SoftControl TPSecure products, has been selected for the "Information security innovation or anti-fraud service" nomination.

FINAWARD is an annual award given since 2013 for innovative achievements in the financial industry. The award commemorates the most noticeable products and IT innovations in the financial sphere. The business magazine Bankovskoye Obozreniye, the award establisher, selects the most important banking and financial products, services, methods of their implementation, and people who created them.

"Very strong projects and participants have been nominated for the award. For example, the National System of Payment Cards (NSPK) and the Research Institure for Molecular Electronics (NIIME) created the first chip in Russia that facilitates contact and contactless payments. Previously, only two enterprises in the world had been making that product: in France and in South Korea. While a project by the Russian Agricultural Bank and SafeTech implemented the first mobile electronic signature in Russia. It allows to make payments with your smartphone that are not just convenient, but also safe. We are very happy to be nominated along these incredible teams. It is especially satisfying to know that these projects have been implemented using Russia's most advanced technology solutions," Svetozar Yakhontov, the Head of Business Development at SafenSoft, says.

Information about the project that uses SoftControl TPSecure solutions:

Tinkoff Bank has introduced the secure mode of software maintenance for ATMs and payment terminals, using products of the SoftControl TPSecure range. The solution provides control over changes made to the hardware and software configuration of devices. Whitelisting processes and applications allows using only trusted software on protected devices. Dynamic integrity control and control over process and application activity allows running only trusted scripts of client operations.

Why this project is unique:

• This is the first project in Russia and in the world that makes a network of self-service banking terminals running on Microsoft Windows 10 comply with PCI DSS requirements.
  
  
• Companies leading in the sphere of critical IT infrastructure security analysis have run multiple penetration tests on the implemented defense measures.
  
  
• At the same time, these measures do not encumber updating payment applications on the terminals network. This allows timely release of new banking products by means of the push strategy for supply and provides the bank with technology leadership on the financial services market.
  
  
• In collaboration with experts from Tinkoff Bank, we created new unique functions for the SoftControl protection solution. Thus we created the new module for ATM hard disk encryption, which accounts for operation specifics in self-service banking terminals: the disk decryption key is bound to hardware characteristics of peripheral devices and does not use the ATM motherboard's TPM. It facilitates trusted computing for a device in self-service mode without affecting operation of special electronics.