Made4Biz Security Inc - IdentiWall

Made4Biz IDentiWall provides a robust, scalable, upgradeable security solution for online financial transactions through the public Internet and virtual private networks. Its   theft-proof authorization mechanism alerts victims and security personnel to ongoing attempts to use stolen identities. It combats attacks based on on phishing, man-in-the-browser software,  code injection and other hacker strategies.

The heart of the system is an innovative mechanism for dual-network authentication and verification, taking advantage of customers' wireless telephones to provide a one-time password for each entry using SMS. This innovation makes possible a system that is easy to use, requires no new hardware and no changes to banking software or customer computer software.

IDentiWall builds on this functionality to provide a complete out of the box system that is robust, scalable, maintainable, and ready to meet threats that will emerge with developing technologies as well as existing ones.

A sophisticated database and policy mechanism make it possible to use user location, past behavior and other information to optimize the response to attacks. A syndication mechanism ensures that financial institutions and their IDentiWall systems are alerted to general threats, and an investigative workbench allows tracking and surveillance.

IDentiWall is ideal for online e-banking, brokerages and e-shopping. IDentiWall supports a hacking and phishing-proof new e-shopping method.  

Features and Functions

SMS Based Authentication

Login requires an additional one-time password that is sent to the user over their cellphone, after the user enters a PIN code.

Theft-Proof protection

Identity thieves who use Trojan horses to steal ID information of users can't know the unique password generated and sent via SMS.

Take it With You Token

The use of the cellphone, rather than a separate token, ensures that the device will be with the user when they need it.

Theft Warning

If anyone tries to log-in, whether it is the user or a thief, the user will get an SMS. They can use this information to instruct the system to deny access.

Easy Integration

Can be used over any Web authorization system for e-commerce and other secure log-in applications.

How it works

IDentiWall web is a multi level authentication service for restricted web sites that require user authentication by User-ID and password during the login process. Popular examples of such sites are those of internet banking, securities trading, sales sites, government sites and many others.

The user who wishes to log onto their account, keys in the User-ID and password and submits the page to the site's IDentiWall, which is placed in front of the site. The system gets the login request and sends an SMS message with a One Time Password (OTP) to the user's cellular telephone and an HTML window. The browser window requests the user to enter the One Time Password (OTP).

The OTP that the user keys in the HTML form gets checked by IDentiWall and if found compatible with the OTP that was sent to the user, IDentiWall passes the login request to the web site for further processing.

Since IDentiWall functions as an html firewall, it can detect that the user surfed to a protected page such as a funds transfer page, and if so, perform an extra secured authentication before authorizing the transfer.

The IDentiWall service increases the security level of sensitive transactions and fights the criminal tide of identity thieves who increase their activity on the net.

Attactive as it is, implementing IDentiWall does not require any changes in the existing web site's code. Furthermore, it does not require any software or hardware  installation on the user's computer.

An unauthorized login attempt by a third party will be recorded by IDentiWall. It will also cause IDentiWall to send an SMS to the user's cellphone, and to alert responsible personnel in your office. Each factor in the system can help combat the attack.  The pro-active response option of IDentiWall kicks in and allows the user to send back to IDentiWall an SMS that will result in IDentiWall's quarantine of the user's account from online access. IDentiWall itself uses the recorded information for tracing and surveillance, to determine policies and security levels and for syndication of threat alerts. Security officers can track the alerts to determine if a massive attack is taking place and to pinpoint security weaknesses, and can sake appropriate action.


Meeting the Threat - What security threats face on-line banking today?

IDentiWall Architecture - This schema will help you understand what IDentiWall does and how it does it

IDentiWall Technology - This table outlines the sophisticated technologies underlying IDentiWall

IDentiWall versus Smartcards and Tokens - How does IDentiWall measure up against other types of solutions?

IDentiWall versus in-house development - Read this before you try to develop your own system - don't say we didn't warn you!

Articles About IDentiWall

Made4Biz Security announces IDentiWall secure e-Banking - [June 1, 2008] IDentiWall secure e-banking extends IDentiWall VPN to provide ultimate security for online financial transactions over the public Internet in an easy to implement, easy to use, robust and scalable solution. More

IDentiWall Brochures

IDentiWall Secure e-Banking

IDentiWall versus Do-it-Yourself Security Software

Visit IDentiWall - Secure Online Financial Transactions Web Site

 

Home - Dynamic Security | Privacy Policy | Copyright and Trademark Info