Annual Report 2009 (1 MB, pdf) - Vasco

The DIGIPASS family is currently based on the first two factors. Using the DIGIPASS system, in
order to enter a remote system or to digitally sign data, the user needs the:
• Software and hardware client authentication device (DIGIPASS) itself; if he or she does not
physically have the device, he or she will not be able to log on to the system; and
• PIN code for the DIGIPASS; if the user does not know the appropriate code, he or she will not be
able to use the applications stored inside.
Both factors help ensure that a natural person is authenticating (or signing), instead of a computer or
another device. These factors also enable very high portability for security anytime and anywhere.
DIGIPASSES calculate dynamic signatures and passwords, also known as one-time passwords, to
authenticate users on a computer network and for a variety of other applications. There are over 50 models of the
DIGIPASS, each of which has its own distinct characteristics depending on the platform that it uses and the
functions it performs. However, the DIGIPASS family is designed to work together and customers can switch
their users’ devices without requiring any changes to the customers’ existing infrastructure. In addition, these
devices can be used to calculate digital signatures, also known as electronic signatures or message authentication
codes, to protect electronic transactions and the integrity of the contents of such transactions.
DIGIPASS technology is designed to operate on non-VASCO platforms such as a desktop PC or
laptop. DIGIPASS technology is also available for personal digital assistants (PDA), mobile phones and smart
cards. For users of mobile phones, the virtual DIGIPASS generates one-time passwords that are sent to the
mobile telephone user by SMS (Short Messaging System).
Other technologies such as paper based authentication (TAN lists) and PKI-enabled products are
successfully created in the DIGIPASS family, always based on the same back-end VACMAN core technology.
DIGIPASS technology also combines the benefits of traditional password authenticators
(authentication and digital signatures) with smart card readers. Together, they bring portability to smart cards and
allow secure time-based algorithms.
The DIGIPASS technology is also available in a web browser based version. DIGIPASS for Web is the
ideal product to replace a password-based security or paper-based authentication system with a security system
using strong authentication, to achieve a higher security level. DIGIPASS for Web supports user authentication,
transaction signing and document signing. No software installation is required on the end-user’s PC.
We believe a VASCO-secured system has the features needed to secure both today’s and tomorrow’s
IT resources.
11