Tata Communications offers a Managed Authentication service to help secure access to critical data through two-factor authentication using a personal identification number and randomly generated token code. The service provides fully managed authentication servers and supports a choice of hard token and soft token options. It helps reduce complexity, costs, and improves security for network-connected assets.

1. Managed
Authentication
Securing access to critical data
E-business helps organizations work more effectively _ User provisioning, account creation/deletion, logging
and efficiently, providing access to corporate information and auditing
assets in ways never dreamed possible previously. _ 24/7 Tata Communications’ Service Desk to support
However, as companies open their networks to distributed token-related end-user inquiries — PIN resets, lost/
computing and a variety of remote users, valuable and damaged token replacements, application issues, account
sensitive information is potentially exposed. Security lockouts, modification of users and token resynchronization
breaches result in data theft and financial fraud, which can _ Comprehensive reporting — on-demand and scheduled for
cause major financial losses and brand damage. For this IT audits and internal billback
reason, organizations are enhancing security systems by _ Self-service portal which enables end-users and
adding an authentication layer to verify network users. administrators to track token usage, report generation,
PIN generation, PIN resets and emergency token requests
To help provide this protection, Tata Communications offers _ Money-back guarantees on the performance and
Managed Authentication as part of its portfolio of Managed responsiveness of our Managed Authentication Service
Security Services. Leveraging two-factor authentication, _ Performance-based SLAs and multiple service levels to
the Managed Authentication Service utilizes both a user- best address an organization’s unique requirements
created personal identification number (PIN) and a randomly
generated token code to protect network-connected Key Benefits
assets against unauthorized access. The token-generating _ Cloud based model offers low cost of operation, low CAPEX,
mechanism can include a physical device carried by users built-in scalability, reliability and out-of-the-box integration
or a software application loaded onto users’ existing cell with existing infrastructure.
phones, PDAs or desktops. _ With in-the-cloud 2FA validation, Tata Communications
handles the complexity of securing, managing, and
Key Service Features maintaining the infrastructure for strong authentication
_ Fully managed and secure authentication servers hosted at _ Helps reduce complexity of deployment, staffing
the Tata Communications’ Security Services Operations Center requirements, administrative and logistics overhead, user
_ Integration and configuration of the customer’s internal management and infrastructure costs for lower TCO
client applications _ Performance-based Service Level Agreements (SLAs) -
_ Choice of multiple form factors — Hard tokens, Desktop Soft covering change management, proactive system
Tokens and Mobile Soft Tokens monitoring, responsiveness, availability and token
_ Token life cycle management and token provisioning replacement
Enterprise
Managed Security Services

2. Managed Authentication
—Token Options
Managed Authentication — Token Options
An organization can select the token option most appropriate for their users and security policies.
Soft Token Managed Authentication Hard Token Managed Authentication
Tata Communications’ Soft Token Authentication has been Tata Communications’ hardware token, provided by RSA, is
developed to help companies authenticate users securely a physical device that generates a One-Time Password (OTP)
and conveniently without additional security hardware. Users every 60 seconds. Tata Communications supports complete
are no longer required to carry around multiple multiple end-to-end deployment and management of these tokens
hardware tokens. Instead, users can install token software on by administering the procurement, provisioning, application
their existing cell phones, PDAs or desktops. integration and end-user support.
_ Mobile token software can be easily installed on the user’s _ Unique time-synchronous approach automatically changes
mobile device and run on Blackberry, iPhone, or any Java the user’s password every 60 seconds
enabled mobile device _ RSA SecurID® authentication is built upon the Advanced
_ No replacement costs incurred — soft tokens from Tata Encryption Standard (AES) algorithm, a recognized
Communications never expire standard that is continuously scrutinized and challenged
_ Cellular network connectivity or SMS client are not required by cryptologists around the world to ensure its strength
to generate token codes and dependability
_ Multiple integration points for existing application and _ RSA SecurID Tokens support interoperability with over
services (HTTPS Servlet, Radius, Secure Web Services) 350 partner applications, including VPN, wireless, network
_ Supports multiple tokens on a single device communications, web applications and more
_ Token replacement and emergency token code provided to
ensure continuity of service
For more information on Managed Authentication Service or other Managed Security Services, please visit
www.tatacommunications.com/enterprise/security or email security.solution@tatacommunications.com
www.tatacommunications.com
© 2009 Tata Communications Transformation Services Ltd. All Rights Reserved. 2P_TC_MTA-data-sheet-V1.7_oct-2009