Authshield lab- 2 factor authentication solutions
AuthShield supports diverse user bases by allowing users to authenticate with whatever form factor suits most. Some users prefer AuthShield Mobile authentication (AuthShield Push, AuthShield Mobile Token, SMS / Call token) while other prefer to authenticate via a hard or soft token.
Authshield lab- 2 factor authentication solutions
E N D
Presentation Transcript
AuthShield™ – Two Factor Authentication “The threats from within are increasing on a daily basis. 78% of all information security breaches happen internally”
Innefu Labs “Information Security at it’s best”
About Us • Information Security R&D Organization specializing in creating unique technologies and products • All technologies are indigenous and have been evaluated and approved by multiple Government Agencies • Empanelled with DRDO for providing - • Two Factor Authentication • Social Media Monitoring • Link Analysis and Pattern Recognition Private and Confidential -INNEFU LABS
Contd. • More than Six years of experience in Information Security • Served key clients in Private and Public sector • Unique and Innovative technologies including – • AuthShield - Two Factor Authentication • Chronos – WhiteListing Ani-Virus • Innsight – Social Media Analysis • InteleLinx - Link Analysis and Pattern Matching Private and Confidential -INNEFU LABS
Patent Pending Technologies • AuthShield 2FA – • One Touch Authentication integrated with Mail solutions including POP / IMAP protocol • One Touch Authentication integrated with Database update queries for workflow management Private and Confidential - INNEFU LABS
Some of Our Government Clients Indian Army Ministry of Home Affairs JK Police Ministry of Defense Private and Confidential -INNEFU LABS Chandigarh Police National Technical Research Organization Delhi Police UP Police AP Police National Investigation Agency
Some of our Corporate & PSU’s Clients Private and Confidential -INNEFU LABS
Hacker’s - Point of Attack Private and Confidential -INNEFU LABS
Methods Of Attack Trojans Targeted Phishing Private and Confidential -INNEFU LABS SIM Cloning Mobile Hacking Viruses
Map the physical identity of the user to the server (Two Factor Authentication) • Identify the user based on – • Something he knows (user name / password) • Something in the users possessions
Different Tokens USB Token Hard Token SMS Token Soft Token Mobile Token Push Token
One Touch Authentication – Ease of convenience • Application installed on Smart Phone to receive ‘Push’ notifications from AuthShield Server • Anytime a user wants to log in, AuthShield server sends a ‘PUSH’ Notification to the app installed on user’s mobile phone
Contd. • Notifications contains the following info – • IP Address making the request • Date • Time • Location • User has the option to Approve / Deny the request • In case the user ‘Approves’ the request, user is automatically validated • User ‘Does NOT’ see or enter the OTP in any application
Advantages • Hackproof Tokens - Protect against Hacking attacks against systems as well as Mobile phones • No effect by server access • User gets to know if his credentials have been compromised • Uses the fast growing smart phone industry in the country for validating users Private and Confidential -INNEFU LABS
Our Other Tokens • Indigenous Token • Customizable as per client’s requirements • Generates a new password after every 96 seconds • Indigenous Token • Customizable as per client’s requirements • Available for all smart phones Private and Confidential -INNEFU LABS
Contd. Private and Confidential -INNEFU LABS • OTP sent as a SMS • Options to chose between alpha-numeric / numeric passwords • Indigenous Token • Desktop Token available on all OS
Management Panel • Complete Management control with the Client’s IT Team • Management Portal to • Add / Delete users • Associate a Token with a User • De-associate a Token with a User • Lock a lost Token • Transfer a Token to another User Private and Confidential -INNEFU LABS
Case Studies “Information Security at it’s best”
Unique Case Studies Mail Solutions Database Queries - Workflow Management Private and Confidential -INNEFU LABS SAP GUI and Net weaver
Integration – with POP/IMAP • 2FA integration with Mail servers – • Web Interface • Desktop Clients (Microsoft Outlook etc) • Smart Phones • Seamless integration • Prompt for OTP generation – • Only when IP changes • Specific duration of time passes • PUSH Notification to replace OTP Private and Confidential -INNEFU LABS
2FA Integration with POP / IMAP User enters User Name and Password in his POP/IMAP Client and forwards to Load Balancer 1 2 4 5 Private and Confidential -INNEFU LABS Mail Servers 6 6 3 Back End Servers 6 6
Database Queries – Workflow Management • For specific users, when they fire a Database query – • A PUSH notification is generated and sent to the reporting manager • The notification contains details on – • User making the request • Details on the request • The query is only processed if the reporting manager approves the query • The same architecture can be replicated from Database to any other workflow Private and Confidential -INNEFU LABS
SAP GUI Integration • 2FA integration with SAP – • SAP Netweaver and SAP GUI • User enters – • User Name • OTP and Password • User Name and OTP are authenticated by AuthShield Server • User Name and Password are authenticated as normal Private and Confidential -INNEFU LABS
2FA Integration with SAP User enters User Name and OTP + Password in SAP GUI 1 2 4 Private and Confidential -INNEFU LABS SAP Servers 5 3
Integration Points for Banking Industry Internet Banking Credit Card Transaction Validation Private and Confidential -INNEFU LABS Critical Intranet Applications including Core Banking Solutions Login to Remote Servers Mutual Funds Accounts
Internet Banking Solution • Client wanted Two Factor Authentication with – • Reset Password Options • Source Code available with the Client • Changes made to the Authentication Module of the client application – • Innefu’s 2FA API’s were integrated with the application • Users were provided One Time Password via SMS any time a user needed to reset his password Private and Confidential -INNEFU LABS
Why Give us a Chance! Private and Confidential -INNEFU LABS
Prevent Identity Theft!! – Count on Private and Confidential -INNEFU LABS
THANK YOU Private and Confidential -INNEFU LABS QUESTIONS WELCOME INNEFU LABS PVT. LTD www.innefu.com +91-11-47065864 / 66 contact@innefu.com, info@innefu.com