Gemalto - Protiva Strong Authentication

		INFO & KNOWLEGDE

In a world where securing network identities are key success factors for enterprise business operations, Gemalto brings Protiva, a packaged offer for enterprise network security built on the strengths of Gemalto's smart card technology. Protiva consists of a family of end-user devices,

- the Gemalto SAS server,
- smart cards and smart card readers (as card or USB-Token)
- Gemalto services.

Protiva has a lower total cost of ownership relative to alternative solutions and provides true anti-phishing security with a variety of convenient form factors. Organizations can deploy Protiva for secure user authentication and implement more comprehensive identity protection and network security solutions, including the smart card-based security features in Microsoft's Windows and .NET platforms, without being forced to abandon infrastructure investments or change end-user devices.

But not only the certificate based IT-Security is supported by Protiva, but in particular the possibility to realize strong authentication (2-factor) without PKI-overhead with One-Time-Passwords is a key feature of Protiva devices. Gemalto SAS authentication server on the backend then performs the same cryptographic computation as the smart card device and verifies that the one-time password matches in order to permit network access.

		PRACTICE

Protiva End User Devices

Two types of end-user devices are available to support network access in either connected or unconnected modes. If connected, typically via USB, the network user identification credential is sent to the authentication server automatically without manual input. When used in an unconnected mode, the user simply presses a button on the thumb-sized Protiva device and the built-in display then shows an eight digit one-time password, which the user enters directly into the remote network application using a keyboard or keypad. This enables any user -- whether at home, mobile, or at the office -- to generate a one-time password and logon securely. Also virtual devices can be managed with Protiva SA, so that the OTP comes via SMS to the mobile phone.

SA .NET Dual | SA .NET key | SA .NET card | SA Easy OTP Token | SA SEG | SA Easy OTP Reader

Protiva End User Devices source: Gemalto

SA .NET Dual	SA SEG	SA Easy OTP Token	SA .NET card	SA Easy OTP Reader (for offline use of a SA .NET Card)	SA .NET key (.NET card in USB Dongle Reader)

		INFO & KNOWLEGDE



	Protiva SA - System Architecture source: Gemalto

Protiva Strong Authentication Server (SAS)

Gemalto Strong Authentication Server (SAS) is a flexible authentication system that protects network users’ identities by performing two-factor authentication using smart cards and one-time passwords (OTP). It can be deployed quickly and features customer care and self-service portals for managing end-user hardware and accounts.

Gemalto Strong Authentication Server consists of the following components:

- Authentication Modules that perform end-user validation using One-Time Passwords
- A Customer-Care portal for administrators to manage Gemalto smart card devices, authentication policies, roles, users, keys, and other functions
- A User Care portal that enables end-users to register and manage their passwords and account information

The Benefit of Protiva

Protiva Strong Authentication is based on secure Smart Card Technologie but is not mandatory to run a Certification Authority and all necessary workflows for PKI managment,... in your Domain. But if you decide to upgrade to certificate based authentication for a certain user group, you don't need to rebadge your staff. They have all necessary hardware (.NET cards) already in their hands, and using the Windows Built-In Features (MS Base Smart Card CSP, Webenrollment, Autoentrollment...) , PKI isn't a big upgrade for an organisation anymore.

		DOWNLOADS

	Protiva SA Server Brochure
	Protiva SA Devices Brochure
	Smart Enterprise Guardian
	To get protected by Protiva - Gemalto movie
	Strong Authentication Demo Site by Gemalto
	Protiva Site by Gemalto

Protiva Strong Authentication Server Protiva SA is a three-tiered syteme. The server tier backend running one or more servers for authentication and other applications, and administrative “Customer Care” portals for system and user management.

Protiva OTP - how it works There are 2 OTP algorithms supported by Protiva SA Server, OATH and CAP. How it works on client side?

Protiva Licencing Protiva Stong Authentication Licences are usually bought together with the hardware token. There is no extra server licence for Strong Authentication Server.

Gemalto .NET IM V2+ The Gemalto SafeSite .NET v2 corporate formerly known as Axalto Cryptoflex .NET on the market, offers new possibilities in smart card development and use with its native support in Microsoft infrastructures.
Product-ID: 3610105507

Gemalto Smart Enterprise Guardian (SEG) Smart Enterprise Guardian (SEG) is a unique USB device based on industry standards that secures identity credentials and sensitive files with proven smart card technology. Jointly developed by Gemalto and Lexar, it protects up to 2 GB of data on a USB drive and supports strong authentication, digital signature and file encryption.