News

CRYPTOCard Launches CRYPTO-Server 6.2

Monday 15 November 2004 16:27 CET | News

CRYPTOCard has launched CRYPTO-Server 6.2, the worlds first browser-integrated two-factor authentication solution for Apache web servers.

CRYPTO-Server 6.2’s CRYPTO-Web component makes it simple to authorise and positively identify all Apache web server users by coupling something in the user’s possession (a multi-function smart card, USB dongle token, hardware token, or software token), with something the user knows (their PIN). With almost 75 percent (or more than 13 million) of the world’s web servers running on Apache, CRYPTO-Server 6.2 represents a significant advance in authentication technology for the dominant player in the web medium. CRYPTO-Server 6.2’s authentication server generates a unique password for every log-on attempt, eliminating the need for users to memorise, change, or manage a variety of static passwords. This not only significantly reduces the help-desk costs associated with resetting forgotten passwords, but also negates the obvious security risk resulting from users writing down their passwords (or using the same one for everything) or hackers obtaining stolen credentials (by network sniffing, social engineering, or shoulder-surfing). CRYPTO-Server 6.2’s familiar ATM-style protocol also eliminates the user resistance often encountered when organisations attempt to implement an additional layer of security, by making the system easier to use than static passwords. CRYPTO-Server 6.2’s browser-based administrative interface makes it simple for organisations to support hundreds of Apache servers (for example, in a web farm) through a single interface, providing a single point of administration that makes it easy for organisations to implement and administer token-deployment – by simply importing existing LDAP (e.g. Active Directory or Open LDAP) directories or to support web farms or virtual web sites. CRYPTO-Server allows easy deployment and activation of software tokens, which can reside on a user’s handheld (for Win CE devices), desktop, laptop, or smart card – or for users to activate their hardware tokens (USB, key-chain, or numeric pin-pad). CRYPTO-Server 6.2 also includes CRYPTOCards innovative Follow-Me Computing that makes it easy for server-based computing (Citrix or MS Terminal Services) users to start a remote session by simply inserting their CRYPTOCard multi-function smart card, or USB dongle token, and entering their PIN. Then, after logging off by simply removing their authentication device, the user is free to reinsert their smart card or USB dongle token and enter their PIN at another thick-client or thin-client terminal to resume the same session at exactly the point at which it was suspended (e.g. Cell D3, in a Microsoft Excel spreadsheet) – the applications literally follow the user around the building or campus. The system can also be set by the administrator to lock the machine or to simply log-off the user. By coupling Follow-Me Computing with the door access capability of CRYPTOCard’s smart card, an organisation can ensure that users have to log off after every session in order to be able to travel around the campus - eliminating the considerable security risk associated with users leaving a computer logged on – particularly in the health services, government, and financial services sectors. Alternatively, CRYPTOCard’s newly-developed USB dongle token, that plugs straight into a computer’s USB port, enables organisations to provide users with smart card-like ease of use without incurring the expense of having to purchase smart card readers. CRYPTO-Server 6.2s other components include CRYPTO-Web, which protects Apache and IIS Websites down to the page level; CRYPTO-Kit, which provides developers with the tools to make it simple to integrate CRYPTOCards technology with existing security applications/systems; CR


Free Headlines in your E-mail

Every day we send out a free e-mail with the most important headlines of the last 24 hours.

Subscribe now

Keywords:
Categories: Payments & Commerce
Companies:
Countries: World
This article is part of category

Payments & Commerce