About Managed Identity

When it comes to trust, the online world has changed everything. Is the person you're dealing with who they claim to be? Are they authorised to act on behalf of the business? And are they genuinely permitted to see the information they're looking at?

Or to put it another way, how can you be sure – each and every time?

Introducing the certainty of managed identity

To check individual identities in the first place, we use the same robust system as when opening a new money transmission account.

The procedures are approved by UK Financial service regulators (including the Financial Services Authority) and the UK Trust Services regulatory body - known as tScheme.

Your branding – our security

If you are a financial institution, do you want to offer a managed identity service to your customers? Do you have the experience and capacity to develop an end-to-end service? RBS offers an unbranded version of our managed identity service, so your customers won't know we are involved.

Digital credentials white paper

Find out more about gaining control of confidential information, with a detailed look at best practice and implementation issues.

• Download the digital credentials in-depth guide (PDF, 911kb)

• Real certainty – know for sure the identity of everyone accessing your system
• Manage permission – only the right people will have access to the right resources
• Total transparency – a complete audit trail will help you to meet the demands of auditors and regulators
• Simplify communication – deal more efficiently with customers, suppliers and your own staff
• Transform customer service – by offering secure online transactions, you will help the drive to win and retain customers
• Improve efficiency – streamline your workflows and move traditional paper-based processes online
• Reduce costs – avoid the risks of investing time, money and effort in building your own system. Plus reduce your spending on admin, couriers and travel
• Concentrate on your business – stay focused on your core goals, while we take care of your managed identity needs

We support every step of the process, so that you don't need to pull together the various elements yourself.

Each aspect of our service has been designed to provide the gold standard for PKI (public key infrastructure) services.

High security standards

As a registration authority, we use the most rigorous identity checks. We can confirm the identity of individuals before issuing them with certificates. This gives our certificates greater value than the simple self-certified identities provided by other PKI infrastructure providers.

As a validation authority, we also provide a complete real-time validation service to allow certificates to be authenticated each time they are used.

Plus, as a neutral partner, we can help you provide identity management services to applications which you share with external partners.

White label solutions

TrustAssured managed service brings you an extremely cost-effective alternative to building your own solution.

Our core PKI service will meet the needs of anyone developing online commerce. Our white label version is ideal for organisations which need to offer a PKI infrastructure to their own clients but wish to maintain a pure brand. We have expertise in integrating these PKI requirements with existing applications and can offer a number of PKI-enabled applications.

Complete solution

The TrustAssured service isn't simply one part of the solution – it provides the full range of managed identity services. The advantage? There are no gaps to worry about, or systems to integrate. We take care of everything.

• Registration
• Certification
• Validation

Registration – carrying out your initial identity checks

The value of any identity token is directly linked to the robustness of the process followed in order to obtain it. That's why we always confirm the identity of individuals before issuing them with a digital certificate.

We usually do these identity checks through the UK-wide network of RBS and NatWest branches. This makes it easy for users to present their details and credentials. However, we can also work through your own network, as we do with white label customers such as leading high street banks.

This approach to registration gives you security you can have confidence in.

Our solutions give you:

• Legally-enforceable digital signatures, which can protect your business worldwide
• Privacy, authentication, integrity and non-repudiation. It's impossible to argue with a digital signature.

Certification – managing your security certificates

After we've carried out rigorous checks on a company and the named individuals within it, we go into the certification process. This looks at everyone who wants access to your systems, and creates a unique digital certificate for each of them.

You can relax in the knowledge that we manage every stage of certification, including revoking certificates. This is vital if someone leaves their job, or you no longer wish to deal with them.

Validation – real-time authentication

Whenever users want to access your online applications, authorise a transaction or sign a document, they are asked to insert their smartcard into the smartcard reader and type in their PIN.

The details are sent immediately to us, and we validate the digital certificate status in real-time. It's almost instantaneous.

This validation creates a full audit trail – you can see who used a certificate, when they used it and the action they validated. You can also generate a range of management reports, helping you to keep track of how your systems are being used.

Financial services solutions

As a financial services professional, you already know the risks of leaving identity and certification to chance. At RBS, we're ready to help – boosting security and confidentiality, whilst also saving you time and money.

Benefits for financial sector companies

• Adopt new technology now - use smartcard and HSM-based digital certificates with BACSTEL-IP, the new BACS technology
• Simplify your systems – reduce costs by bringing your existing public key infrastructure (PKI) applications under one roof
• Manage risks – take total control of access and authorisation and remove risks and delays by removing human intervention
• Other benefits – you could put security tokens to work in online banking, document signing and secure email

BACSTEL-IP

BACSTEL-IP is the BACS technology renewal programme - designed to meet the rapidly growing demand for efficient electronic payment services.

With BACSTEL-IP, all your payment information is exchanged securely and efficiently online – identification, authentication and tracking is carried out at the individual user level, rather than at a company level.

BACSTEL-IP uses smartcard and HSM-based digital certificates to digitally sign all payment transactions. This ensures non-repudiation of the authenticity of the identity of the sender. It also ensures that the payment has not been changed in transit.

Our TrustAssured PKI solution has also been successfully white labelled for six other financial institutions. This allows these institutions and their customers to use digital certificates with BACS accredited software, to submit payment or collection files to the BACS payment services for processing. And of course, there is no outward sign of our involvement.

• Visit the BACS website

BACSTEL-IP case study

Find out how we're working with BACSTEL-IP to implement the new generation of payment services.

• Download the BACSTEL-IP case study (PDF, 890kb)