Two Factor Authentication

Gemalto PROTIVA Performance, Trust and Security

June 2007

Two-Factor AuthenticationWhat Is it?Gemalto integrates:Something you knowYour username and passwordSomething you haveA smart cardbased security device Generates a one-time password (OTP)Stores a digital identity such as a digital certificate Gemalto offers simplicity and scalability: You can adapt Protiva smart cardbased devices easily to meet your organizations infrastructure and security needs.

KnowHaveAre

Two-Factor AuthenticationWhat Is it?Passwords vulnerable to shoulder surfing, sticky notes, keyboard logging, IT staff insidersTwo-factor means you need the card or token to login, access systems, sign documentsSmart cards invulnerable because security is done in the cards computer, no secrets pass through networks in the clear

Data Breaches Affecting All Sizes of BusinessesA subcontractor, Nationwide Retirement Solutions: Up to 38,443 City of Chicago employees (lost PC)PortTix, Merrill Auditorium's ticketing office in Portland, Maine: 2,000 credit card accounts (Web hack)Madrona Medical Group: 6,000 identities stolen (Web attack by former employee)Belhaven College, Miss.: 300 employees (stolen laptop)AAAAA Rent-A-Space: 13,000 identities with credit cards (Web site security oversight)93 million identity records reported lost or stolen since ChoicePoint in Feb. 2005Source: Privacy Rights Clearinghouse

Some Market DriversEnvironmental DriversRegulatory compliance:SOX: EnterpriseHIPAA or PIPEDA: HealthcareFFIEC: FinanceIdentify fraud & Phishing are threatening Internet commerce and usageExplosion of remote access devicesIndustry moves towards strong authentication2 factor authentication & smart cards will be widely deployedMicrosoft pressing security with new products (CLM - http://www.microsoft.com/technet/clm) Microsoft embedding Gemalto technology in WindowsCitrix embedding Gemalto technology in their suite (http://www.citrixready.com/v4/page6.html)SSO projects are driving strong authentication The industry needs to build a Trust Ecosystem Bill Gates

Identity Management Business Challenges Passwords :the most costly and insecure component of identity management and data security too many passwords to remember and burdened by password policy and frequent password changes End users forget their passwords!End users bypass security measures by selecting weak passwords re-using the same password for all applications writing passwords down in an insecure location End users are not satisfied with existing 2 factor authentication methods because of:Time based solution with no control over One Time Passwords generationLife time of token is setExpensive proprietary solutionOne device = one application. No room for flexibility

Gemaltos fulfilling your needs: How?

Financial cardCorporate cardCard TokensSIM cardCore Technology: Microprocessor Smart CardsA Smart Card is a market established Secure and flexible fully functional computer with 100s of features:

Strong encryption Ease of customization Growing space Multi usage Multi form factors

Gemalto: serving you better$2.2 billion 2005 revenue

2.7 billion in market capitalization

11,000 employees, 65 nationalities at your service

21 production sites, 32 personalization centers, 9 R&D centers and 120 sales and marketing offices R&D spent $146 million in 2005; 1500 R&D engineers to fulfill your needs

Some of Gemaltos Smart Card Users?Over 1 Billion Gemalto Smart Cards shipped in the world

Why? Insider threatsPassword resetsHigh value informationSarBox, GLB, HIPAA, HSPD 12, BASEL II Customer concern Brand impactTelecommuting$15 millionamount FTC fined ChoicePointSource: Computerworld, 1-26-06

Who needs it: Identifying OpportunitiesCustomer base who:

Needs identity access management

Supports a mobile workforce and/or online customers

Uses strong authentication already but needs a future- proof investment

Is upgrading or expanding server architecture and wants to reduce costs per employee

Must meet regulatory compliance

What we provide: Your Digital Security SolutionOne time Password (OTP):Smart Card based token or card formatSecure authentication for Web access or VPNOTP Dynamically generated by end user on a touch of a button when neededEasy to customizeBased on Open Source Protocol - Oath

Public Key Infrastructure (PKI):Smart Card based token or card formatSecure authentication through identity certificatesUsed for LoginUsed for VPN accessUsed for Signature and Encryption of documents

Physical Access:Secure access with Card form factor to buildings

Technology:Java and .NET Smart CardsTokens with no set life time (change battery)CardsCard readersIncluded software with true anti-phishing capability

Protiva: 300 and 500 Series300 Series: Unconnected500 Series: Connected

The Key to Your Kingdom:

CITRIX: Strong authentication Citrix ready solutionsCitrix Secure Solution Download

The Key to Your Kingdom:

I-Gel & CITRIX: Strong authentication I-Gel & Citrix ready solutions

Microsoft - Replacing Passwords:

Microsoft: Strong authentication Native in MicrosoftLogonSecure E-mailComputer LockRemote Access

Adobe Digital Signature:

Adobe: Strong authentication through signature and encryption

Selling Protiva: Competitive Landscape$475SecureComputingNotavailable$170$156$333$175TCO (over 5years)Ease ofsynchroni-zationPKI,encryptionon the sameDevice,readytodayAuthenexAladdinVascoRSAGemaltoSecurity ofsmart cardTrue anti-phishing, keyloggers,trojancapabilitiesSmart cardwithmultipleapplica-tionsFuture-proofinvestmentwith .NETMultipledeviceoptions

Gemalto & RSA Different PositioningIncumbent, helped define the marketWell known, name brandWell entrenched at many end usersTime Based Proprietary technology

Smart Cards expertsBroad form factorsNot a stranded assetPKI CapableNo additional server hardwareNo expiration dateDoes not get out of sync.NET Technology Converged badgeOpen standards architecture (OATH)Secure manufacturing processesCitrix ReadyPreferred Microsoft vendorOne pricing for your solution

RSAGemalto

Thank you!