PINsafe

One of the fastest growing problems for the Internet community is the issue of user authentication and data security. Protecting personal and confidential information from unauthorized access and preventing fraudulent transactions using stolen digital identities are now the two greatest challenges for IT security specialists. These issues need to be addressed if the current $24bn annual losses from the e-economy are to be stemmed.

Significant technological advances have been made to frustrate hackers from simply breaking into enterprise systems but up until now little progress has been made in securing the weakest link in the network, the user authentication process and in particular, the vulnerability of the keyboard. When passwords and PINs are keyed in and sent over networks, they are vulnerable to capture in a variety of ways including:

malware attacks (e.g. keylogging)

  Or

direct observation (also known as shoulder surfing).

PINsafe is Swivel Secure's Award Winning multi-factor authentication solution. It provides safe authentication and yet it is easy to deploy and use. It can be used to authenticate VPN access or website access, it can also be integrated with a range of other products, for example Microsoft ISA Server.

PINsafe is a flexible solution that offers a wide range of authentication models. The use of the patented one-time code extraction protocol means that PINsafe can offer both single and multi-channel and single and multi-factor authentication solutions.

A feature of its design is that the full range of authentication models is available to every PINsafe server, allowing for different users on the same PINsafe server to have different authentication models.

Demos

Swivel Protocol Demo

Swivel's authentication technology is based on a patented algorithm that uses a fixed 4 digit PIN and randomly generated 10 digit security string to create a one-time code for each login session.

Click here for a flash demo.

Swivel Dual Channel

Swivel's dual channel, two-factor authentication uses a mobile device such as a phone or PDA as a proxy token to generate a one-time code (OTC). The OTC is returned to the server via an SSL Internet connection.

Click here for a flash demo.

Swivel Single Channel TURing

Swivel's TURing interface delivers the security string as an obfuscated GIF. The OTC can be extracted by human sight but cannot be read by machine OR software.

Click here for a flash demo.