Deepnet DualShield is an open,
unified authentication platform
that enables multi-factor strong
authentication across diverse
applications, users and security
tokens.
Authentication
2 2
FACTOR
+
WAY
www.deepnetsecurity.com
“A good value for the money and a nice enterprise solution.”
SC Magazine
Introduction to DualShield
Deepnet DualShield™ is an open, unified strong authentication platform that enables multi-factor authentication across diverse applications, users and security tokens.
DualShield is a complete solution for strong user authentication that is extremely user-friendly, cost-effective and easy to integrate into your existing IT infrastructure. The server software supports both MS Windows Server and Linux operating systems.
r0OF5JNF1BTTXPSE 051
r051PO.PCJMF1IPOFT r051PO64#%SJWFT
r051PO*%$BSET
r051PO%FNBOE r%JHJUBM$FSUJàDBUF 1,* r%JHJUBM%/"
r#JPNFUSJDT
r8FCCBTFENBOBHFNFOUDPOTPMF r/BUJWF-%"1"%JOUFHSBUJPO r$FOUSBMJ[FEVTFSNBOBHFNFOU r3PMFCBTFEBDDFTTDPOUSPM
r1PMJDZCBTFEBENJOJTUSBUJPO r&OIBODFEBVEJUUSBJMBOESFQPSUJOH r&YUFOEFE3"%*64TVQQPSU r4FMGTFSWJDFXFCQPSUBM
r71/3"%*64"VUIFOUJDBUJPO r8JOEPXT-JOVY"VUIFOUJDBUJPO r8FC"VUIFOUJDBUJPO
r0VUMPPL
r0VUMPPL"OZXIFSF
r0VUMPPL8FC"DDFTT
r0VUMPPL.PCJMF"DDFTT r$JUSJY
r9
Authenticators
Key Features
Solutions
www.deepnetsecurity.com Copyright © Deepnet Security
Architecture of DualShield
VPN
VPN Server
Terminal Server
Web Server
Exchange
Deepnet Authentication Server
Citrix Server RDP
Web Soft Token
Hard T oken
Device DNA Keystroke
Grid Card
Certificate
USB T oken
Biometrics
Outlook
Internet
Citrix
WEB
Multi-Factor Authentication
4PNFUIJOH:PV,OPX1BTTXPSE1*/ 4PNFUIJOH:PV)BWF5PLFO$FSUJàDBUF 4PNFUIJOH:PV"SF#JPNFUSJDT
4VQQPSU7FSTBUJMF"VUIFOUJDBUPST
6OJàFE"VUIFOUJDBUJPO1MBUGPSN 1SPUFDU%JWFSTF"QQMJDBUJPO
MobileID
.PCJMF*%USBOTGPSNTNPCJMFQIPOFT64#ESJWFT1%"TBOE1$TJOUP0OF5JNF1BTTXPSE 051UPLFOEFWJDFTQSPWJEJOHFOUFSQSJTFTCBOLTPOMJOFTFSWJDFQSPWJEFSTBOESFUBJMFST
with a cost-effective means to provide strong authentication protection to their customers, business partners and employees without deploying additional, dedicated hardware tokens.
MobileID / Flash MobileID / PC
r.PCJMFQIPOFT
r+"7"FOBCMFEQIPOFT
rWindows Mobile phones
rJ1IPOFT
r#MBDLCFSSZ r64#áBTIESJWFT
r1$T 8JOEPXT917JTUB
MobileID supports
ONE-TIME P
ASSWORD
r5XP'BDUPS"VUIFOUJDBUJPO r5XP8BZ"VUIFOUJDBUJPO r$IBMMFOHF3FTQPOTF r%BUB4JHOJOH
r0"5)$PNQMJBOU
r%VBM"MHPSJUINT )0515051 r1*/1SPUFDUFE
r.VMUJ5PLFO4VQQPSU
www.deepnetsecurity.com Copyright © Deepnet Security
r5FYU 4.4 r5FMFQIPOF 7PJDF r5XJUUFS
r&NBJM
T-Pass supports
Your Password Is
382835
Enter it to login
Mobile T-Pass
5JTGPS5FYU5FMFQIPOFBOE5XJUUFS.PCJMF51BTTJTBUPLFOMFTTPOEFNBOEPOFUJNFQBTTXPSEBVUIFOUJDBUJPO
solution that delivers passwords to your phones via SMS text, voice, twitter or email messages.
51BTTJTPOFPGUIFNPTUVTFSGSJFOEMZBOEDPTUFGGFDUJWFUXPGBDUPSBVUIFOUJDBUJPOTPMVUJPOT*UEPFTOPUSFRVJSF
any hardware deployment or software installation, therefore saves business customers the cost of administration, user education and technical support.
ON-DEMAND P
ASSWORD
SafeID
SafeID is a compact security device that generates one-time passwords with a single press on a button. It is available in various form factors.
&WFOUCBTFE"iHSFFOuMJGFUJNFUPLFOXJUIB
renewable battery.
r0"5)$PNQMJBOU )051 r4J[FYYNN r#BUUFSZ3FQMBDFBCMF
r0"5)$PNQMJBOU )051 r4J[F$SFEJU$BSE r#BUUFSZZFBST
r0"5)$PNQMJBOU 5051 r4J[FYYNN r#BUUFSZ:FBST
r0"5)$PNQMJBOU )051 r4J[F$SFEJU$BSE
r#BUUFSZ:FBST 0"5)5051DPNQMJBOUUJNFCBTFE"DPNQBDU
durable security token.
0"5))051DPNQMJBOUFWFOUCBTFE*OUIF
credit-card or ID card form factor with an e-ink display window.
0"5))051DPNQMJBOUFWFOUCBTFE*OUIF DSFEJUDBSEPS*%DBSEGPSNGBDUPSXJUIB CVUUPO1*/QBE
SafeID 100
SafeID 200
SafeID C100
SafeID C112
ONE-TIME P
ASSWORD
SAFEID
www.deepnetsecurity.com Copyright © Deepnet Security
6TFSTDBOQSPUFDUUIFJSTFDVSJUZHSJEDBSET XJUIB1*/PSQBTTXPSE"UFBDIMPHPOVTFST
generate a one-time password by randomly selecting a start point in the grid and navigate in the grid on a secret path that is only known to the users. The secret navigation path is
FODPEFEBOEFBTJMZNFNPSJ[FEBTB1*/ PSQBTTXPSE5IJTVOJRVFQBUFOUQFOEJOH
technology protects users’ credentials even when their security grid cards have been lost or stolen.
PIN Protected
GridID & GridGo
GridID is a simple, effective two-factor authentication
NFUIPECBTFEPOTFDVSJUZHSJET"TFDVSJUZHSJEDPOUBJOT
a matrix of numbers and letters in easily marked columns and rows. These security grids are typically printed on
DSFEJUDBSETJ[FEDBSETUIBUDBOCFFBTJMZDBSSJFEJOVTFST
wallets, or they can be printed on the back of employee
BDDFTTCBEHFTDSFEJUDBSETPS"5.DBSET
To perform strong user authentication with a security grid,
VTFSTBSFSFRVJSFEUPQSPWJEFBPOFUJNFQBTTXPSE
generated from their security grid.
GRID C
ARD
yright © Deeepepnenett SeSecucurirityty
GridGo
is a on-demand,
token-less version of
the GridID. Security
grids are delivered to
the user’s screen in real
BIOMETRICS
TypeSense - VoiceSense - FaceSense
TypeSense is a software-only authentication solution based on typeprint recognition that uses keystroke dynamics to accurately identify a user by the way they type characters across a keyboard. TypeSense does not need to install any new hardware – it works with the standard computer keyboard. TypeSense is the only biometric
BVUIFOUJDBUJPOUIBU
VoiceSense is a text and language independent biometric speaker verification system
UIBUWFSJàFTUIFTQFBLFSTJEFOUJUZJOSFBMUJNFVTJOHBTJNQMFTQPLFOQISBTF7PJDF4FOTF
is also totally independent of the language and accent that the user speaks in.
7PJDFBVUIFOUJDBUJPOJTBOFBTZUPVTFWFSTBUJMFZFUOPOJOUSVTJWFUFDIOPMPHZ*UJTIJHIMZ BDDVSBUFBOEEPFTOUSFRVJSFTQFDJàDFRVJQNFOU5IFVCJRVJUPVTOFTTPG1$NJDSPQIPOFT
and mobile phones makes the voice authentication an ideal two-factor authentication system for enterprise, online banking and telecom applications.
rDBOCFDIBOHFEPSSFTFU
rJTDPNQMFUFMZUSBOTQBSFOUUPUIFVTFS
rEPFTOPUSFRVJSFTQFDJBMIBSEXBSF
rDBOCFRVJDLMZEFQMPZFEUPNJMMJPOTPGVTFST
FaceSense is a state-of-the-art authentication solution based on facial recognition technology. It is probably the most natural way of verifying the identity of a person.
'BDF4FOTFEPFTOPUSFRVJSFBOZBEWBODFEIBSEXBSFBTJUVTFTFYJTUJOHJNBHFDBQUVSF
www.deepnetsecurity.com Copyright © Deepnet Security
BIOMETRICS
MultiSense
MultiSenseJTB.VMUJ#JPNFUSJDTBVUIFOUJDBUJPOTPMVUJPOUIBUDPNCJOFTBOEGVTFTEJGGFSFOUCJPNFUSJDUFDIOPMPHJFT GBDFWPJDFBOETQFFDISFDPHOJUJPOJOUPPOFTZTUFN5IFVTFPG.VMUJ#JPNFUSJDTUBLFTBEWBOUBHFTPGUIFDBQBCJMJUJFTPG
each individual biometrics while overcoming some of the limitations of a single biometrics, therefore improves accuracy, system robustness and fault tolerance.
.VMUJ4FOTFJTB.VMUJ'BDUPSBVUIFOUJDBUJPOTPMVUJPOCZJUTFMGBOEZFUTJNQMFBOEFBTZUPVTF6TFSTDBOMPHPOUP
applications by simply looking at the camera and speaking a single phrase.
- User Friendly:6TFBTJOHMFEFWJDFXFCDBNTPSNPCJMFQIPOFTXJUIDBNFSBTUPDBQUVSFTBNQMFTPGNVMUJQMFCJPNFUSJD USBJUTJF'BDFJNBHFTBOEWPJDFTBNQMFT
- Resistant to Spoofing:3FRVFTUUIFVTFSUPSFDJUFBSBOEPNQBTTQISBTFUIFSFCZFOTVSJOHUIBUBAMJWFVTFSJTJOEFFE
DIGIT
AL DNA
DevicePass & FlashPass
&BDIDPNQVUFSEFWJDFIBTJUTPXOVOJRVFDIBSBDUFSJTUJDT %FWJDF1BTTDSFBUFTBVOJRVFiEFWJDFQSJOUuBEJHJUBM
fingerprint of the device, using the device’s characteristics
JODMVEJOHIBSEEJTL*%$16TFSJBMOVNCFSBOEOFUXPSL ."$BEESFTTFUD$PNCJOJOHUIFEFWJDFQSJOUXJUIBVTFS
name and password, web and enterprise applications can restrict access to only trusted devices and authenticated users.
DevicePass provides a token-less, transparent way to achieve strong, two-factor authentication.
FlashPassUSBOTGPSNTBTUBOEBSE64#áBTIESJWFJOUP BTFDVSJUZUPLFOCJOETUIFVTFSTJEFOUJUZUPUIF64#
drive’s hardware fingerprint.
'MBTI1BTTEPFTOPUSFRVJSFFOEVTFSTUPJOTUBMMBOZ TPGUXBSFPOUPUIFJS1$TPSMBQUPQT6TFSTDBOTJNQMZ QMVHUIFJS64#LFZTJOUPBOZDPNQVUFSBOEXJMMCF
www.deepnetsecurity.com Copyright © Deepnet Security
VPN/RADIUS Authentication
6TFS"VUIFOUJDBUJPOJTUIFXFBLMJOLJO71/TFDVSJUZ71/UFDIOPMPHZJTTFDVSFCVUPOMZPOUIFMFWFMPGEBUB USBOTNJTTJPO71/TUZQJDBMMZWFSJGZVTFSTXJUIPOMZBTUBUJDQBTTXPSEBOBQQSPBDIUIBUPGGFSTNJOJNBMTFDVSJUZBT QBTTXPSETDBOCFFBTJMZDPNQSPNJTFE4USPOHVTFSBVUIFOUJDBUJPOJTUIFPOMZQSPWFONFUIPEGPSNBLJOH71/SFNPUF BDDFTTTFDVSF%FFQOFU"VUIFOUJDBUJPOGPS71/VUJMJ[JOHPOFUJNFQBTTXPSETHFOFSBUFECZQPSUBCMFBVUIFOUJDBUJPO UPLFOTJOBWBSJFUZPGGPSNGBDUPSTPGGFSTUIFVMUJNBUFTFDVSJUZGPS71/SFNPUFBDDFTTXJUIPVUDPNQSPNJTJOHUIFVTFST
experience.
%FFQOFU%VBM4IJFMEQSPWJEFTBCVJMUJO3'$DPNQMJBOU3"%*64TFSWFS*UTVQQPSUTBOZ/FUXPSL"DDFTT4FSWFS /"4PSBQQMJDBUJPOUIBUFNQMPZT3"%*64BVUIFOUJDBUJPOQSPUPDPM
Seamless VPN Integration
%FFQOFU"VUIFOUJDBUJPOGPS71/JOUFHSBUFTXJUIBOZ *14FDBOE44-71/UIBUTVQQPSUT3"%*64JODMVEJOH
6TJOHPOFUJNFQBTTXPSEUIFFOEVTFSTEPOPUOFFEUP JOTUBMMBOZOFXTPGUXBSF5IFZXJMMVTFUIFTBNF71/
client as they’re using now, and simply enter a one-time password or a combination of their static password and one-time password in the place where the password is
SFRVJSFE r$JTDP r/PSUFM r$IFDLQPJOU r+VOJQFS r8BUDI(VBSE
One Time Password
Static Password
r"WFOUBJM r4POJD8BWF r"&1 r8IBMF r'
Windows/Linux Authentication
%FFQOFU"VUIFOUJDBUJPOGPS8JOEPXTJTEFTJHOFEUPIFMQFOUFSQSJTFDVTUPNFSTFOTVSFUIBUOFUXPSLSFTPVSDFTBSF BDDFTTJCMFPOMZCZBVUIPSJ[FEVTFSTXIFUIFSXPSLJOHMPDBMMZJOTJEFUIFàSFXBMMPSSFNPUFMZWJBSFNPUFEFTLUPQ*UJT
a complete solution that reinforces the Windows network domain logon as well as workstation logon with two-factor authentication.
Support:
r-PDBM"DDFTT r3FNPUF%FTLUPQ r5FSNJOBM4FSWFS r"DUJWF%JSFDUPSZ
r8JOEPXT917JTUB8JOEPXT r8JOEPXTCJUBOECJU
r0OMJOFBOEPGáJOFMPHPO
Linux systems and applications that support
1".DBOBMTPBVUIFOUJDBUF
against DualShield
www.deepnetsecurity.com Copyright © Deepnet Security
Web Authentication
%FFQOFU"VUIFOUJDBUJPOGPS8FCJTEFTJHOFEUPIFMQFDPNNFSDFBOEFOUFSQSJTFDVTUPNFSTDPOUSPMUIFBDDFTTUP
restricted areas and contents on web sites. It allows access only to those users who provide two-factor authentication
VTJOHBWBSJFUZPGTUSPOHBVUIFOUJDBUJPOUPLFOTQSPWJEFECZ%FFQOFUBOEPSUIJSEQBSUZWFOEPST
DualShield provides an
4%,"1*UIBUBMMPXT
third-party developers to seamlessly integrate two-factor authentication
into custom web applications
WEB
M
U
LT
I-FA
C
T
O
R
A
U
T
H
E
N
T
IC
A
TI
O
N
Outlook Authentication
%FFQOFU"VUIFOUJDBUJPOGPS0VUMPPLIFMQTFOBCMFTFDVSFBDDFTTUPUIFGPMMPXJOH0VUMPPLTPMVUJPOT r0VUMPPL8FC*OUFSGBDF r0VUMPPL"OZXIFSF r0VUMPPL.PCJMFXJUI&YDIBOHF"DUJWF4ZOD Deepnet Outlook Agent Microsoft Exchange Server Deepnet Authentication Server Internet 1 3 2 Outlook AnywhereOutlook Web Access Outlook Mobile
OUTLOOK
www.deepnetsecurity.com Copyright © Deepnet Security
Citrix & 2X
While the Citrix solutions have made it easier for users to access critical information, simply using passwords to authenticate users can put a company at risk. Deepnet DualShield enhances security for Citrix solutions by authenticating users with a strong two-factor authentication system.
Deepnet DualShield helps enable secure access to the
GPMMPXJOH$JUSJYTPMVUJPOT
9QSPWJEFTBGBNJMZPGFOUFSQSJTFTFSWFSCBTFEDPNQVUJOH TPGUXBSFUIBUBMMPXTEFTLUPQWJSUVBMJ[BUJPOBOEBQQMJDBUJPO TUSFBNJOHPOTUBOEBSE1$TBOEUIJODMJFOUEFWJDFT /BUJWFMZJOUFHSBUFEJOUPUIFDPSFPG9TZTUFN%FFQOFU "VUIFOUJDBUJPOFOIBODFTTFDVSJUZGPSBMM9TPMVUJPOTCZ
authenticating users with a strong two-factor authentication platform.
CITRIX
r$JUSJY8FC*OUFSGBDFGPS1SFTFOUBUJPO4FSWFS r$JUSJY"DDFTT(BUFXBZXJUI"EWBODFE"DDFTT
Control
“The solution was easy to install and manage, easy to use and provided good support for token and authentication options. The price is very attractive for environments large or small.” – SC Magazine
Partners
Customers
and hundreds more... “Of all the different two factor authentication methods we’ve researched,
this is by far the best…” – CoinCo Inc
“We looked at a number of solutions including Secure Computing, RSA and Swivel. Deepnet provided the most flexibility with the number of applications that could be secured and the amount of ways a user could authenticate…” - NHS
“We began a process of trialling and reviewing the various options; this included Deepnet, RSA and other major competitors. During these trials we found that the flexibility and ease of use offered by the Deepnet Unified Authentication Platform met our requirements far better than the competition…” – Teign Housing
Deepnet Security
www.deepnetsecurity.com [email protected]
