Product: Entrust IdentityGuard 8.0
Family: Entrust IdentityGuard 8.0
Vendor: Entrust, Inc.

Product Description: Entrust IdentityGuard is a flexible strong authentication platform suitable for both consumer and enterprise deployments. Through the ability to layer strong authentication across different user and transaction types, IdentityGuard reduces the risk of fraudulent transactions while minimizing security expenditures. IdentityGuard delivers a platform for deploying simple and intuitive — yet highly secure— authentication options including Entrust’s patented grid card authentication, knowledge-based authentication, machine fingerprinting, one-time passcode lists, and mobile out-of-band authentication. Mutual (or site) authentication options, designed to reduce the impact of phishing attacks, include serial number replay or grid location replay, as well as personalized image and message replay.

Performance: A single Entrust IdentityGuard server architecture utilizing a database repository has been tested to support 166 transactions/logins per second. For comparison purposes, a real customer (bank) example of a multi-million user environment with 16 million transactions per month only requires 6 transactions/logins per second.

Interfaces: Entrust IdentityGuard runs on a RedHat Linux AS server (v3.0 or 4.0).

Entrust IdentityGuard requires a directory or database (JDBC) repository for deployment. The following are tested and supported for Entrust IdentityGuard 8.0.

Directory
Microsoft Active Directory on Microsoft Windows 2000/2003 Server
Microsoft Active Directory Application Mode (ADAM) Microsoft Windows Server 2003
Sun ONE Directory Server
Critical Path Injoin
Novell eDirectory
IBM Tivoli Directory Server

Database
Oracle 9i & 10g database
IBM DB2 8.x database
MS SQL 2000 database

Entrust IdentityGuard for Remote Access (VPN) Authentication works with the RADIUS protocol.

Key Features & Benefits:

• Flexible risk management across users and applications with one integrated strong authentication platform.
• Online identity fraud protection and confidence for Internet customers and enterprise users.
• Flexible security using increasing strengths of mutual authentication to match risk of fraud. Can use the 5+ different user authentication options and 4 different mutual (site) authentication options independently or in combination to secure access to applications and transactions.
• All forms of user and mutual (site) authentication available in the Entrust IdentityGuard platform for a single low price that is 80% less expensive than the leading one-time password token.
• Two-factor authentication for enterprise remote access (secure VPN provided from vendors like Check Point, Cisco, Citrix, Nortel, and Juniper)
• Two-factor authentication for corporate access with Microsoft desktop integration
• Most of the available authentication options can be deployed across multiple communication channels consistently (for example: web, telephone, and branch banking applications)
• Integrates seamlessly into enterprise environments leveraging existing user repositories and authentication/access control systems.
• Helps financial institutions comply with FFIEC guidance on Internet Banking Authentication (Oct 2005)
• Due to low cost, gives ability to secure more online customers with strong authentication methods.

Highlights: Entrust IdentityGuard is an authentication platform, delivering a multitude of user and server authentication methods versus just a single type of authentication capability. This allows organizations to deploy the method(s) that are most appropriate for the risk profile of any given transaction (application/network login is considered a form of transaction). This includes Entrust unique and patented grid-authentication technique which provides the second, physical form factor for true two-factor authentication without the cost, complexity and deployment issues associated with more traditional hardware authentication devices.

End-Users: Entrust IdentityGuard for Consumers is targeted at all financial services organizations (large and small) that provide online services and are subject to comply with FFIEC regulations. ( Federal Financial Institutions Examination Council (FFIEC) guidance calling for “Authentication in an Internet Banking Environment, Financial Institution Letter FIL-103-2005, October 12, 2005”.)

Entrust IdentityGuard for Enterprise is targeted at medium and large enterprise as well as government agencies who wish to strongly secure remote access to their networks at a fraction of the cost of hardware tokens.