Made4Biz IDentiWall
provides a robust, scalable, upgradeable
security solution for online financial transactions through the public Internet and virtual private networks.
Its theft-proof authorization mechanism alerts victims and security personnel to ongoing attempts to use stolen identities.
It combats attacks based on on phishing, man-in-the-browser software, code injection and other hacker
strategies.
The heart of the system is an innovative mechanism for
dual-network authentication and verification, taking advantage of customers' wireless telephones to provide a
one-time password for each entry using SMS. This innovation makes possible a system that is easy to use,
requires no new hardware and no changes to banking software or customer computer software.
IDentiWall builds on this functionality to provide a complete
out of the box system that is robust, scalable, maintainable, and ready to meet threats that will emerge with
developing technologies as well as existing ones.
A sophisticated database and policy mechanism make it possible
to use user location, past behavior and other information to optimize the response to attacks. A syndication
mechanism ensures that financial institutions and their IDentiWall systems are alerted to general threats, and
an investigative workbench allows tracking and surveillance.
IDentiWall is ideal for online e-banking, brokerages and
e-shopping. IDentiWall supports a hacking and phishing-proof new e-shopping method.
Features and Functions
SMS Based Authentication
Login requires an additional one-time password that is sent to
the user over their cellphone, after the user enters a PIN code.
Theft-Proof protection
Identity thieves who use Trojan horses to steal ID information of users can't know the unique password
generated and sent via SMS.
IDentiWall web is a multi level authentication service for
restricted web sites that require user authentication by User-ID and password during the login process. Popular examples of such sites are those of internet banking,
securities trading, sales sites, government sites and many others.
The user who wishes to log onto their account, keys in the User-ID
and password and submits the page to the site's IDentiWall, which is placed in front of the site. The system gets the login
request and sends an SMS message with a One Time Password (OTP) to the user's cellular telephone and an HTML window.
The browser window requests the user to enter the One Time Password (OTP).
The OTP that the user keys in the HTML form gets checked by
IDentiWall and if found compatible with the OTP that was sent to the user, IDentiWall passes the login request
to the web site for further processing.
Since IDentiWall functions as an html firewall, it can detect that
the user surfed to a protected page such as a funds transfer page, and if so, perform an extra secured
authentication before authorizing the transfer.
The IDentiWall service increases the security level of sensitive
transactions and fights the criminal tide of identity thieves who increase their activity on the net.
Attactive as it is, implementing IDentiWall does not require any
changes in the existing web site's code. Furthermore, it does not require any software or hardware installation
on the user's computer.
An unauthorized login attempt by a third party will be recorded by
IDentiWall. It will also cause IDentiWall to send an SMS to the user's
cellphone, and to alert responsible personnel in your office. Each factor in the system can help combat the
attack. The pro-active response option of IDentiWall kicks in and allows the user to
send back to IDentiWall an SMS that will result in IDentiWall's quarantine of the user's account from online
access. IDentiWall itself uses the recorded information for tracing and surveillance, to determine policies and
security levels and for syndication of threat alerts. Security officers can track the alerts to determine if a
massive attack is taking place and to pinpoint security weaknesses, and can sake appropriate action.
Meeting the Threat - What security threats face on-line banking
today?
IDentiWall Architecture - This schema will help you understand
what IDentiWall does and how it does it
IDentiWall Technology - This table outlines the sophisticated
technologies underlying IDentiWall
IDentiWall versus Smartcards and Tokens - How does IDentiWall
measure up against other types of solutions?
IDentiWall versus in-house development - Read this before you try
to develop your own system - don't say we didn't warn you!
Articles About IDentiWall
Made4Biz Security announces IDentiWall secure e-Banking
- [June 1, 2008] IDentiWall secure e-banking extends IDentiWall VPN to provide ultimate
security for online financial transactions over the public Internet in an easy to implement, easy to use, robust and
scalable solution.
More
IDentiWall Brochures
IDentiWall Secure e-Banking