SMS PASSCODE® VERSION 6.2
Multi-factor Authentication Made Easy




1   Technology leading multi-factor authentication   31 January 2013
Ensure your identity when
accessing IT Systemes

            User ID + password




             User ID + password + token




                                          How hard is it to learn?
Phishing & Pharming
The tools and methods
2011 – The Year of catastrophic hack’s
First tokens, then certificates compromised

                        May 2011




                      Seed file stolen-              DigiNotar Certificate theft
                      All tokens needs replacement   creates havoc in goverments and
                                                     puts certificate security in question
Market proven
Global top 10 representation: Telco, Retail, Manufacturing, Services etc.

                                  Customers                        Partners




                                                                    Citrix Ready Solution
                                                                    of the Year Finalist



                                                                      Technology
                                                                      Alliances Partner




5    Technology leading multi-factor authentication                 31 January 2013
SMS PASSCODE®
Recognized technology leader


                                             • Gazelle Fast Growth Company 2012, 2011 & 2010
                                             • AlwaysOn 250 Companies to watch 2012
                                             • Gartner Magic Quadrant 2012
                                             • Red Herring Global 100 – most interesting IT companies. 2011 (& 2010)
                                             • Computing Security Awards Finalist 2011
                                             • ComOn Tech Gold 2010
                                                White Bull – Top 30 IT Companies in EMEA 2010
                                             • Citrix Ready Solution of the Year Finalist 2010
                                             • ”Product Excellence Finalist in two- and multifactor authentication” 2010
                                             • Secure Computing Magazine Global Top 5 Innovator 2009




6    Technology leading multi-factor authentication                                                     31 January 2013
What we do: Ensure your identity
With Two-factor authentication:
Factor 1: something you know
Factor 2: something you have




           Credentials lost either via                Augment with second login step or
           identity theft or memory!                  password reset via real-time mobile
                                                      one-time-password code delivery


8    Technology leading multi-factor authentication                            31 January 2013
The road to the best solution?

                                           User ID / ’Strong’ password


                              Biometrics                         Iris-scan


                   Hardware tokens                                       Grid cards



               Mobile softtokens                              Desktop tokens


        Certificates                                                         Hybrids


Real-time, challenge &                                session-based via SMS PASSCODE



10   Technology leading multi-factor authentication                                    31 January 2013
Demonstration




11      Technology leading multi-factor authentication   31 January 2013
Intuitive Secure Login Process

1. Session ID
generated                                                    System access
                                                 Log-in
                                                 system
2. Username and                                           Session ID #j23lk197fh
password entered
                                                                                         Username
3. OTP generated and                                                                     Password
linked to session ID,
4. OTP entered and
validated to session ID




                             PASSCODE: 597382
                             Company

  13     Technology leading multi-factor authentication                            31 January 2013
AUTHENTICATION CLIENTS


                                                         Citrix Web
                                                          Interface
                                                         Protection


                               ADFS 2.0                                            RADIUS
                                                                                   Protection



                                          NYC           LDN CPH SG


              ISA/TMG
                                                                                                  IIS
              Web Site                                SMS                                       Web Site
                                                                                                Protection
             Protection                           PASSCODE®
                                                       is a                                       ISAPI
                                                    two-factor
                                                  authentication
                                                     system

                  Windows                                                                  Windows
                    Logon                                                                    Logon
                  Credential                                                               Protection
                   Provider                                                                  GINA




                                                                         Citrix
                                             Citrix
                                                                        Access
                                          iPhone/iPad
                                                                      Gateway AE
                                            reciever
                                                                          4.5
Location detection and alerting
Detect and Alert of potential new threats


                                                       SMS PASSCODE
                                                           Great8
                                                                       United
                                                         From: UAE      Arab
                                                                      Emirates



    SMS PASSCODE      SMS PASSCODE
        Love2             Easy2
        From:         From: Denmark
   Trusted location
                                             NIGERIA
                                            BLOCKED
                                            LOCATION




  TRUSTED             DENMARK
  LOCATION
In remote places
They use celluar networks

Can we expect everybody                               There are 7.2 billion active cell
to have cell phones today?                            phones in the world!
And what about GSM
coverage in remote areas?                             99% of the world’s population has
                                                      access to a mobile phone

                                                      Only 2 billion people have access
                                                      to the Internet!


28   Technology leading multi-factor authentication                               31 January 2013
Any Questions?
Let’s talk about it…



44   Technology leading multi-factor authentication   31 January 2013

Sms passcode

  • 1.
    SMS PASSCODE® VERSION6.2 Multi-factor Authentication Made Easy 1 Technology leading multi-factor authentication 31 January 2013
  • 2.
    Ensure your identitywhen accessing IT Systemes User ID + password User ID + password + token How hard is it to learn?
  • 3.
    Phishing & Pharming Thetools and methods
  • 4.
    2011 – TheYear of catastrophic hack’s First tokens, then certificates compromised May 2011 Seed file stolen- DigiNotar Certificate theft All tokens needs replacement creates havoc in goverments and puts certificate security in question
  • 5.
    Market proven Global top10 representation: Telco, Retail, Manufacturing, Services etc. Customers Partners Citrix Ready Solution of the Year Finalist Technology Alliances Partner 5 Technology leading multi-factor authentication 31 January 2013
  • 6.
    SMS PASSCODE® Recognized technologyleader • Gazelle Fast Growth Company 2012, 2011 & 2010 • AlwaysOn 250 Companies to watch 2012 • Gartner Magic Quadrant 2012 • Red Herring Global 100 – most interesting IT companies. 2011 (& 2010) • Computing Security Awards Finalist 2011 • ComOn Tech Gold 2010 White Bull – Top 30 IT Companies in EMEA 2010 • Citrix Ready Solution of the Year Finalist 2010 • ”Product Excellence Finalist in two- and multifactor authentication” 2010 • Secure Computing Magazine Global Top 5 Innovator 2009 6 Technology leading multi-factor authentication 31 January 2013
  • 7.
    What we do:Ensure your identity With Two-factor authentication: Factor 1: something you know Factor 2: something you have Credentials lost either via Augment with second login step or identity theft or memory! password reset via real-time mobile one-time-password code delivery 8 Technology leading multi-factor authentication 31 January 2013
  • 8.
    The road tothe best solution? User ID / ’Strong’ password Biometrics Iris-scan Hardware tokens Grid cards Mobile softtokens Desktop tokens Certificates Hybrids Real-time, challenge & session-based via SMS PASSCODE 10 Technology leading multi-factor authentication 31 January 2013
  • 9.
    Demonstration 11 Technology leading multi-factor authentication 31 January 2013
  • 11.
    Intuitive Secure LoginProcess 1. Session ID generated System access Log-in system 2. Username and Session ID #j23lk197fh password entered Username 3. OTP generated and Password linked to session ID, 4. OTP entered and validated to session ID PASSCODE: 597382 Company 13 Technology leading multi-factor authentication 31 January 2013
  • 12.
    AUTHENTICATION CLIENTS Citrix Web Interface Protection ADFS 2.0 RADIUS Protection NYC LDN CPH SG ISA/TMG IIS Web Site SMS Web Site Protection Protection PASSCODE® is a ISAPI two-factor authentication system Windows Windows Logon Logon Credential Protection Provider GINA Citrix Citrix Access iPhone/iPad Gateway AE reciever 4.5
  • 13.
    Location detection andalerting Detect and Alert of potential new threats SMS PASSCODE Great8 United From: UAE Arab Emirates SMS PASSCODE SMS PASSCODE Love2 Easy2 From: From: Denmark Trusted location NIGERIA BLOCKED LOCATION TRUSTED DENMARK LOCATION
  • 14.
    In remote places Theyuse celluar networks Can we expect everybody There are 7.2 billion active cell to have cell phones today? phones in the world! And what about GSM coverage in remote areas? 99% of the world’s population has access to a mobile phone Only 2 billion people have access to the Internet! 28 Technology leading multi-factor authentication 31 January 2013
  • 15.
    Any Questions? Let’s talkabout it… 44 Technology leading multi-factor authentication 31 January 2013