|
Softlock Secure Software Access Solution provides a hardware based
Authentication method for the application. Some applications depend on user name
and passwords authentication for access rights and control, which is not a
secure way for authentication. Softlock Secure Software Access provides extra
security with two/three Factors Authentication based on Softlock Smart Token.
- Something you know: PIN or Password
- Something you have: Softlock Smart Token hardware device
- Something you are: Softlock Smart Token hardware device with Fingerprint
(Biometric)
Softlock Secure Software Access can be accomplished in different methods that
can meet vendors’ needs.
Secure Software Access using User Account
In this method, Softlock Smart Token will hold the User Account required for
login (i.e. user name and password). The user account will be stored on the
Smart Token and used in the login process without the involvement of the user.
This method is useful in replacing the regular login method with automated
method, keeping the user account secure against malwares and key loggers.
The following figure illustrates the Softlock Admin Tool (User Account) which
imports User Account on Smart Token.
The following figure illustrates the Secure Authentication operation based on
user account. The user owning a valid Smart Token will be able to login to the
application without entering User Name and Password. The Software Authentication
Module communicates with Softlock Smart Token SDK APIs to access the user
account on smart token.
Secure Software Access using SDK
Softlock Smart Token is shipped with complete SDK in different interfaces.
Establishing Secure Software Access using Smart Token SDK is easy and provides
the flexibility for the vendor to construct a customized software access
methodology which meets his needs. SDK can provide much functionality which is
compatible with international standards (PKCS#11 and CSP) along with customized
Softlock SDK APIs. The following are set of functions any vendor can establish
using the SDK solution
- Symmetric Encryption/Decryption
- Asymmetric Encryption/Decryption (RSA)
- Signing/Verifying
- Read/Write
|