Interface security

Many of our customers ask us about data security. You already know that we take it very seriously - but what about data that moves between our systems and other systems that you specify ? We provide standard Application Programming Interfaces (APIs) for controlled access to the data by these other systems. In GoldSTAR, the generic interface API is configured depending on the type of device or system that is connecting. The API is configured to turn on only those functions needed to deliver a successful integration.  These interfaces include two options for controlling  authentication of the other system. Authentication is used by every interface to confirm that the request is coming from a known source, and if the interfacing system didn't provide it, our interfaces would not respond with any useful information.  

Basic Access authentication means that the interface supports 'signing in' by including certain information in the message header. When a system or device sends a message to GoldSTAR, it includes an authentication ID and password that has to be verified before the system will respond. This method of authentication is supported for backward compatibility with older third party systems. 

Signature authentication provides for added security, by ensuring every request carries a unique time dependent signature hash. This is more secure than Basic authentication, and we recommend that all third party systems should use signature authentication to protect your data in the best possible way. Talk to your other suppliers about tightening security and implementing signature authentication - or ask them to speak to us for more information. Existing customers and third party providers can obtain an up to date version of the interface specification on request. Our talented developers and support staff are always happy to support as needed to help others to integrate securely.

We may need to upgrade your existing interface once the third party has developed their changes, but this will be covered by your maintenance charge.  With no cost from Team Technologies, there's every reason to increase the security of your data transfers. Any new interfaces being set up are recommended to use signature authentication.