Terminal authenticity
Verified using the GOST-TLS client certificate.
Request source verification
MST BIO Proxy · biometric acquiring adapterBiometrics.
Biometrics.
Within your bank’s
payment infrastructure.
A compact service connecting the terminal, the bank’s biometric system and the National Payment Card System (NSPK). For biometric payments and a separate age verification scenario.
Russian-developed software
Biometrics within your infrastructureMST BIO Proxy · banking infrastructure
Listed in the Russian software registryMST BIO Proxy software · No. 28024, May 6, 2025
Two independent scenariosPayments and age verification.
Payments and age verification.
A separate flow for each.
The payment scenario connects identification and payment. Age verification through the Unified Biometric System operates independently of payment.
From identification
to SBP payment.
The terminal communicates with the adapter through a REST API. MST BIO Proxy makes the required requests to the bank’s biometric system and NSPK and handles the checks in the payment flow.
-
01
Identification
The customer’s photograph is submitted for identification through the bank’s biometric system.
-
02
Consent and biometric level
Checks cover consent to biometric data processing and the biometric assurance level.
-
03
Transaction limit
The transaction amount is checked against the configured limit.
-
04
Payment instrument
NSPK returns a payment instrument for SBP or card payments.
-
05
BIO-PIN
BIO-PIN verification is performed when required.
-
06
SBP payment
Once the checks are complete, the payment is processed through the Faster Payments System (SBP).
Bank biometric system → checks → payment instrument → BIO-PIN when required → SBP
NSPK returns an instrument for SBP or card payment. The diagram shows an SBP payment flow.
Age restrictions.
Independent of payment.
Age verification through the Unified Biometric System is an independent scenario. It can be used where a customer’s age must be checked before a product is sold.
-
01
A separate request
A biometric age verification scenario is initiated.
-
02
Unified Biometric System
The state Unified Biometric System is used to verify age.
-
03
Verification result
The scenario supports the sale of age-restricted products.
Age verification is not a stage of the payment flow. Integration is agreed around the bank’s requirements and the merchant infrastructure.
DeploymentInside your bank.
Inside your bank.
With clear connections.
MST BIO Proxy is deployed within the bank’s infrastructure. The terminal receives a single interface for biometric scenarios.
Bank perimeter
TerminalREST API
Reverse-proxyBank component
MST BIO ProxyBiometric acquiring adapter
GOST-TLS proxyBank component
MST BIO Proxy connections
Bank biometric systemIntegration with VTB’s biometric system is implemented
CryptoPro CSPRequest signing · CAdES-BES
The reverse proxy and GOST-TLS proxy provide transport security and are not included in the MST BIO Proxy package.
External system connections
NSPK
Payment flow interaction
External systemsPayment flow interaction
Unified Biometric System
Independent age verification scenario
Independent age verification scenario
Simplified interaction diagram. Requests to the bank’s biometric system and NSPK are signed using CAdES-BES with GOST algorithms. CryptoPro CSP is required. The connection architecture is agreed with the bank.
Security in detailVerify authenticity.
Verify authenticity.
Protect data.
The service operates within GOST-TLS infrastructure and verifies request authenticity. Payment data is masked in logs.
Photograph signature
The signature of the customer’s photograph is verified with every request.
Request integrity checksLog masking
PINs, card numbers, PIN blocks and tokens are masked at every logging level.
Payment data protection in logs
Restricted software environmentAstra Linux.
Astra Linux.
Operation in a restricted software environment.
Executable files are signed with an MST key certified by the operating system manufacturer. The software can operate in a restricted software environment without being re-signed by the bank.
- Signed executable files
- Key certification by the OS manufacturer
- No re-signing by the bank
Astra LinuxRestricted software environment
MST signature
Key certified by the OS manufacturer
Key certified by the OS manufacturer
Ready for integrationA compact service.
A compact service.
A controlled rollout.
Integration with different bank biometric systems.
MST BIO Proxy can integrate with banks’ commercial biometric systems.
For any bank’s biometric systemDesigned around your infrastructure.
Connection interfaces, enhancements and interaction architecture are agreed around the requirements of your biometric system and payment infrastructure.
Project-specific integration
Deployment and updates
The service is installed and updated within the bank’s internal infrastructure.
Configuration
Adapter settings are determined by the requirements of the banking infrastructure.
Logging
Event logs support service operation and maintenance.
Callbacks
A callback mechanism is supported.
Completed project · VTBBiometric age verification.
Biometric age verification.
FINOPOLIS 2025.
For the VTB and NSPK stands, MST implemented age verification followed by biometric payment. The project used JoinPOS and MST BIO Proxy.
Technical resources
Request documentation
Documentation on request.
Functionality, installation and operation. Tell us which materials your team needs to evaluate integration.
Your banking projectLet us discuss biometrics.
Let us discuss biometrics.
Within your infrastructure.
Tell us which scenario your bank needs: biometric payment or age verification. We will discuss your existing infrastructure and integration requirements.
- Payment scenario and terminal types
- Existing biometric system and GOST-TLS infrastructure
- Astra Linux and deployment requirements
- Documentation for your technical team
Loading the contact form…