|
Benefit
Bring the benefit of
the best identity solutions to your customers.
Without
the Burden
You don't have to
become expert at identity verification and enrollment processes. We
provide that expertise on your behalf.
|
|
Introducing
AUDREYTM
The most secure identity token in the
world is
- easy to deploy
- easy to use
PKI experts
know that in order for a token to be secure, its circuits
and the keys and code that they contain must be well isolated from the
rest of the world. After all, that's why we keep private keys in tokens
rather than in computers. In that respect AudreyTM is like
any good
identity token, physically and logically sealed to prevent intrusion.
Experts also know the value of multi-factor authentication that tokens
provide. They
add the "something you have" possession factor to the PIN/password and
fingerprint reader.
AudreyTM is very good at keeping secrets.
Her keypad is on the token
itself; authentication keystrokes only go as far as her processor. Same
with Audrey's fingerprint reader: she keeps its input to herself, only
using it to decide whether to enable the use of one or more private
keys -- which she also keeps to herself.
AudreyTM is completely focused and totally un-distractable
thanks to COSTM,
her Constrained Operating System. COSTM provides no APIs or
other
features that might introduce vulnerabilities in the name of
versatility. AudreyTM only knows how to do what she
was
taught at birth, which is to listen to her keypad and fingerprint
reader, encrypt, decrypt, sign, display and calculate. But she's
anything but boring. At online meetings and parties she'll lean over
and whisper in your ear, "Don't tell him anything, he's a fake."
Audrey wants to be your
one and only.
Speaking of multiple private keys, Audrey knows she's good enough to be
your one and only. She's trained and equipped to carry dozens or
hundreds of digital credentials, from a single-factor possession-only
low security credential such as the Mobil SpeedPass all the way up to
limited-use three factor credentials such as those used by Italy's
Latin Notaries to record property transfers. If you just want to fill
up your gas tank, simply hold Audrey up to the pump. If as a judge you
want to issue an emergency search warrant, possession of the device
needs to be supplemented by PIN and fingerprint. Audrey does it all, so
you only need to carry one device, which also does duty as a handy
calculator. Audrey is designed to be stuck onto the back of your mobile
phone, ready to authenticate calls, instant messages, etc. She'll do
the same for any nearby computer or PDA.
But AudreyTM's security goes way beyond mere three-factor
authentication.
How secure is Audrey?
Very.
Most identity tokens are a step in the
right direction when it comes to authenticating the user to the server.
But what about the other way around? How does the user know that the
server is really owned or controlled by the organization or financial
institution or government entity that it purports to be?
Here's how Audrey makes authentication a two-way street. At enrollment
time, Audrey's user provides a digital image of something memorable.
The image is simplified to a small monochrome file, then encrypted with
the public key from a key pair that is designated for this purpose. The
corresponding private key is kept inside Audrey, close to her heart.
The encrypted image file is uploaded or otherwise provided to the
operator of the server, and is associated with the user's account
information. Later, when the user wants to verify the server's
authenticity, AudreyTM's requests the image, decrypts
it, and presents it on the screen. When the user sees the familiar
image, she or he knows the server is genuine and can proceed.
Audrey comes from a good
family.
Audrey's pedigree is well documented.
Her DNA includes patents and patents pending from the founders of
PassMark Security and The Osmium Group, which is a member of the The
Village Group's QEI Alliance. Get to know Audrey. Even though
she's quite young she already travels in the best security circles --
and she's making quite a splash!
[note to Jim: The above image is supposed to be monochrome]
|
|
