1. SecureOTP Authentication Server 3 Total One-Time-Password Solution

2. What Is APassword A password is a SECRET word or string of characters that is used for authentication, to prove identity or gain access to a resource Generally, should be something that is hard to guess

3. How Many Passwords Do You Have?

4. Instant Messaging Travel and Leisure

5. Online Banking or Payment Service Provider

6. How Do You Remember Your Passwords?

7. Your passwords can be easily: Cracked Stolen Guessed

8. Other Shortcomings of A Password A hassle for users A drain on the helpdesk A headache for the management A worry for security managers

9. How To Steal A Password Shoulder surfing Snooping on the user’s network connection Hacking the system’s password file Simple guesswork Use powerful password cracking tools 1 2 3 4 5

10. Conclusion: The classic username-and-password combination can only deliver weak authentication. And yet it is all that stands between your sensitive business information and prying eyes.

11. What is the IDEAL solution that can provide STRONG AUTHENTICATION?

12. SecureOTP Authentication Server 3

13. Two-Factor Authentication What you have What you know Strong Authentication + =

14. Two-Factor Authentication Your username and password What you have What you know Strong Authentication + = A One-Time-Password Token

15. One-Time-Password (OTP) A password that is valid for only ONE login session or transaction Also known as dynamic password

16. OTP Technology Two input factor is taken to generate an OTP. Time factor or Number of clicks 1 Seed code 2 Types of OTP: Time-based authentication 1 Event-based authentication 2 Challenge-response-based authentication 3

17. Comparison Matrix

18. SMS & Messaging Token J2ME Mobile Token Software Token Browser Token Multiple 2-Factor OTP Tokens SecureOTP Hardware Token

19. SecureOTP Hardware Tokens SecureOTP Card SecureOTP Time SecureOTP Event OTP + PKI Combo SecureOTP Hybrid SecureOTP CR

20. SecureOTP Hardware Token Feature Highlights High Mobility Low Cost High Security High Quality

21. How SecureOTP Works Same Account Account1 Account 1 ＋ ＋ Customer Authenti-cation Server Same PIN Pwd Pwd ＋ ＋ Same OTP 555532 Same Algorithm Algorithm Algorithm Timer/Event Seed Timer/Event Seed Same Seed Same Event Counter / Timer

22. PWD OTP Time/Event Synchronous OTP Workflow DB + 3 User Input 1 2 4 5 SSL Authentication Server Application Server

23. PWD Challenge Challenge-Response OTP Workflow 6 DB Authentication Server + 5 7 2 User Input 3 1 4 8 Application Server

24. OTP System Components

25. SecureOTPFeature Highlights Flexible Support Powerful Admin. Central Design Multiple Language Support Strong Security

26. SecurePKI USB PKI Tokens Complete PKI solution with Certificate and Token Lifecycle Management. Cost effective advanced MCU smart chip based USB token SecureOTP Authentication System PKI Smart Cards Advanced OATH hardware token based OTP authentication solution Contact and Dual Interface MCU smart chip based Smart Cards SecureOTP Advanced Authentication System OTP, Hybrid and CR Tokens Multi-Factor OTP authentication solution OTP, OTP + PKI, and Challenge Response chip based Tokens SecureMetric 2-Factor Authentication 2FA Security Solutions 2FA Security Devices

27. session

28. Thank You. Prepared by: RafidahAriffin SecureMetric Technology Sdn. Bhd. rafidah.ariffin@securemetric.com