The Token platform is one of the leading Russian operators of information systems in the field of digital financial assets. The platform team faced the task of expanding its functionality and ensuring the registration and subsequent authentication of individuals through a user-friendly service, while complying with the requirements of Federal Law 152-FZ, internal AML compliance procedures, and information security standards.
To solve this problem, Token chose direct integration with ESIA through a dedicated secure circuit based on the TrustGate software gateway from IIT. The integration allowed for simplified user registration and authorization, as well as the organization of an independent channel for obtaining verified data through ESIA and SMEV.
TrustGate ensures secure data exchange with the e-government infrastructure and is included in the methodological recommendations of the Ministry of Digital Development for using ESIA as a typical solution. The product has a protection class of at least KS3, FSB Russia certification, and supports the OpenID Connect protocol.
The service infrastructure was hosted in certified data centers and cloud platforms of RTK-COD. The direct implementation – from equipment receipt to industrial launch – took two months. Work was carried out in parallel: Token developers integrated the platform with ESIA based on agreed documentation, while IIT and RTK-COD specialists handled the supply, installation, and configuration of the industrial circuit. This approach allowed combining infrastructure preparation with application development and reducing the time for commissioning the solution. The transition to interaction via the SMEV 3.0 protocol took a week and proceeded without significant impact on user operations.
In the new registration scenario, a Token user only needs to select login via Gosuslugi, authenticate, and confirm data transfer. After that, the platform automatically generates a user profile based on information received from ESIA, without the need to re-enter it manually.
“Previously, checking the information entered by the user during registration took an average of up to one business day. Our task was to obtain the necessary data directly from a trusted source and minimize manual procedures. As a result of integration with ESIA, verification time was reduced to a few seconds, while the solution complies with established requirements for information protection, AML compliance, and interaction with state information systems,” said Marat DZHEKSEMBAEV, Technical Director of the Token platform.
“We provided Token not just with capacity, but with a comprehensive fault-tolerant infrastructure: hosting in two data centers and two cloud platforms, server and network equipment, as well as all necessary certified information security tools. All this allows working with confirmed user data through the Gosuslugi portal and simultaneously provides direct savings on infrastructure costs – the client does not need to independently create and maintain such a circuit,” said Alexey SHUVALOV, Director of the Client Center of RTK-COD.
“The project with the Token platform is an example of how an engaged client team, high-quality pre-project work, and support from specialists well-versed in regulatory procedures allow a solution to be put into industrial operation in a short time. At the same time, the customer receives an infrastructure with a high level of security that complies with legal requirements,” noted Alexander VOLODIN, TrustGate Product Owner at IIT.
