Quorum ID
- Digital Identification
- OAuth 2.0 / SSO
- Personal Accounts
- Audit log
- Offer control
For VTB Registrar, we have developed a group of services for digital identification and user profile management: the OAuth 2.0 / SSO module, personal accounts of individuals and legal entities, an administrative panel, an audit log, and an offer control subsystem.
The system is currently in beta testing and is being prepared for launch to a wide range of users. The main functionality has been implemented and accepted.
Quorum ID — what was done:
Authorisation service — users log in via Gosuslugi, VTB ID, or standard login/password
Individual personal account — a secure account for storing personal data, documents, and bank details
Legal entity personal account — an account for managing company details, documents, specifying the CEO and employee access
Admin panel — centralised management of users and system settings
Data verification — automatic relevance check with online or offline confirmation
Brute-force protection — detection of suspicious login attempts with automatic blocking
Logging subsystem — audit log of all user and administrator actions for the security service team
Offer acceptance control — the system blocks access until the current version of the document is accepted, the consent is recorded in a legally significant way
Implementation details
A full authorisation cycle has been implemented with support for federated authentication through government and corporate identification services, as well as standard login and password. The user chooses the convenient method. Built-in protection against automated attacks with alerts to the security service team.
The profile is synchronised with the state identification system — data relevance is displayed in real time. Data confirmation is available both through online authorisation and offline validation — the system supports both scenarios without losing data integrity.
Storage of a complete set of corporate data: details, bank accounts, documents, information about the executive body. A role-based employee access model with rights separation at the level of individual system functions has been implemented.
A centralised administration tool with access control for authorised employees. All critical operations are performed in a secure environment with full audit.
The subsystem records all system events: authorisations, data changes, administrative actions. It operates independently of the main services and does not affect their performance. Notifications about significant events are sent to responsible employees in real time.
A flexible offer management system with document versioning and two types of locks — blocking authorisation or restricting specific actions. Users are notified about new versions. The fact of acceptance is recorded cryptographically and stored in a secure form, guaranteeing immutability and reliability of the record.
Ready to discuss your project?
Describe your task to us — we'll suggest the best working model
We always fix
Cost
Deadline
Scope of work