In today's online business world, plagued by phishing, pharming, keylogging, spoofing, man-in-the-middle attacks and other forms of online scams, passwords are no longer sufficient to protect businesses and their customers. Implementing a strong, multi-factor and mutual authentication solution is essential for businesses to minimise the risk of financial loss and to restore consumer confidence. Unfortunately, most existing strong authentication solutions require additional hardware devices such as smart cards, USB keys or One-Time Password (OTP) hardware tokens, which are expensive to implement, deploy, manage and very inconvenient to the users.

Deepnet Unified Authentication Platform (Internet Edition) is a two-way and two-factor authentication solution designed specifically for web applications such as online banking, shopping and gambling etc., without the requirements of new hardware devices. Deepnet Unified Authentication Platform utilizes the devices users already have (computers, mobile phones, PDA etc) or the user’s behavioural biometrics (typing pattern, voiceprint), as the second factor. This eliminates the need to distribute new hardware, making the system cost effective, user friendly and simple to manage.

Deepnet Unified Authentication Platform is designed for simple integration with existing web applications and their customer management systems. The architecture and interfaces are designed to minimise modification to the customers’ existing IT infrastructures and application frameworks.

Key Features Two-Factor Authentication Two-Way Authentication No Hardware No Software

Key Benefits Easy to Integrate Quick to Deploy Simple to Manage User Friendly Cost Effective

Technical Overview

Deepnet Unified Authentication for Web Applications consists of the following major components:

• Web Servers
• Deepnet Authentication Servers
• SQL Servers
• Hardware Security Modules (optional)

These servers can be installed and operating on separated machines or on a single machine, depending on the scale of the customer’s business applications.

Web Server

Deepnet Unified Authentication platform supports all types of popular web servers, including Microsoft Internet Information Server (IIS, ASP, ASP.NET), Java Server Pages (JSP) and Apache Web Server.

Deepnet Authentication Server

Deepnet Authentication Server is a secure, scalable, cross-platform authentication server that centrally controls access to web applications. Deepnet Authentication Server is designed to be deployable across a wide range of commonly available platforms that supports Java. Therefore, it can run on Windows, Linux, Unix, Sun OS and many mainframes.

SQL Server

Deepnet Unified Authentication platform supports a wide range of high- performance SQL database servers, including MS-SQL, Oracle and mySQL.

Hardware Security Module (HSM)

For additional security, the token database can be further protected by employing hardware encryption. Deepnet Unified Authentication supports Hardware Security Module (HSM) including Eracom ProtectServer, nCipher nShield and netHSM. Installation of HSM is optional, as Deepnet Unified Authentication has an in-built Software Security Module (SSM).