[DSWD] Orientation on the implementation of Basic Online Authentication Application.pptx

this is private.

1. Briefing on the Use of Basic Online Authentication Application in the DSWD PhilSys Registration of 4Ps Beneficiaries LANCE F. ALAMAR Government Service Use Cases Division Use Case Development and Management Service PhilSys Registry Office 01 February 2024 Republic of the Philippines Philippine Statistics Authority

2. Republic of the Philippines Philippine Statistics Authority 4Ps Beneficiary A platform designed to authenticate the identity of a registered person (4Ps Beneficiaries) seeking for a service, ensuring a r obust and high level identity verification.

3. Republic of the Philippines Philippine Statistics Authority AUTHENTICATION WORKSTATION COMPONENTS

4. Republic of the Philippines Philippine Statistics Authority Hardware Components of the Authentication Application INTERNET CONNECTIVITY BIOMETRIC AUTHENTICATION DEVICE LAPTOP MOBILE PHONE/DEVICE Note: Step 2 Registration Laptop will be used for the DSWD Event

5. Republic of the Philippines Philippine Statistics Authority Software Components of the Authentication Application VIRTUAL PRIVATE NETWORK (VPN) BIOMETRIC AUTHENTICATION DEVICE INSTALLER BROWSER TWO FACTOR AUTHENTICATION APP Installer: https://drive.google.com/drive/folders/1xT6q_RHFMqqMepQ4Ty5fMtE_EWwzAB3Y?usp=drive_link

6. Republic of the Philippines Philippine Statistics Authority Setup of Authentication Workstation Connect the FP Authentication Device to any USB port of the laptop. Open Web Browser. Connect to VPN. Encode Forti-token. Launch the Basic Online Authentication Application. http://172.19.33.139:8080/RP-IDA/

7. Republic of the Philippines Philippine Statistics Authority Basic Online Authentication Application Login Page Launch the Login Page URL: http://172.19.33.139:8080/RP-IDA 2. Enter username and password then click the "login” button

8. Republic of the Philippines Philippine Statistics Authority Basic Online Authentication Application Login Page Launch the Login Page URL: http://172.19.33.139:8080/RP-IDA 2. Enter username and password then click the "login” button

9. Republic of the Philippines Philippine Statistics Authority 3. After successful Login,, Application Modules will be displayed Basic Online Authentication Application Login Page

10. Republic of the Philippines Philippine Statistics Authority AUTHENTICATION MODULE Note: For DSWD activity, ONLY biometric authentication will be performed.

11. Republic of the Philippines Philippine Statistics Authority Authentication Module Select the “Authentication” module

12. Republic of the Philippines Philippine Statistics Authority Authentication Module Select the “Authentication” module Biometric Authentication Demographic Authentication

13. Republic of the Philippines Philippine Statistics Authority Authentication Module Biometric Authentication Encode 16-digit PCN and select ‘ Biometric’ radio button Select fingerprint icon and click on Scan button Note: Iris and Face authentication is under development

14. Republic of the Philippines Philippine Statistics Authority Authentication Module Biometric Authentication 3. Place a finger on the authentication device 4. After scan completed, click ‘Submit’ button 5. Authentication response is either “YES DATA MATCH” or “NO MATCH”

15. Republic of the Philippines Philippine Statistics Authority Authentication Results Successful Authentication Unsuccessful Authentication

16. Republic of the Philippines Philippine Statistics Authority Perform biometric authentication using PCN plus preferably either of the following Fingers: 1, 2, 6, or 7. If the result shows "YES, DATA MATCHED", meaning the identity of the person is validated by PhilSys. If the result is “NO MATCH”, try 3 attempts for each preferred fingers. If all results are “NO MATCH”, record the PCN, L ast Name, and Date of Birth. Operational Guidelines Authentication Process Note: For DSWD activity, ONLY biometric authentication will be performed.

17. Republic of the Philippines Philippine Statistics Authority Ensure the correct positioning of the client's finger while conducting biometric authentication, as instructed in the diagram. This will help to ensure a good fingerprint capture. 2. Position of Finger 3 . FP Device Handling Instruction Clean the glass portion (Platen Area) of the sensor with the included cloths to avoid latent fingerprint detection or rejection

18. Republic of the Philippines Philippine Statistics Authority FOR QUESTIONS OR CLARIFICATIONS Please contact: Lance F. Alamar Project Development Officer III Viber: [phone] Email: [email protected] Joana Maika Endaya Information System Analyst I Viber: [phone] Email: [email protected]

19. Republic of the Philippines Philippine Statistics Authority THANK YOU! http://www.psa.gov.ph http://openstat.psa.gov.ph https://twitter.com/PSAgovph https://www.facebook.com/PhilippineStatisticsAuthority

20. Republic of the Philippines Philippine Statistics Authority SETTING UP OF AUTHENTICATION WORKSTATION

21. Republic of the Philippines Philippine Statistics Authority AUTHENTICATION WORKSTATION COMPONENTS

22. Republic of the Philippines Philippine Statistics Authority Hardware Components of the Authentication Application INTERNET CONNECTIVITY BIOMETRIC AUTHENTICATION DEVICE LAPTOP MOBILE PHONE/DEVICE

23. Republic of the Philippines Philippine Statistics Authority Software Components of the Authentication Application VIRTUAL PRIVATE NETWORK (VPN) BIOMETRIC AUTHENTICATION DEVICE INSTALLER BROWSER TWO FACTOR AUTHENTICATION APP

24. Republic of the Philippines Philippine Statistics Authority Setting Up Authentication Workstation Connect the FP Authentication Device to any USB port of the laptop. Open Web Browser. Connect to VPN. Encode Forti-token. Launch CRS Authentication Application. http://172.19.33.139:8080/RP-IDA/

25. Virtual Private Network (VPN) Installation Republic of the Philippines Philippine Statistics Authority Install the VPN application 2. After the installation, a prompt will appear to set and save the configuration settings.

26. Republic of the Philippines Philippine Statistics Authority Enter required credentials: Connection Name: CRS AUTH APP Remote Gateway: 202.90.149.178 Customize port: 1044 * Client Certificate: None Authentication: Save Login Username: (sent via email) 2. Click “Save”. Virtual Private Network (VPN) Installation

27. Republic of the Philippines Philippine Statistics Authority Virtual Private Network (VPN) Setup 1. Double-click and Run the FortiClient VPN

28. Republic of the Philippines Philippine Statistics Authority Virtual Private Network (VPN) Setup 2. Enter the Username and Password 3. Click on the Icon beside the VPN Name Note: VPN Credentials are requested from respective IT offices and sent via email

29. Republic of the Philippines Philippine Statistics Authority Virtual Private Network (VPN) Setup 4. Click Yes on the Security Alert Window

30. Republic of the Philippines Philippine Statistics Authority Virtual Private Network (VPN) Setup 5. Get a Token from FortiToken Mobile

31. Republic of the Philippines Philippine Statistics Authority Virtual Private Network (VPN) Setup 6. Enter Token from FortiToken Mobile 7. Click OK after providing the Token

32. Republic of the Philippines Philippine Statistics Authority Virtual Private Network (VPN) Setup 8. Confirm successful connection to VPN

33. ID Authentication Training for the Civil Registration Service (CRS) The FortiToken Mobile (FTM) enhances security while lowering the risk of compromise associated with single-factor authentication such as static passwords. It ensures that only authorized individuals can access related resources for Basic Online Authentication Application. FortiToken Mobile Republic of the Philippines Philippine Statistics Authority

34. ID Authentication Training for the Civil Registration Service (CRS) Fortitoken Activation Email Sample Republic of the Philippines Philippine Statistics Authority

35. Go to Play Store or App Store 2. In the search box, search “ FortiToken Mobile ” . 3. Tap  Install . 4. After installation, tap  Open  to launch the application. Republic of the Philippines Philippine Statistics Authority Fortitoken Mobile Installation

36. ID Authentication Training for the Civil Registration Service (CRS) 6 . 1 . Allow FortiToken Mobile to take pictures and record video? Select ‘While using the app’. 6. Select the ‘Scan Barcode’. 6.2 . Scan the given barcode on received Email. 5 . At the FortiToken Mobile App. Republic of the Philippines Philippine Statistics Authority Fortitoken Mobile Set-up

37. ID Authentication Training for the Civil Registration Service (CRS) To unhide the generated OTP digits, click the eye cross icon. 7 . You can now use the FortiToken Mobile and it will start to generate OTP digits. Expiration indicator of generated OTP digits. Republic of the Philippines Philippine Statistics Authority Fortitoken Mobile Set-up

38. Republic of the Philippines Philippine Statistics Authority Fingerprint Authentication Device Setup Installer: https://drive.google.com/drive/folders/1xT6q_RHFMqqMepQ4Ty5fMtE_EWwzAB3Y Note: Ensure that the antivirus of the laptop is updated before installation.

39. Republic of the Philippines Philippine Statistics Authority Device Driver Installation Note: Ensure that the antivirus of the laptop is updated before installation.

40. Republic of the Philippines Philippine Statistics Authority

41. Republic of the Philippines Philippine Statistics Authority

42. Republic of the Philippines Philippine Statistics Authority SBI Driver Installation

43. Republic of the Philippines Philippine Statistics Authority

44. Republic of the Philippines Philippine Statistics Authority

45. Republic of the Philippines Philippine Statistics Authority

46. Republic of the Philippines Philippine Statistics Authority Firmware Update

47. Republic of the Philippines Philippine Statistics Authority

48. Republic of the Philippines Philippine Statistics Authority

49. Republic of the Philippines Philippine Statistics Authority

50. Republic of the Philippines Philippine Statistics Authority BASIC TROUBLESHOOTING & BEST PRACTICES

51. Republic of the Philippines Philippine Statistics Authority Unable to connect to VPN Ensure that the active internet connection is stable by performing a speed test. The internet connection should exhibit a minimum of 20 Mbps for download/upload speeds. Ensure that the VPN configuration settings are correct, including the remote gateway, custom port, and login credentials. Check if the VPN server is operational and not undergoing maintenance or experiencing downtime. Contact the technical support team for server status updates.

52. Republic of the Philippines Philippine Statistics Authority Unable to access the CRS Authentication Application Ensure that the internet connection is stable and connected to VPN. Try accessing other websites to confirm if the internet is functioning correctly. Attempt to access the Basic Authentication Application using a different web browser. This will help determine if the issue is specific to the current browser that the user is using. Ensure that the user has entered the correct URL without any typos or misspellings. Confirm if the Basic Authentication Application server is operational and not undergoing maintenance or experiencing downtime. Contact the technical support team for server status updates. If the user tries all troubleshooting steps and is still unable to access the Basic Authentication Application, contact the support team for assistance.

53. Republic of the Philippines Philippine Statistics Authority Unable to detect the fingerprint authentication device and failed biometric scan Ensure that the authentication device is properly connected to the workstation, the Mantra Mosip L1 MVDM service is running properly, and the configurations are properly set up. Disconnect the authentication device from the laptop, wait a few seconds, then reconnect the authentication device. If the authentication device connects via USB or another interface, try using different ports to see if the issue is related to a faulty port. Check if there is a firmware update available for the authentication device. Updating the firmware can often resolve compatibility or performance issues.

54. Republic of the Philippines Philippine Statistics Authority Ensure the correct positioning of the client's finger while conducting biometric authentication, as instructed in the diagram. This will help to ensure a good fingerprint capture.

55. Republic of the Philippines Philippine Statistics Authority Open Start menu then type Run then press Enter. Type "services" in the search engine and press Enter. Restart the device SBI driver

56. Republic of the Philippines Philippine Statistics Authority 2. Search for "Mantra Mosip L1 MVDM" and right-click. 3. Click "Start" if the service is not running, or "Restart" if it is already running. Restart the device SBI driver.

57. Republic of the Philippines Philippine Statistics Authority 3. Relaunch the Basic Authentication Application page. 4. If all troubleshooting steps fail to resolve the issue, contact technical support for further assistance. Restart the device SBI drive

58. Republic of the Philippines Philippine Statistics Authority “No data match” result Ensure that the internet connection is stable, the VPN is connected, and the authentication device is properly connected. Ensure that the client’s data (PCN, Last Name, & Date of Birth) are encoded correctly. Ensure the correct positioning of the client's finger while conducting biometric authentication. Confirm if the CRS Authentication Application server is operational and not undergoing maintenance or experiencing downtime. Contact the technical support team for updates.

59. Republic of the Philippines Philippine Statistics Authority HANDS-ON EXERCISE Basic Online Authentication Sample Account Username: 80370-CABALLRN Password: Leyte08.rnc

60. Republic of the Philippines Philippine Statistics Authority THANK YOU! http://www.psa.gov.ph http://openstat.psa.gov.ph https://twitter.com/PSAgovph https://www.facebook.com/PhilippineStatisticsAuthority