❓ Security: What is Double-Authenticated Registration (DAR)?

Double-Authenticated Registration

The 'Double-Authenticated Registration' (DAR) is an additional security measure for the system and all users. With DAR, new users and external individuals are required to enter a second factor during their initial registration in the system to successfully complete the process. This ensures that all deliveries sent from the system are only received by the intended recipients.

How does DAR work at FTAPI?

Once activated, when sending a delivery to an external person, the system asks for the recipient's phone number. The delivery is only sent after this information is entered (this prompt occurs at security level 2 or higher; it does not occur at security level 1). The recipient then receives a notification about the encrypted delivery. To retrieve it, the recipient registers in the system and, to complete the registration, requests a token that is sent to the provided phone number. After successful authentication via the token, the registration process is completed, and the recipient can view the delivery and reply if necessary.

What are the requirements?

To use the DAR procedure, an SMS Gateway is required on the customer side. If you do not have one yet, FTAPI will be happy to advise you on potential SMS gateway providers.

Figure 1: The sender enters the recipient's phone number (prompt occurs during sending). 

Figure 2: The recipient registers in the FTAPI system and requests a code for authentication via SMS.

Figure 3: The code is sent via SMS to the provided phone number.