IDConfirm 1000 - SA Server Software

Protecting your network identities IDConfirm 1000 gather available components needed to build your answer to strong authentication deployment. Those elements rely on the open standard OATH. Using IDConfirm 1000, Enterprises can deploy strong authentication for a low total cost of ownership. This is realized through packaged and plug and play solutions adaptable to existing networks and AAA servers. Our wide range of hardware and software solutions embed smart card technology, mobile phones offering the highest level of security for two-factor authentication. You can choose a smart card, token, Mobile phone usable in a connected or an unconnected environment according to your architectural constraints. Our software solutions are open, scalable and evolutive. Mobile OTP offer that is convenient, secure and available on leading smartphone and phones.

Authentication methods:
IDConfirm 1000 uses the following methods for main authentication:
   - OATH HOTP, TOTP (Event based, Time based)
   - SMS OTP
   - EMV CAP (OTP, challenge-response, transaction data signature).

Architecture:
IDConfirm 1000 is a Web application relying on the following Web servers:
   - Apache Tomcat on Windows and Linux,
   - Web Sphere on AIX
   - Any other Web server could be supported through a specific validation. 

The chosen architecture allow "High Availability" and "Fail-Over" configuration relying on operating systems, databases and monitoring mechanisms.

Databases:
IDConfirm 1000 stores OTP related data and User data if needed (DB mode) in:
   - Firebird
   - MySQL
   - MS SQL
   - Oracle
   - IBM DB2 (Windows or AIX)
   - Any other SQL database could be supported through a specific development

 User Repository:

IDConfirm 1000can be connected to the following LDAP when Users account are managed externally (Mixed mode):
   - Microsoft Active Directory,
   - Novell eDirectory,
   - Sun One,
   - Open LDAP,
   - Any other LDAP could be supported through a specific development.

Authentication Services interface:
Authentication services are integrated using the following interfaces:
   - HTTP or HTTPS requests,
   - XML requests sent to Web API,
   - RADIUS requests through IDConfirm 1000 RADIUS agents for
        " Microsoft IAS or NPS (Windows Server 2008),
        " Juniper Steel Belted RADIUS,
        " FreeRADIUS
   - Proprietary request through IDConfirm 1000 Application agents for
        " Citrix Web Interface,
        " Microsoft OWA,
        " Microsoft ISA 
        " Microsoft IAG

Security Modules:
The following security modules can be connected to the server:
   - nShield or payShield from NCipher,
   - Crypt2Pay from Bull - Support OATH and EMV-CAP,
   - Java Key Store software module,
   - Any other HSM could be supported through a specific development.

Compatibility: