Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
QUALITY TOKENLESS
AUTHENTICATION USING SMS
A webinar by
SecurEnvoy and CM Telecom
May 7th 2014
THE ADDED VALUE OF
TOKENLESS AUTHENTICATION
by
Phil Underwood
SecurEnvoy
© 2014 SecurEnvoy
Quality Tokenless®
Authentication using
SecurEnvoy and CM-SMS
© 2014 SecurEnvoy
How Many Passwords ?
© 2014 SecurEnvoy
• “Social engineering”
• Finding written password
– Post-It Notes
• Guessing password / pin
– Dog/Child’...
© 2014 SecurEnvoy
Two Factor Authentication?
We use it every day
ATM - Chip and PIN
Two Factor is?
Something you own - ATM...
© 2014 SecurEnvoy
Token Two Factor Types
• Hardware Tokens
– Require distribution, synchronising
• Smart Cards
– Require d...
© 2014 SecurEnvoy
What the Analysts say
• User eXperience
• Several vendors highlighted the increasing
emphasis on UX acro...
© 2014 SecurEnvoy
Tokenless Two factor
• Phone as the Authenticator
– 6.9 billion GSM connections
(source https://gsmainte...
© 2014 SecurEnvoy
WEB/VPN
User Experience?
SENDING QUALITY SMS
MESSAGES
by
Cas Schalkx
CM Telecom
CONTACT DETAILS
Cas Schalkx
email: cs@cm.nl
twitter: @cmtelecom
GOOD SERVICE DEPENDS ON GOOD SMS
What is a good SMS?
– An SMS that is delivered at your phone in less
than 10 seconds.
Why...
YOUR MESSAGE TRAVELS THROUGH A CHAIN
You
Secur
Envoy
SMS
GW
Oper
ator
??
But no SMS Gateway is
connected to all operators
...
AND THAT CHAIN MIGHT BE LONG…
You
Secur
Envoy
SMS
GW
Oper
ator
Partner
So they use partners to
connect to operators.
… OR EVEN LONGER
You
Secur
Envoy
SMS
GW
Oper
ator
Partner
But that partner might use
a partner as well.
Partner
TWO PARAMETERS TO MEASURE QUALITY
You
Secur
Envoy
SMS
GW
Oper
ator
Partner Partner
Delivery time (DT) in seconds
Delivery ...
CM IS 24/7 OPTIMIZING ROUTES
You
Secur
Envoy
CM
Oper
ator
Partner
Partner
Partner
CM’s Network Operation Center
Based upon...
WHY CM
We are building the worlds best
platform for mobile messaging and
payments. Daily proven by 2.7 million
messages on...
HONORABLE MENTION
Don’t just take our word for it…
START NOW!
• Try tokenless authentication
– Go to www.securenvoy.com and select the 30 day free
trial
– During the trial y...
THANK YOU
PHIL UNDERWOOD – punderwood@securenvoy.com
Global Head of Pre Sales
CAS SCHALKX– cs@cm.nl
Product Marketeer
@cmt...
Upcoming SlideShare
Loading in …5
×

Quality Tokenless Authentication using SMS | SecurEnvoy & CM Telecom

1,468 views

Published on

This presentation was used during a joint CM Telecom and SecurEnvoy webinar on Tokenless Authentication held on May 7th 2014.

Full webinar available via: https://www.youtube.com/watch?v=mrhbyDavZDQ

Questions that will be answered are:
* Why a single factor authentication is a threat to your company’s security.
* The benefits of tokenless authentication for your company and why should you use it.
* How to get the best quality? : SMS Routes, Delivery Time, Delivery Rate.
* Why the cooperation of CM and SecurEnvoy can help you leverage security on another level.
* How you can easily set up your own two-factor authentication environment.

The presentation is divided into two sections.
First, Phil Underwood (punderwood@securenvoy.com) will discuss "The Added Value of Tokenless Authentication." We have so many different passwords these days that we cannot remember them all. This introduces all sorts of dangers; people write them on post-it notes or are socially influenced to share their password. Or even more extreme; their password is logged during entry either technically or socially, maybe bruteforce-hacked using Cain & Abel.
Therefore we need to introduce another layer of security: So not only "something we know" but also "something we own", such as the ATM chip and pin.
SecurEnvoy delivers this solution not using oldfashioned hardware tokens (RSA tokens) but directly on your mobile phone. Offering a seamless user experience. There are 6.9 billion GSM connections in the world, and we can leverage that using authentication code via SMS or voice calls. Even using the apps that can be used on modern smartphones.

Secondly, Cas Schalkx (cs@cm.nl) will discuss "Sending Quality SMS Messages". A quality SMS message is one that is delivered within 10 seconds. That can be difficult because no one company can deliver SMS messages around the global alone. So SMS Gateways use partners--but the processing time of these partners is all added up to you delivery time. CM Telecom monitors the delivery time and delivery rate of their traffic 24/7. If one partner does not perform on par the messages will be rerouted and delivered using a more reliable network.

Try tokenless authentication now:
* Go to www.securenvoy.com and select the 30 day free trial. During the trial you get free test messages via CM Telecom
* Improve your SMS delivery. Go to securenvoy.cmtelecom.com and create an account to start sending using the Global Gateway Priority.
* If you are Dutch; download the whitepaper: www.cm.nl/sectorexpertise/beveiliging
If you speak English, contact cs@cm.nl for a translation.

Published in: Technology, Business
  • Be the first to comment

Quality Tokenless Authentication using SMS | SecurEnvoy & CM Telecom

  1. 1. QUALITY TOKENLESS AUTHENTICATION USING SMS A webinar by SecurEnvoy and CM Telecom May 7th 2014
  2. 2. THE ADDED VALUE OF TOKENLESS AUTHENTICATION by Phil Underwood SecurEnvoy
  3. 3. © 2014 SecurEnvoy Quality Tokenless® Authentication using SecurEnvoy and CM-SMS
  4. 4. © 2014 SecurEnvoy How Many Passwords ?
  5. 5. © 2014 SecurEnvoy • “Social engineering” • Finding written password – Post-It Notes • Guessing password / pin – Dog/Child’s name/ Birthday • Shoulder surfing • Keystroke logging – Can be resolved with mouse based entry • Screen scraping (with Keystroke logging) • Brute force password crackers – L0phtcrack, Cain & Abel Problems with passwords
  6. 6. © 2014 SecurEnvoy Two Factor Authentication? We use it every day ATM - Chip and PIN Two Factor is? Something you own - ATM card Something you know PIN, Secret, Password
  7. 7. © 2014 SecurEnvoy Token Two Factor Types • Hardware Tokens – Require distribution, synchronising • Smart Cards – Require distribution, certificate management • USB Sticks – Require distribution, certificate management
  8. 8. © 2014 SecurEnvoy What the Analysts say • User eXperience • Several vendors highlighted the increasing emphasis on UX across all use cases, with such epigrams as "UX is key" and "UX is king.” "Abusing your employees with poor IT usability is no longer acceptable in today's marketplace.” – Source Gartner “Magic Quadrant for User Authentication” December 2013
  9. 9. © 2014 SecurEnvoy Tokenless Two factor • Phone as the Authenticator – 6.9 billion GSM connections (source https://gsmaintelligence.com) • Tokenless®, via SMS – What about SMS delays – What if I'm in a building with no signal – I’m using my phone to connect to the internet • Tokenless®, via Voice or eMail • Tokenless®, via Software – Many different phone interfaces – Massive QA issues – Major support issues – Limited supported phone types – Software deployment problems
  10. 10. © 2014 SecurEnvoy WEB/VPN User Experience?
  11. 11. SENDING QUALITY SMS MESSAGES by Cas Schalkx CM Telecom
  12. 12. CONTACT DETAILS Cas Schalkx email: cs@cm.nl twitter: @cmtelecom
  13. 13. GOOD SERVICE DEPENDS ON GOOD SMS What is a good SMS? – An SMS that is delivered at your phone in less than 10 seconds. Why is that difficult….?
  14. 14. YOUR MESSAGE TRAVELS THROUGH A CHAIN You Secur Envoy SMS GW Oper ator ?? But no SMS Gateway is connected to all operators around the world
  15. 15. AND THAT CHAIN MIGHT BE LONG… You Secur Envoy SMS GW Oper ator Partner So they use partners to connect to operators.
  16. 16. … OR EVEN LONGER You Secur Envoy SMS GW Oper ator Partner But that partner might use a partner as well. Partner
  17. 17. TWO PARAMETERS TO MEASURE QUALITY You Secur Envoy SMS GW Oper ator Partner Partner Delivery time (DT) in seconds Delivery rate (DR) in percentage % • Reasons for high Delivery Time • Long processing time in the chain • CM can process up to 2000 messages per second • Reasons for low Delivery Rate: • Bad phone numbers • Failure somewhere in the chain
  18. 18. CM IS 24/7 OPTIMIZING ROUTES You Secur Envoy CM Oper ator Partner Partner Partner CM’s Network Operation Center Based upon DR and DT data we constantly find the best partners to deliver the message to the operator. We can guarantee 90%> delivery within 10 seconds. Free Retry service
  19. 19. WHY CM We are building the worlds best platform for mobile messaging and payments. Daily proven by 2.7 million messages on 5 continents and in 180 countries. Direct connections Approval to work with governments and banks High capacity and fast delivery time Private redundant data center Around for 15 years Commercial SMS available 1993 Open 24/7
  20. 20. HONORABLE MENTION Don’t just take our word for it…
  21. 21. START NOW! • Try tokenless authentication – Go to www.securenvoy.com and select the 30 day free trial – During the trial you get free test messages via CM Telecom • Improve your SMS delivery – Go to securenvoy.cmtelecom.com and create an account to start sending using the Global Gateway Priority. • If you are Dutch; download the whitepaper – www.cm.nl/sectorexpertise/beveiliging – If you speak English, contact me for a translation (cs@cm.nl).
  22. 22. THANK YOU PHIL UNDERWOOD – punderwood@securenvoy.com Global Head of Pre Sales CAS SCHALKX– cs@cm.nl Product Marketeer @cmtelecom cmtelecomtv +CMTelecomBVBreda cm-telecom

×