|
Overview
Form grabbers, keyloggers, and phishing are a few of the tools hackers use to steal user-login IDs. Selling stolen IDs has become a sophisticated business, which brings up the question: who really is on your network? Authenticating users is the right security issue to tackle today.
Two-Factor Authentication (2FA) systems screen users by asking them for something the user knows (like a password or PIN) and something the user has (such as a hardware token or card). HOTPin™ is Celestix’ new 2FA system. Celestix designed HOTPin from the ground up to deliver highly secure 2FA with one-time passwords (OTPs) — delivered to users’ mobile phones and PCs to slash costs. HOTPin is the first 2FA system fully integrated with Microsoft IAG 2007 SSL VPN software. Deployed on WSA™, the world’s best selling IAG appliance brand, HOTPin is the 2FA solution for IAG.
HOTPin™ drives out cost
Usually 2FA systems have very high per-user costs. Traditional hardware tokens used in legacy 2FA systems can cost $150 per user. In contrast, Celestix HOTPin™ systems put OTPs on users’ mobile phones (or PCs) to eliminate the entire cost of expensive single-function hardware tokens.
HOTPin’s server-side application deploys as a plugin on Celestix WSA™ series appliances. WSA appliances use IAG software to provide remote users with secure connectivity to networks by creating SSL VPNs. The HOTPin server plugin manages user credentials and authenticates users. HOTPin uses HOTP, which is an HMAC-based algorithm for generating OTPs. Unlike the algorithms used by many legacy vendors, HOTP is an open standard that has received extensive scrutiny from security-industry experts and leading academics.
| Important Note to Current WSA Owners! |
| Click here now to order your evaluation copy of HOTPin that includes server application and five user licenses—at no obligation. |
 click here for larger image
HOTPin puts OTPs on mobile phones two ways: clientless mode and client mode. In clientless mode, the HOTPin server application generates OTPs and sends them via SMS text messages to users’ mobile phones or PCs. Clientless mode is perfect for users who don’t have smart phones. For client mode, users download HOTPin client software to their smart phones or PCs. HOTPin client software generates OTPs directly on the smart phone or PC. The advantage of client mode is that it delivers OTPs regardless of wireless reception. HOTPin also has a Windows client you can install on PCs to deliver OTPs directly to the desktop. Here are the clients HOTPin currently supports in client mode:
RIM Blackberry |
Windows Mobile 5/6 -
Smart phones, Pocket PCs |
Apple iPhone |
Standard Win32 Software devices |
Screen Shots
|
