內(nèi)容課件案例yessafetoken v20release

1、YESsafe Token v2.0 ReleaseDESIGNED, ARCHITECTED AND BUILT BY GLOBAL BANKING PROFESSIONALSTrust without Boundaries YESsafe Token IntroductionYESsafe Token 1.1.x RecapYESsafe Token 2.0 Whats newWhere to downloadYESsafe Token Next StepsDemoAgendaTrust Without BoundariesTokenYESsafe TokenIt is a new gen

2、eration mobile security token for authentication and authorization using proven technologies and algorithms based on One Time Password (OTP)PKI / Digital Certificate Provide transaction signing to provide non-repudiation and data integrity protectionYESsafe Token leverages AccessMatrix Universal Aut

3、hentication Server (UAS)s Token Management and Authentication platform to enable a mobile device to e a trusted device for user authentication and transaction authorizationTime based One Time Password (OTP) Response Only OTP TokenChallenge Response OTP TokenTransaction Signing OTP Token（What-you-see

4、-What-you-sign)PKI / Digital Certificate TokenTransaction Signing PKI Token (What-you-see-What-you-sign)YESsafe TokenCombining OTP and PKI CapabilitiesYESsafe Token takes full advantage of the advanced features in a mobile device to make security simple Camera as a scanning/Optical deviceWithout the

5、 need to key in transaction dataPush Notification/Blue Tooth/NFC/USB for delivering authentication and authorization dataSupporting different delivery channels e.g. web, mobile, phone, kiosk, over-the-counter, call center, etc.Mobile Connectivity for providing out of Band authentication and authoriz

6、ation Totally eliminate the issue with man-in-the-middle attack with added securitySupporting both on-line and off-line modeYESsafe TokensMake Security Simple!What it was (v1.x)3 web portalsAdmin portalSelf-service portalDemo portal3 templates/styles of tokenOnline Token with photoOnline Token witho

7、ut photoOffline TokenOne User ID can only have one tokenOne device can contain multiple tokens (of course difference user IDs) on the same device Whats New in 2.0Whats New in v2.0 (1/2)New UI design for both Client Apps and Admin ConsoleMore Token Templates/Styles2 more token templates/stylesDCP(Dua

8、l Channel by Push Notification) tokenGoogle authenticator compliance tokenSplit Admin portal into Admin portal and Operator portalAdmin portal for token style configurationOperator portal for user/token management Flexible User search in operator portalWhats New in v2.0 (1/2)Notification Services fo

9、r Token or User eventsCurrently, we support email notificationMulti-Device Support for the Same UserOne user can have multiple devices and each device can have a token for the same user External JDBC/AD Userstore supported by leveraging AxMx infrastructureNew Demo Portal (1) New UIGesture Login supp

10、ortedNew UIClient Side UINew UIClient Side UIBeforeNow Consolidated scanning button New UINew Admin/Operator Portal UINowBeforeNew UINew Admin/Operator Portal UINowBeforeNew UINew Admin/Operator Portal UINowBeforeNew UINew Self-service Portal UINowBefore (2) New Token Templates/StylesYESsafe Token h

11、as provided some pre-defined token templates to kick-start the implementation and they should be able to address most of the deployment requirements such as different OTP requirementsOnline TokenOffline TokenToken with photoNew TemplatesDCP(Dual Channel Push) TokenGoogle Authenticator TokenThe Token

12、 Template can be modified to create new ones with different GUI requirementsToken TemplatesWhats new 2 new token templatesDCP (Dual Channel by Push Notification) TokenWhats new 2 new token templatesGoogle authenticator compliance token (3) Split Admin portal into Admin portal and Operator portalTo s

13、implify the operational process, we have divided some of the admin tasks in two portals: Admin and Operator PortalAdmin Portal is focus on System Administration requirements such as management of Token Template, Token Policy, etc which are not day to day operational activitiesOperator Portal is focu

14、s on day-to-day operational activities such as User Management, Token Assignment, etcNew Admin PortalNew Admin Portal Token property configurationsToken templates/styles managementNew Operator PortalUser Info managementUser Token Assignment Management (4) Flexible SearchBased on our customer feedbac

15、k, we have incorporated some search capabilities to address the operational requirementsThe new user search capabilities includeBy User IDBy Mobile NumberBy email addressFlexible Search CapabilitiesWhats new Operator portalFlexible User search in operator portal (5) Integrated Notification ServicesI

16、ntegrated Notification ServiceTo provide additional security features and user activity information, new integrated notification service has been added.Currently, we only support email notificationEmail notification to the specific user based on the user activities: Upon completion of user creationU

17、pon completion of a password resetUpon completion of a Token Activation (6) Multi-Device Support for the Same UserMulti-Device SupportBased on our customers feedback, there is a need for us to cater for the requirement that 1 user may have one or more devices for having YESsafe Token installed on ea

18、ch of them for the same User IDAt authentication or authorization process, the user can select one of his/her devices that has been installed the YESsafe Token to perform the transactionWhats new One user with multiple tokensMultiple tokens are assigned to the user1234 (7) Support for External User

19、StoreSimplify and accelerate the deployment process, YESsafe Token can read access to one or more existing user repositories e.g. AD, LDAP, JDBC databases to provide user informationNo User SynchronizationSingle Source of User informationWhats new Support for External User Store (8) New Demo PortalW

20、hats new New demo portalUser Login Page4 login methods are supported1234Whats new New demo portalMost realistic demo with real time Account balance information providedWhats new New demo portalTransaction authorization page (1/2)3 transaction authorization methods are provided123Whats new New demo p

21、ortalTransaction authorization page (2/2)Transaction history list is provided after the authorization has been completedWhats new New demo portalTransaction authorization mobile client page (1/3)Offline authorization mode which use scanning to capture the QRCode to transfer the transaction informati

22、on into the Mobile Token to perform the transaction signingWhats new New demo portalTransaction authorization mobile client page (2/3)Dual Channel Mode use scanning of QRCode to transfer the transaction information to the mobile device and use its communication channel to send the transaction confirmation and signature to the serverWhats new New demo portalTransaction authorization mobile client page (3/3)Dual Channel by Push No