PINsafe by SWIVEL
-
Upload
ajldr -
Category
Technology
-
view
295 -
download
3
Transcript of PINsafe by SWIVEL
Presentation
Alex Rocha Alex Rocha Country Manager Southern Europe & BeneluxCountry Manager Southern Europe & Benelux
Swivel Secure: Company
WorldwideWorldwide VARVAR
WorldwideWorldwide VARVAR
LicensesLicenses+1Mk+1Mk
LicensesLicenses+1Mk+1Mk
WorldwideWorldwidePatentedPatented
WorldwideWorldwidePatentedPatented
ClientesClientes+1000+1000
ClientesClientes+1000+1000
Local OfficeLocal OfficeLocal OfficeLocal Office
EstablishEstablish20002000
EstablishEstablish20002000
Marr GroupMarr Group +1.2Bn+1.2Bn
Marr GroupMarr Group +1.2Bn+1.2Bn
PINsafePINsafe20032003
PINsafePINsafe20032003
PINsafe: Product
CertificatedCertificatedVAR: 671VAR: 671
CertificatedCertificatedVAR: 671VAR: 671
Web AdminWeb AdminConsoleConsole
Web AdminWeb AdminConsoleConsole
SupportSupport24/7/36524/7/365
SupportSupport24/7/36524/7/365
PerpetualPerpetualSaaSSaaS
PerpetualPerpetualSaaSSaaS
WinningWinningAwardsAwards
WinningWinningAwardsAwards
9 Years9 Years9 Years9 Years HA &HA &Virtual IPVirtual IP
HA &HA &Virtual IPVirtual IP
PINsafePINsafev.3.9v.3.9
PINsafePINsafev.3.9v.3.9
SWIVEL and PINsafe
PortugalSpain
UK Moscow
Australia
Dubai
US
FranceGermany
+100.000 licensesSwivel offices
PartnershipsCI
TRIX
|
G
OO
GLE
APP
S
|
MIC
ROSO
FT
AwardsSe
curit
y IT
Aw
ards
World’s Hottest Info Security Companies
Referencias World Wide
Iberian References
Technology Overview
PINsafe
What is PINsafe?
What is PINsafe?
TOKEN-LESS 2FA Technology
MULTI FACTOR Authentication
PIN Protection
NEVER have to type your Personal PIN
Instant Provisioning of users avoiding shipping of tokens
Stronger that OTP
Low management costs
Flexible
PINsafe Protocol
8 1 6 9 5 0 3 4 7 2
51 08
1 2 5 6
Example 1:
PIN
Security String
One Time Code
Changes for every authentication
attempt
Stays the same
PINsafe Protocol
6 5 2 7 8 9 4 1 3 0
85 96
1 2 5 6
Example 2:
Security String
Changes for every authentication
attempt
Stays the same PIN
One Time Code
CORE vs APP vs DEVICES
Technology Overview
1 product 4 flexible solutions
Technology Overview
PINsafe SMS/e-Mail
OTP – SMS/e-MAIL
PINsafe OTC-----------------------------------
651973-----------------------------------
01-02-2010 16:43
OTPOTPOTPOTP
Dual Channel – SMS/e-MAIL
PINsafe Security String 01
-----------------------------------1 2 3 4 5 6 7 8 9 01 7 3 9 2 4 6 5 0 8
-----------------------------------
PINsafe Security String 01
1 2 3 4 5 6 7 8 9 0A Z D I K H S L C
PINsafe Security String 02
1 2 3 4 5 6 7 8 9 07 4 8 2 9 3 6 1 8 0
PINsafe Security String 03
1 2 3 4 5 6 7 8 9 00 1 2 3 8 9 4 7 6 5
PINsafe Security String 04
1 2 3 4 5 6 7 8 9 00 1 5 8 3 4 9 7 6 2
Security StringSecurity StringSecurity StringSecurity String MultiMultiSecurity StringSecurity String
MultiMultiSecurity StringSecurity String
Dual Channel – SMS/e-MAIL
Home Banking SMS-----------------------------------
1 2 3 4 5 6 7 8 9 01 7 3 9 2 A J I L 8
-----------------------------------Operation: AT28391
27-08-2010 16:45
Encrypted 3PartEncrypted 3PartSecurity StringSecurity String
Encrypted 3PartEncrypted 3PartSecurity StringSecurity String
Technology Overview
PINsafe SMS Inbound
3. PINsafe SMS Inbound
SMS Message to PayPal
4951
Technology Overview
PINsafe APP
Dual Channel - iPhone
Available in Apple Store (iTunes)
99 security strings (off-line )
Registration and OTC top up through 3G or GPRS connection
Fingerprint authentication of the device
Dual Channel - Android
Available in Android Store
99 security strings (off-line )
Registration and OTC top up through 3G or GPRS connection
Fingerprint authentication of the device
Dual Channel – WM6 & WM7
Available by ActiveSync
99 security strings (off-line )
Registration and OTC top up through 3G or GPRS connection
Fingerprint authentication of the device
Dual Channel - Blackberry
Installation over-Air (GPRS or Wireless )
99 security strings (off-line )
Registration and OTC top up through 3G or GPRS connection
Fingerprint authentication of the device
Dual Channel - Swivlet
Installation over-Air (GPRS or Wireless )
99 security strings (off-line )
Registration and OTC top up through 3G or GPRS connection
Menu
OTCStatus (52)ChangePIN
ConfigurationHelp
OTC3491,53
Menu
OTCStatus (51)ChangePIN
ConfigurationHelp
Technology Overview
PINsafe TURing
Single Channel - TURing
AnimatedAnimatedAnimatedAnimatedStaticStaticStaticStatic
Technology Overview
PINsafe PINpad
Single Channel - PINsafe
PINpadPINpadPINpadPINpad
Technology Overview
PINsafe VOICE
4. PINsafe VOICE
Call
4951
Technology Overview
Security String
Security String
Numbers
Upper case letters
Lower case letters
Mixed case letters
1 in 10,000
1 in 279,840
1 in 279,840
1 in 4,477,455
possible possible 4 digit pin 4 digit pin combinationscombinations
Numbers and upper case letters
1 in 390,624
Technology Overview
Multi Repository
Sync with user repository
XML
Internal repository
Managed Via PINsafe
Active Directory
LDAP Sync
Manage Users by adding them to AD Groups
LDAP
LDAP Sync
Manage Users by adding them to LDAP Groups
Other Database
Dependant upon database schema
XML API
Web based data entry
Technology Overview
High Avaiability
External Data Store
Active-Active or Active-Passive HA solution
Virtual IP
Disaster Recovery solution
SWIVEL Virtual IP technology
DB Cluster
Source
Source
Technology Overview
Appliance HW & VM
Hardware Appliance
Stand-alone
HA Active/Active
HA Active/Passive
HA Active/Passive with DR
Swivel Appliance
Virtual Appliance
Stand-alone
HA Active/Active
Technology Overview
Integration
What does PINsafe integrate with?
What does PINsafe integrate with?
100+
Technology Overview
OWA
Outlook Web Access 2007
Integration: IIS/OWASMS & TURing
ISA 2006
Integration: ISA/OWASMS & TURing
Technology Overview
B2B
WEB
Website Integration Security String:
TURing
Technology Overview
VPN SSL
IAG/UAG Microsoft
UAG Integration Security String:
TURing
CITRIX
CAGEE Integration Security String:
TURing
CWI Integration Security String:
TURing
CISCO
CISCO Integration Security String:TURing y SMS
Technology Overview
End User Login
Windows 7 and 2008Offline
Integration: WindowsSMS & TURing
Windows XP and 2003Online
Integration: WindowsSMS & TURing
Unicredit: Case Study
Case Study: UNICREDITAutentication VPN SSL
50.000 SSL VPN users with
2FA
Case Study: UNICREDITAutentication VPN SSL
( x24 ha A/A + x2 ha A/A = MFA )50.000 users
Unicredit: Project Study
Project: UNICREDITBanca Online
Project: UNICREDITBanca Online
Unicredit Banca SMS------------------------------
1 2 3 4 5 6 7 8 9 01 7 3 9 2 4 6 5 0 8
------------------------------Operazione: AT28391
27-08-2010 18:45
Contacts
www.swivelsecure.com
Flexible to meet your needs
No more tokens
Saves you time and money