Securing Data Delivery Hassle-Free

The Business Challenge

One of the top banks in the region has an immediate need to establish connections with all its clients in order to securely and reliably transfer sensitive transactional information. The requirements were:

• Either the bank or the client can initiate the file transfer when necessary.
• The transmitted data must be encrypted and signed.
• The transmission medium must be reliable and fully encrypted. Recovery is an important factor.
• Acknowledgement is required for every completed and successful transfer.
• The transfer should be as simple as a drag-and-drop action.

Enhancing Waveset Lighthouse Security

Our Solution

Data Security Systems Solutions (DS3) Authentication Server can be integrated with Sun Identity Manager (Waveset Lighthouse) to obtain a complete solution. After integration, the following areas of enhancement were achieved:

Objective 1. Better Login security to the Sun Identity Manager

The DS3 Authentication Server is able to address the above three potential issues:

• The replay attacks and sniffers are prevented by the DS3 Applets which encrypt the password before it leaves the browser, achieving the end-to-end security.
• Various methods of 2-Factor authentication such as VASCO, SMS, Java phone, etc are supported. A better login security for administrators and even users.
• With the flexible token management support, users could opt to receive one-time user login via SMS for authentication with the IM Server. In this way, they no longer need to remember the IM password
  
  

Enabling 2-Factor Authentication for IBM Tivoli Access Manager for eBusiness

Discover how to enhance the IBM Tivoli Access Manager for e-Business web infrastructure with end-to-end security and 2-Factor authentication (2FA) using the DS3 Authentication Server.

With the IBM Tivoli Access Manager for eBusiness (TAMeb), online businesses can leverage on the fine-grain access control and seamless web single-sign-on to operate a multi-server, multi-domain web infrastructure for their employees, partners and customers.  Users log on to TAMeb using UserID and password only by default.  By adding on the DS3 Authentication Server, the user accounts are further protected against Phishing, Pharming and Cryptographic replay attacks.

Managing Digital Certificate Conveniently

DS3 helps one of the major banks in Asia Pacific to strengthen its web application with digital Certificate authentication.

The Business Challenge

The bank is already operating a web application for a group of their Corporate Banking Customers. Application access is only protected by user ID and password, stored in application server. Communication between the application server and the backend system is neither signed nor encrypted.