Keep your systems and data safe with multi-factor authentication.
Hacking has become big business for criminals and is now the fastest growing crime type in the world.
In more than 80% of all network breaches the hackers simply log-in as a regular user and have undetected access to systems and data. With SMS PASSCODE from Entrust Datacard you are effectively taking the hackers' preferred weapon away.
How does multi-factor authentication improve security?
Multi-factor authentication adds trust to the login process by using multiple factors to validate the identity of the user at the point of login. SMS PASSCODE authenticates users by sending a real-time, session-specific OTP (One-Time Passcode) to the user’s mobile phone via SMS, app, voice-call, or email. Once the OTP has been validated, the user is granted access. It’s that simple!
Why choose SMS PASSCODE?
Entrust Datacard’s SMS PASSCODE has an advantage over traditional two-factor authentication solutions which as the term suggests are simply based on two factors; something you know (username and password), and something you have (a one-time passcode). The SMS PASSCODE solution looks at multiple factors surrounding each particular login. These factors include things such as session ID, network IP and geo-location, number of successful logins, type of system being accessed, time of login, and device being used. All of these factors add context that help determine the level of trust and whether the user should be authenticated or blocked.
What makes SMS PASSCODE more secure?
SMS PASSCODE is adaptive, real-time, challenge-based and session-specific, and takes advantage of contextual information when validating the user, thereby protecting against identity theft and modern Internet threats.
Challenge-based
Unlike solutions relying on pre-issued passcodes, SMS PASSCODE only generates the passcodes once a challenge (username and password is validated) has been fulfilled.
Real-time solution
All passcodes are generated in real-time at the point of login. No pre-issued passcodes. No seed files to be hacked.
Session-specific passcodes
All passcodes are locked to the session-ID of each particular login attempt for maximum security. This reduces the attack surface from being accessible from any device to a single device.
Contextual-based OTPs
The OTP time validation period and delivery form adapts based on the context of the user.
GEO Fencing
Increase security by blocking access from high risk locations or regions.
Contextual user notifications
Users receive information about the GEO-IP location of their login to help identify possible man-in-the-middle attacks.
Protection against brute-force attacks
SMS PASSCODE includes advanced brute-force and denial-of-service attack detection and protection.
Hardened security keeps your data safe
Our passcodes are cryptographically strong random generated OTPs using FIPS-140 validated crypto modules and all communication between components is AES 256bit encrypted. Our platform itself is fully authenticoded and obfuscated.
