Digipass Plug-In for IAS Product Guide - Vasco

More documents

Recommendations

Info

Digipass Plug-In for IAS Product Guide Digipass 2.1.3 Virtual Digipass There are two forms of Virtual Digipass available: Primary Virtual Digipass are treated by the IAS Plug-In almost identically to hardware Digipass – a record of each Primary Virtual Digipass must be imported into the data store, and may then be assigned to a User automatically or manually. The User will typically log in with their User ID and static password, have a text message sent to their mobile phone, and then enter the One Time Password from the text message in the second stage of their login. The Backup Virtual Digipass feature allows a User to request a One Time Password sent to their mobile phone if they do not have their usual Digipass at hand. It may be limited by number of uses or days of use – eg. a User may be limited to 2 days' usage, after which they will again need to use their usual Digipass to log in. © 2005 VASCO Data Security Inc. 22
Digipass Plug-In for IAS Product Guide Digipass 2.2 How do Digipass Work? 2.2.1 Digipass Applications Each Digipass is programmed with at least one Digipass Application, and a unique algorithm. The Digipass uses this unique algorithm when generating One Time Passwords. Each type of Digipass Application generates One Time Passwords from different data, and in slightly different ways: Response Only Creates a One Time Password based on the date and time, or on the number of uses (events). Challenge/Response Creates a One Time Password (also referred to as a 'Response' in this context) based on a numerical challenge given on a login page. This may be either a challenge custom-created for the specific Digipass, or a randomly created challenge. The One Time Password may also be based on the date and time. Digital Signature Digital Signature Digipass Applications are typically used in online banking. The Digipass generates a unique code - referred to as a 'Digital Signature' - based on a number of factors entered, plus (optionally) the date and time, or number of uses (events). In an online banking environment, the factors used to generate the Digital Signature during a funds transfer might be the debit account number, the destination account number and the amount of money being transferred. Digital Signatures are not currently in use with the Digipass Plug-In for IAS. 2.2.2 Virtual Digipass Differences The IAS Plug-In treats Primary Virtual Digipass slightly differently to other Digipass. The two main differences are: Grace Period A Primary Virtual Digipass cannot be used until its grace period has expired, if the method of requesting an OTP is the static password. This is to ensure that text messages are only sent when needed – avoiding unnecessary cost to the company and/or Users. However, in this case the OTP Request Site or User Self Management Web Site may be used to prematurely end the grace period. Backup Virtual Digipass The Backup Virtual Digipass feature cannot be enabled for a Primary Virtual Digipass. © 2005 VASCO Data Security Inc. 23
Page 1 and 2: Digipass Plug-In for IAS IAS Plug-I
Page 3 and 4: Digipass Plug-In for IAS Product Gu
Page 21: Digipass Plug-In for IAS Product Gu
Page 73:
Digipass Plug-In for IAS Product Gu
show all

Digipass Plug-In for IAS Product Guide - Vasco

Create successful ePaper yourself

Delete template?

Save as template?