Two-Factor Authentication and One-Time Password from Billion Electric

(06/12/2007)

Billion Electric Co. Ltd. has announced the BiGuard OTP, which combines strong Two-Factor authentication with dynamic One-Time Password. This improves access security to the corporate network for SMEs. BiGuard OTP is designed to complement its range of BiGuard SSL VPN devices.

Wherever staff need to access the company’s network resources, the BiGuard OTP offers improved security of the login authentication process - even when on the road, or from a wireless hotspot such as an airport terminal, hotel, Internet cafe etc.

The BiGuard OTP continuously changes its PIN number, which, compared to a relatively easy-to-crack static password, dramatically increases access security and greatly reduces the risk of unauthorised access to corporate network resources by intruders.

The BiGuard OTP is a chip-based, 6-digit numeric PIN token to be used in combination with a password for a strong two-factor authentication. This solution provides single password authentication for remote VPN, LAN and web access through the use of an ASAS back-end server. Each BiGuard OTP token is unique and has been assigned an Electronic Serial Number (ESN) and identification seed, so that the authentication cannot be reproduced. The car key-sized token is portable, offering total mobility and maximum flexibility for remote network access.

Key features include:
* Dynamic One-Time Password
* Event-based Algorithm Token
* Strong Two-factor Authentication
* Easy installation and management
* Car key-sized for extreme mobility
* One-click easy-to-use system
* Compatible with BiGuard SSL VPN series equipment

The traditional user login method is to simply enter a fixed static password. This could pose a grave risk when used in public areas such as Internet cafes, airports and other public areas, because people nearby may be able to obtain the static password you use to log into your company’s network. The BiGuard OTP allows you to create a strong, two-factor authentication by using a dynamically generated 6-digit PIN, and combine this with your existing static password. Even if the token is lost or stolen, it’s useless to anyone but its owner and your company’s system administrator.

Previously, prior to launching authentication systems, administrators were required to synchronise each BiGuard OTP token with an ASAS RADIUS-standard server which stored the ESN of each token. However, now the BiGuard OTP token is flexible enough to adopt various algorithms, including OATH (Open AuTHentication) event-based algorithms. Whenever access to LAN, Web or remote VPN is needed, users simply click on the token button to obtain a one-time password called a dynamic PIN. This action will start the two-factor authentication process between the BiGuard SSL VPN equipment and the ASAS server, resulting in the server either accepting, rejecting or challenging the authentication request.

The ASAS server provides administrators with a friendly management interface, which includes account management, adding new tokens, etc. The step-by-step server installation is as easy as any normal commercial software. The administrator can use any web browser, anywhere, any time, to login to the ASAS management server, without having to pre-install any client software.

Its simple interactive interface is easy to understand and use. A simple, single click on the button of the BiGuard OTP token generates a six-digit OTP number. Pressing and holding the button produces the token’s Electronic Serial Number (ESN), a number used to identify each token. Bars in the lower right corner of the LCD screen display battery strength - 3 bars for a fully charged battery. Its car key-sized design makes it extremely portable.

BiGuard’s OTP solution includes an ASAS server, so there is no need to renew the service, reconfigure user setting or renew tokens. The battery inside a BiGuard OTP token will last up to 3 years, so no hassle of replacing batteries. The BiGuard OTP offers a truly cost-effective authentication solution.

To be launched in Q1 2008 is the Billion BiGuard S6000 dual-WAN security gateway appliance integrates IPSec and SSL VPN technology into one box. It builds on the success of the BiGuard S20, yet with greater performance and features, ideal for larger deployments within the SME sector: for up to 500-1000 employees.

Edward Kung, Managing Director of Billion in UK says: “The BiGuard OTP provides considerably improved access security and gives peace of mind for network administrators. Robust and easy to use, it seamlessly links with Billion’s BiGuard range of SSL/IPSEC VPNs for complete secure remote access, including S5, S10 and S20 and, shortly, the S6000 for larger deployments.”

The Billion BiGuard OTP is available now, starting from just £49.00 ex Vat for a 2-user pack.

Related topics:  Authentication and identity management   Network Security   VPN 

Print version | Email to a friend | Related articles

Data breaches: Trends, costs and best practices gives you all the latest information on securing personal and corporate data, key recommendations for immediate action to improve data security, and how to respond to data breaches.

Other Security news and resources