Open Innovation Campus

Cybersecurity

Fortifying an API Gateway by Integrating 2FA with Latch Technology

Available

Resources

https://latch.tu.com

Are you interested?

If you are a professor or university student and you are interested in participating in the TUTORING program, register your information so that we can start the program.

Student registration
Academic registration

Subject Area

Aimed at students who are looking to develop their TFG/TFM and who have a strong interest in new technologies, especially those related to cybersecurity techniques. Recommended mastery of programming languages such as Python.

Introduction

Telefónica's Ideas Locas team develops projects and research in different fields and proposes a new universe for you to experiment, ideate, learn and innovate
The challenge they propose is the following:
The implementation of multi-factor authentication (MFA) technologies has become a necessity to protect digital assets against unauthorized access. Latch, an innovative MFA solution, offers the possibility of adding an additional layer of security through a system of "digital latches". On the other hand, API gateways, such as Kong, play a crucial role in managing and securing data traffic in microservices architectures and distributed applications.
Integrating Latch with an API gateway presents a unique opportunity to improve security and access control at the path level, enabling granular latch- and sub-latch-based traffic management with Latch.

Challenge raised

The proposal is to develop a system that integrates Latch's "digital latch" technology with an API gateway (preferably Kong or a similar alternative) to control access to traffic on different routes. The main objectives are: Implement a "general latch" using Latch to block or allow all traffic on the gateway.
Create "sub-latches" for specific paths, allowing granular access control.
Develop an integration between Latch and the chosen gateway that allows:
Configure and manage latches (general and specific) through an admin interface.
Make routing decisions based on the status of the Latch latches.
Design and implement security policies that define how and when Latch locks are enforced.
Develop a test suite
Evaluate the impact of the solution in terms of security, performance, and usability.

Who is this challenge for you?

Telefónica's Industrial Tutors accompany you in the development of the TFG/TFM, providing their real vision of the industry. They will share their knowledge and experience, offering you feedback so that you can develop a project with an innovative impact.
Alvaro tutor

Alvaro Núñez-Romero Casado

Security Researcher at Ideas Locas