Developer Summit
November 2013
1

Presenters
• Max Berman, EVP of Business Development
• Len Mizrah, Ph.D., President and CEO
2

Who we are
Authernative is a leading provider of innovative
user authentication solutions
3

Foundation
TECHNOLOGY
User Authentication
(mobile & online)
Server(site)-to-User
Authentication
Transaction
Authentication
Encryption Key Mgmt./
Mutual Authentication
CERTIFIED & ACCREDITED
U.S. NIST FIPS 140-2 &
Canada CSE FIPS 140-2
NIST 800-63 Level 3
Assurance
GSA, Alliant, CIOSP3,
FedRamp, GovWin
GTRA Security
Awards
BACKED BY INTELLECTUAL PROPERTY
26 Granted US & foreign Patents
14 Pending Patent Applications
6 Issued Trademarks
4

Industry Quotes
• "Passwords are dead, our relationship with passwords are done at Google”,
Heather Adkins, Google’s Information Security Executive (Sept, 2013)
• “Because a smartphone is the one device few people are without, it's seen as
the perfect place to store credentials”. ‐ Antone Gonsalves, CSO (2013)
•
“I think it's brilliant, we're finding that smartphone‐based authentication will
be the type of authentication mode in the future” ‐ Trent Henry, analyst for
Gartner (Aug, 2013)
5

Mobility Brings New Challenges to Authentication
• Security
• Design for mobility/single device
• Cross platform
• TCO, deployment
6

User Authentication Evolution
Pattern Based Authentication
Password /
PIN /
Security
Questions
Inception
Token/
Smart Card/
Biometric
1990s/2000s
Soft Token/
SMS PIN
2007
Google Android
Pattern
2008
Microsoft Windows 8
Pattern Login
2011
7

Solution: Passline® pattern‐based One‐Time PIN Authentication
Authernative solves the mobile & cross platform authentication challenges with an
easy to use and secure, pattern‐based one‐time PIN solution
Smartphone
Tablet
PC
8

How Passline® Works
• The user creates a secret pattern
within a grid.
• The pattern of cell positions are
highlighted and numbered in the
order they were selected.
• At login, the grid displays random
digits that appear more than once
• The user is asked to enter certain
digits displayed in the secret
pattern.
• The question changes each time
9

Passline®:
Secure Authentication to device and platform services
Secure Your
Device
App/File
Lock
Device
Management
OTP Challenge
Soft‐token
Cloud/Network
Access
ID Mgmt/SSO
E‐Commerce
Transactions
Unlock NFC
Mobile Wallet
Access e‐health
records
Gaming
DRM/Content
Defense‐Net
Operations
10

Comparison Matrix
Passline®
Biometrics
Tokens /
Smart Card
Low
Med-High
High
Highly Scalable
Med-High
Med-High, requires device
Hardware
None
Sensor, PCB, component
Card + reader, token
Integration
Easy
Complex
Complex
Scalability
Universal
Hardware dependent
Hardware dependent
None
Low-Med
Low
Cost
Security
Failure Rate
11

Value Proposition
Scalable
Security




High combinatorial security
In‐/Out‐of‐band, multi‐factor
No failure rate
FIPS 140‐2 certified crypto
Easy
Deployment




Software algorithm
Cross platforms/devices/OS
Mass deployable
Credential self‐service
Low
Cost




No hardware
No sensors
No PCB/components
Much lower cost than
biometrics or token
12

13

2013 © Authernative, Inc. Proprietary & Confidential

15

16

Facebook Login
17

Key Take Aways
• Unique, innovative technology will work across x86, ARM cores, Windows,
Android, Chrome, Trustzone ecosystems
• Takes advantage of the TEE crypto accelerators, RNG and secure storage
capabilities. Combined hardware & software meets highest Government
security requirements (FIPS 140‐2 Level 3 and NIST 800‐63 Level 4 assurance)
• Single technology serves both the consumer and enterprise (BYOD) markets. It
scales from single device access to client‐server and mobile‐to‐cloud access
• Enables MDM, client‐to‐cloud, secure payments/NFC, ID Mgmt/vault, SSO, data
protection/encryption, DRM/content anywhere and gaming
• Lowest cost, easiest implementation and most scalable level of security available
today
18