1

eToken SolutionseToken SolutionsJanuary 2003January 2003

www.eAladdin.com/eToken

2

• 3 Good reasons to use eToken

• Simple & Easy to use

• Enhanced securityEnhanced security

• Cost effective, versatile and fully mobile solutionCost effective, versatile and fully mobile solution

• Solutions and Technical Information Solutions and Technical Information

• Customers & ReferencesCustomers & References

• Press Coverage & Awards Press Coverage & Awards

• About Aladdin About Aladdin

Digital Identity ManagementDigital Identity Management

3

3 Good Reasons To Use 3 Good Reasons To Use eTokeneTokenSimple & Easy to useSimple & Easy to useSimple & Easy to useSimple & Easy to use Insert eToken into the USB port. Type in a simple password. Automatically logon to your application.

Enhanced SecurityEnhanced SecurityEnhanced SecurityEnhanced Security Logon requires eToken & Password (2–factor authentication). All access profile, keys and certificates are securely stored on the eToken. Secure SmartCard technology.

Cost effective & fully mobileCost effective & fully mobileCost effective & fully mobileCost effective & fully mobile Increased ROI through improved password management. Standard USB connectivity enables users mobility and eliminates the need to install and maintain a separate reader. Standard connectivity to security systems eliminates the need to make changes to network topology or install dedicated servers.

4

Just plug in your eToken(Factor 1)

And type your password(Factor 2)

Without both “Factors”, a user cannot logon, or sign a transaction.

Simple & Easy to UseSimple & Easy to Use Insert eToken into the USB port. Type in a simple password. Automatically logon to your application.

5

Your VPN AccessYour VPN Access

Your Network AccessYour Network Access

Your Web AccessYour Web Access

Your Secure eMailYour Secure eMail

Your Computer Data ProtectionYour Computer Data Protection

Your Secure Key StorageYour Secure Key Storage

Your Secure Certificate StorageYour Secure Certificate Storage

Your Secure Password Storage

Your Secure Password Storage

Your Secure Key GenerationYour Secure Key Generation

It’s Your Digital Identity OrganizerIt’s Your Digital Identity Organizer

Simple & Easy to UseSimple & Easy to Use

6

Does this sound familiar?

• Writing your passwords on a piece of paper, keeping them in your wallet or pasting them on your computer screen.

• Using the same password for multiple applications so it will be easy to remember.

• Being annoyed when asked by your network administrator to change your password, or adhering to rigid password rules.

• Forgetting your password.

Enhanced SecurityEnhanced Security Logon requires eToken & Password (2–factor authentication). All access profiles, keys and certificates are securely stored on the eToken. Secure SmartCard technology.

7

Enhanced SecurityEnhanced SecurityWhy passwords are not enough !

A recent NTA Survey found that:• A typical intensive IT user has more than 21

passwords and has 2 strategies to cope, neither of which are advisable from a security stand point; they either use common words as passwords or keep a written record of them.

• 84% of users consider memorability the most important attribute of a password, resulting in 81% selecting a common word as a password.

• 67% of all users rarely change their passwords, and 22% said they would only change if forced to do so.

Source www.silicon.com , 2002 NTA Monitor Password Survey

8

Enhanced SecurityEnhanced SecurityeToken offers advanced Smartcard

security in a USB Token form-factor!

eToken Feature Benefit

2-Factor Authentication.i.e. a personal PIN and an eToken are required before authenticating.

Offers very high level of security by ensuring that only an authorized person in possession of an eToken and a valid PIN can make use of it.

Logical and physical protectioni.e. Tamper-proof. Locks after several wrong password attempts, …

Ensures that data on eToken can not be compromised if lost or attacked.

Onboard sensitive key operations and secure storage of access credentials.i.e. RSA (1024-bit) PKI operations can be done onboard, including key generation

Ensures that user keys and credentials are fully protected and mobile and not exposed to the hostile PC environment. Digital signatures are ultra secure.

Advanced security certificationsi.e. FIPS 140 1 (2) and ITSEC LE4

Ensures critical security validation by experts.

Standards CompliancyITSEC LE4

FIPS 140-1 2/3

9* With Turn Over greater than $500m

Cost Effective & Fully MobileCost Effective & Fully Mobile Increased ROI through improved password management. Standard USB connectivity enables users mobility and eliminates the need to install and maintain a separate reader. Standard connectivity to security systems eliminates the need to make changes to network topology or install dedicated servers.

• META Group research shows that large organizations (*) typically have more than 75 applications, databases and systems requiring authentication. Users are also required to manage these passwords with different requirements and processes. META Group also highlights that implementation of Single Sign On technology provides bottom line benefits resulting in 32% reduction in help desk call volumes and 32% increase in security. August 2002, The Value Of Identity Management

• Gartner Group estimates that password-related calls to IT service desks from internal end-users average 4 per year per user. Help desk support costs range from $51 to $147 per password reset action. April 2002

• Gartner Research also believes the advantages from using strong authentication has increased and the disadvantages of implementation decreased to make smartcards the way to go. Gartner Research Note “Its time to get smart about smartcards. October 2001.

10

Cost Effective & Fully Cost Effective & Fully MobileMobile

eToken Feature BenefitSupports different user management systems; i.e. LDAP, RADIUS, Domain servers, Firewalls, eMail servers…

Seamless integration into the network. No need for complex implementations.

Support for different types of authentication technologies, i.e. PKI, User+Password, OTP…

Ensures protection of investment, ease of use and easy migration from current to future technologies.

Same software support different types of hardware devices. i.e. USB Tokens, Smartcards & Readers

Provides flexibility to customer needs and ensures protection of investment.

Standard USB connectivity Seamless connectivity into any PC environment via USB port. No additional reader is required.

Standard connectivity to security systems via industry standards / interfaces. i.e.CAPI, PKCS11,MS Gina…

Eliminates the need to make changes to network topology or install dedicated servers.

11

Cost Effective & Fully Cost Effective & Fully MobileMobile

• eToken; the ultimate authentication solutions!

• Simple to use and administrate.• Only1 password to remember.• Changes to network topology or addition

off an additional authentication server are not mandatory.

• No battery required.• Fully portable.• Highly secure.

12

No USB port in front? Use a simple extension

cable Versatile & Mobile:Connect from any PC

Cost Effective & Fully MobileCost Effective & Fully Mobile

Simply chose your preferred form-

factor or mix and match!

* eToken is also available in a

traditional Smartcard form-

factor.

13

Cost Effective & Fully MobileCost Effective & Fully Mobile

eToken SiSO

Solutions

Standard SSO

Solutions

Quick to deploy Yes No

Easy to maintain Yes No

Multiple application support

Yes Limited

Total Cost of Ownership

Medium - Low High

Required back-end server and integration

No Yes

eToken - Simple Sign On (SiSO) compared to Standard SSO

Identity management technologies such as PKI and SSO will win a significant chunk of IT security spending. 17% of European firms plan to implement PKI, and 14 percent plan to implement SSO in the next 12 to 36 months. (IDC, 26 Nov 2002)

14

Solutions & Technical Solutions & Technical InformationInformation

Increase your Increase your businessbusiness

New services to your New services to your customers!customers!

Increase your Increase your businessbusiness

New services to your New services to your customers!customers!

Secure your Secure your networknetwork

Protect your Protect your corporate network corporate network

and employees!and employees!

Secure your Secure your networknetwork

Protect your Protect your corporate network corporate network

and employees!and employees!

eToken Secures Your Business

15

• Strongly authenticate users– Enable access only to

authorized users.

• Digitally sign business transactions– Prove non-repudiation.– Ensure integrity of transactions

and information.

Authenticate

Digitally Sign

Solutions & Technical Solutions & Technical InformationInformationWith eToken You Can!With eToken You Can!

16

eToken Enterprise• PKI Solutions• Network Logon• WSO

eToken SDK• Development APIs.

– Win 32, 16 Bit PCSC, CAPI, PKCS11, Linux, FreeBSD

Solutions & Technical Solutions & Technical InformationInformationeToken SolutionseToken Solutions

17

eToken For PKI SolutionseToken For PKI Solutions

Solutions & Technical InformationSolutions & Technical Information

eToken Enterprise SolutionseToken Enterprise Solutions

eToken for WSO SolutionseToken for WSO Solutions

eToken For Network Logon

eToken Simple Sign On (Coming Soon)eToken Simple Sign On (Coming Soon)

19

• Advanced Smartcard chip technology, with on-board crypto processing RSA 1024, 3xDES, SHA-1.

• Secure on-board key generation and storage of PKI keys and certificates. Private keys never leave the eToken.

• Enforceable password retry counter, 3 to15.

• Password quality check and enforcement.

• 16 & 32 KB memory models with protected Serial ID.

• Tamper evident & water resistant shell and tamper proof chip.

• 10 year memory data retention.

• Standard support for security APIs: CAPI, PKCS#11 and Siemens-Infineon APDU.

• Infineon SLE66 Chip certified ITSEC-LE4

• Siemens CardOS M4- certified ITSEC LE4

• FIPS 140 1 (2&3) compliancy

Solutions & Technical Solutions & Technical InformationInformationeToken PRO SpecseToken PRO Specs

21

Customers & ReferencesCustomers & References

22

                                                                                                                     

                     

                                                                                                                             

             

2001 & 2002 Coverage

Press Coverage & AwardsPress Coverage & Awards

23

“eToken’s portability and security provide not only a method to ensure powerful data integrity, authentication and encryption, but also a convenient way of gaining peace of mind by carrying your digital identity with you.”

“Aladdin’s eToken provides powerful network & e-business security through a convenient USB token that can be carried on a key chain…”

“eToken’s fully portable USB device offers a cost-effective method for authenticating users when accessing a network, and for securing electronic business applications.”

Paul Robinson, SC Magazine

Winners, Best Security Device 2 Years Running 2001, 2002

Press Coverage & AwardsPress Coverage & Awards