Why strong authentication: Providing strong identities in the digital world
Authentication is really all about confirming the identity of a user to a system.
In many cases today, authentication is synonymous with a fixed password that may change from time to time. Such authentication was not designed for the Internet world and suffers from many known vulnerabilities, phishing being the best known. Strong authentication systems are designed to bolster the quality of identity claim verification.
One way of obtaining strong authentication is to use two-factor authentication (2FA). Two-factor authentication refers to a system where two factors are used together in order to strengthen a proof of identity.
Freja
Freja is a complete solution for managing strong authentication for internal and external users. By basing Freja on open standards OATH), strong authentication can be provided at a competitive price while maintaining high security.
Freja supports the concept of remote authentication to collaborative/regional or National IDP:s (Identity Providers). Freja can be used to enable local authentication using a token issued by an IDP and, conversely, a token issued locally can be re-used to authenticate to a shared resource if the token issuance process is trusted by that resource.
Security Devices
Verisec has chosen a number of vendors that support the OATH standard and which have been tested to work with the Freja appliance. Verisec resells these devices as part of a total delivery and will manage any warranty issues that may arise with the device.
Freja supports a wide range of software and hardware based devices, ranging from smart phone/ tablet based authenticators and SMS based OTP (one-time passwords) to hardware based tokens and smart cards.
PIN Mailers and Pinelope
Pinelope is used to create PIN mailers used to distribute passwords or PIN (Personal Identification Numbers) in a tamper proof envelope to avoid unauthorised access. The same technology can be used for distributing salary statements, pre-generated login OTPs or other personal information.
Verisec also offers PIN mailers as a service to banks, government or corporate customers.