Multi-Factor Authentication Portfolio

Multi-factor authentication ensures that a user is who they claim to be. The more factors used to determine a person’s identity, the greater the trust of authenticity. MFA can be achieved using a combination of the following factors: Something You Know – password or PIN. Something You Have – token or smart card (two-factor authentication). Something You Are – biometrics, such as a fingerprint (three-factor authentication). Because multi-factor authentication security requires multiple means of identification at login, it is widely recognized as the most secure method for authenticating access to data and applications. - See more at: http://www.safenet-inc.com/multi-factor-authentication/#sthash.v1jMRqJD.dpuf

SafeNet's multi-factor authentication software delivers the protection you expect, while enabling customers with broader choice, improved visibility, and the ability to expand into the future. As a result, organizations using our MFA software have:

• Better self-control of data - SafeNet enables customers with the option to create and control their own token data, so there is no reliance on a third-party vendor

• Improved management and visibility – SafeNet's solutions deliver single-server management, providing full control, simple administration, and reduced cost and staff burden

• Expanded options – SafeNet delivers the broadest choice when it comes to access security methods – so you can meet the needs of any user and any risk level (hardware or software, certificate-based authentication or traditional one-time-password, on-premise, or into the cloud)

• Future-ready solutions - SafeNet provides new solutions that deliver MFA and single sign-on (SSO) for cloud applications as well as credentialing for mobile device management

• Painless migrations - SafeNet offers seamless migration to cloud-based authentication, which maintain your existing investments and cause no disruption to end users

- See more at: http://www.safenet-inc.com/multi-factor-authentication/#sthash.v1jMRqJD.dpuf

Strong authentication refers to systems that require multiple factors for authentication and use advanced technology, such as secret keys and encryption, to verify a user’s identity. The simplest example of is a consumer accessing funds via his or her ATM card. This requires something the user has (their card), and something they know (their PIN). Most people wouldn't want their bank to allow access to their checking account with just one factor. 

Yet many organizations allow entrance to their valuable VPN, Citrix, and Outlook Web Access resources (often much more valuable than a single personal checking account) with only one factor—often a weak password. Strong authentication enables organizations to strengthen the protection of these vital resources.

While the decision to use multiple factors for verifying users' identities is clear cut, deciding on an approach is anything but. Today, there are hundreds of options, each presenting its own specific advantages and tradeoffs.

- See more at: http://www.safenet-inc.com/multi-factor-authentication/#sthash.v1jMRqJD.dpuf

A strong authentication solution that validates the identities of users and computing devices that access the non-public areas of an organization’s network is the first step in building a secure and robust information protection system.

1. Match Your Authentication Solution to Your Business, Users, and Risk

A flexible approach that enables an organization to implement different authentication methods based on different risk levels may ensure a robust system that can be efficiently and cost-effectively deployed.

Technologies for multi-factor authentication include:

• One-Time Passwords (OTP): OTP technology is based on a shared secret or seed that is stored on the authentication device and the authentication backend. This method ensures authentication by generating a one-time passcode based on the token’s secret.

• Certificate-based Authentication (CBA): This method ensures authentication using a public and private encryption key that is unique to the authentication device and the person who possesses it. CBA tokens can also be used to digitally sign transactions and to ensure non-repudiation. SafeNet delivers certificate-based authentication via USB tokens and smart cards.

• Context-based Authentication: Context-based authentication uses contextual information to ascertain whether a user’s identity is authentic or not, and is recommended as a complement to other strong authentication technologies. In order to develop a robust authentication solution, organizations should consider their business, users, and risk, and select a solution that provides them with the flexibility to adapt as needed. For example, if organizations are interested in implementing additional security solutions that rely on PKI technology, such as full-disk encryption, network logon, and digital signatures, or are thinking about adding such solutions in the future, they should consider CBA, as it enables these applications.

2. Prefer Solutions That Adhere to Standards-Based Security and Certifications

Products that are built upon standards-based crypto-algorithms and authentication protocols are preferred. Unlike proprietary algorithms, standards-based algorithms have gone through public scrutiny by industry and security experts that reduces the chance of any inherent weaknesses or vulnerabilities. Moreover, they enjoy broad industry support.

3. Consider All Access Points

Organizations need to ensure that access to all sensitive information is authenticated, whether the information resides on premise or in the cloud. Organizations should implement the same security mechanisms for cloud resources as they would for remote access to the corporate network. In addition, organizations should deploy security mechanisms to ensure that users accessing network resources from their mobile consumer devices (e.g., tablets, smart phones) are securely authenticated.

4. Ensure the Solution Reduces IT Administrative and Management Overhead

Authentication environments have to offer convenience and transparency for end users and administrators alike. Following are several guidelines that can help organizations achieve these goals:

• Administrative Controls: Administrators need to be able to manage all users across all devices and resources. To meet this charter, they need automation, central management, and visibility into user access across multiple resources. To ensure users have an optimal experience, administrators need to be equipped with granular controls and comprehensive reporting capabilities.

• End-User Convenience: To ensure security controls are enforced, while streamlining user access, organizations should have the ability to offer users the type of authentication device that most suits their role and security profile. Organizations can offer their users several authentication methods, ranging from context-based authentication, through SMS, phone tokens or hardware tokens – ensuring user acceptance and compliance with corporate security policies.

- See more at: http://www.safenet-inc.com/multi-factor-authentication/strong-authentication-best-practices/#sthash.U1FORuDK.dpuf

Multi-Factor Authentication

Enterprise Solution Pack

eToken 4100

eToken 5100

eToken 5200

eToken Network Logon

eToken NG-OTP

eToken PASS

eToken PRO

eToken PRO Anywhere

eToken PRO Smart Card

eToken SDK

eToken Virtual

Gold OTP

iKey USB 4000

iKey USB 1000

MobilePASS

SafeNet Authentication Client

SafeNet Authentication Manager

SafeNet Authentication Manager Express (SAMx)

SafeNet Authentication Service

SmartCard 400

- See more at: http://www.safenet-inc.com/complete-products-list/#sthash.tfX4UuFF.dpuf

Data Encryption & Control

KeySecure

KeySecure with Crypto Pack

ProtectApp

ProtectDB

ProtectFile

ProtectVStorage

SecureTokenization Manager

Virtual KeySecure

- See more at: http://www.safenet-inc.com/complete-products-list/#sthash.tfX4UuFF.dpuf

Hardware Security Modules

Common Criteria

Crypto Command Center

FIPS 140-2

IdenTrust Compliance

Luna EFT

Luna G5

Luna PCI-ELuna SA

Luna SPPCI Compliance

ProtectServerView PIN+

- See more at: http://www.safenet-inc.com/complete-products-list/#sthash.tfX4UuFF.dpuf

High Speed Encryption

CM7 Management Platform

CN1000 Mutli-Protocol

EncryptorCN3000

Ethernet/SONET

EncryptorCN4010

Ethernet Encryptor for SMEsCN6010

Ethernet EncryptorCN6040

Ethernet/Fibre Channel Encryptor

CN6100 10 Gbps Ethernet EncryptorCN8000

Multi-Link Ethernet Encryptor

Ethernet Encryption

Fibre Channel Encryption

Security Management Center (SMc)

SONET Encryption

- See more at: http://www.safenet-inc.com/complete-products-list/#sthash.tfX4UuFF.dpuf