Post on 07-Aug-2015
Private and Confidential2
SAP
• SAP is one of the most widely used software to manage business operations and customer relations
• More than 248,500 customers in 500 countries
• 2000 vulnerabilities have been found in SAP in the last 3 years
• Freely available tool on internet can provide user name and password of users connecting to SAP on your local network
Private and Confidential3
Why AuthShield 2FA
• Most Cyber attacks are Phishing related scams and effective in majority of cases
• A non aware user is the weakest link in the Cyber Security Chain
• Any organization using VPN to provide connectivity to its network needs to have Two Factor Authentication to protect themselves
Private and Confidential4
AuthShield Authentication Security
Map the physical identity of the user to the server (Two Factor Authentication)
Identify the user based on – Something he knows (user name / password Something in the users possessions
Private and Confidential5
AuthShield Tokens for SAP Integration
One Touch Authentication for Windows / Linux / Mac Systems OS
One Touch Authentication for Android / iOS / Windows Phones
Private and Confidential6
Mobile One Touch Authentication
• Maps users identity to his registered mobile phones
• Anytime a user wishes to login, a ‘PUSH’ notification is sent with details on – – IP– Location– TimeStamp
• User has to ‘Approve’ the request to login
Private and Confidential7
System One Touch Authentication
• Maps users identity to his registered Desktop / Laptop
• Anytime a user wishes to login, a ‘PUSH’ notification is sent with details on – – IP– Location– TimeStamp
• User has to ‘Approve’ the request to login
Private and Confidential8
AuthShield Integration with SAP
• SAP provides multiple interfaces to login – – SAP GUI– SAP Netweaver
• AuthShield uses its patented Protocol Decoding engine to integrate an ‘Out of Box’ Authentication for SAP Login
• All requests are forwarded to AuthShield Protocol Decoding server
• AuthShield Protocol Decoding engine identifies Authentication Packets
Private and Confidential10
Process
• User Name and Password are authenticated from AD as normal
• 2FA Authentication Request is generated and send to AuthShield Authentication server
• AuthShield Authentication Server validates the second factor of authentication by sending a ‘Push’ notification to the users registered devices
• In case the user Validates (‘Approves’) the request, the request is forwarded to SAP Servers
Private and Confidential11
Changes in IT Architecture
• For integration of 2FA with GUI – Change in IP address
of SAP server in SAP GUI
• For integration of 2FA with Netweaver – Change in Internal DNS server settings to AuthShield Protocol Decoding Server
Private and Confidential12
Why AuthShield 2FA
Why us??Only organization in the world to have integrated 2FA at a Protocol level thereby achieving direct integration with Microsoft Exchange mail clients, Lotus notes, SAP, legacy applications etc.
Trusted by multiple Government and Information sensitive organizations across the world
Unparalleled Support
Robust and Proven Technology
Competitive Costs
Private and Confidential13
About Us
About the CompanyResearch Oriented Information Security
Organization
All technologies are indigenous - Evaluated and approved by multiple Government Agencies
Empanelled with DRDO
More than six years of experience in Cyber Security
Served key clients in Private and Public sector
Private and Confidential14
Contd.
Features Patents on 2FA with Protocol level decoding
Direct integration of 2FA with – SAP / ERP Mail servers – Microsoft Exchange,
OCMS, IBM Lotus Nodes, Zimbra etc VPN Database Queries Web Applications etc
Customized products focused on technology immersion in clients
Private and Confidential16
Some of our Government Clients
Delhi Police
Ministry of Home Affairs Indian Army
Ministry of Defense
National Investigation AgencyAP Police
UP Police
National Technical Research Organization
Chandigarh Police
JK Police
Private and Confidential18
Contact Us
@ authshield2FA
+91-11-47065866/ 45272272
info@innefu.com
www.auth-shield.com / www.innefu.com
876, 8th Floor, Aggarwal Cyber Plaza II,Netaji Subhash Place, New Delhi, India
GET IN TOUCH WITH US. WE’D BE HAPPY TO HELP