AfricaSD offers next-generation tokenless, two-factor authentication from SecurEnvoy

Leading sub-Saharan e-security distributor, AfricaSD, has partnered with SecurEnvoy to offer its innovative tokenless, two-factor authentication solutions. SecurEnvoy's products enable companies to securely protect their networks and e-mail in a cost-effective and convenient way.

"This is the ideal solution for companies that want to maintain the highest levels of security, but still permit straightforward remote access to their networks," explains Hennie Moolman, Managing Director of AfricaSD. "A high level of security is achieved because authentication requires two corroborating proofs of identity, but without the usual hassles and costs of carrying a dedicated security token, smart card or USB key."

SecurEnvoy's solutions employ two-factor authentication - requiring the user to provide both a secret (something they know) and a virtual token (something they own) as proof of their identity. This provides a valuable additional layer of security.

"Two-factor authentication is extremely important because a secret, like a password, is no longer enough by itself," explains Moolman. "These can be cracked relatively easily using sophisticated social engineering, keystroke logging or screen scraping software, or simple brute force programs."

The most effective way of preventing unauthorised access using a cracked password is to require an additional, corroborating proof of identity - usually by providing a 'token', like a smart card or USB key - at the same time.

The advantage of SecurEnvoy's solution is that it employs the user's mobile phone as a 'virtual token'. "This is an extremely elegant and cost-effective solution," observes Moolman, "because it neatly sidesteps the normal costs and management problems associated with deploying physical tokens. Companies don't have to deal with replacing lost, stolen or damaged tokens all the time and help-desks are freed up from fielding password reset requests every day."

Instead of using - and inevitably replacing - tokens, the virtual option means that a one-time passcode is sent to a worker's mobile phone. When they wish to log into the system, they simply enter their normal username and password, together with the passcode from their mobile phone. Once the passcode has been used, a new one is sent and the previous passcode is overwritten. The user will, therefore, only ever see one passcode on their phone.

Two solutions are available: SecurAccess and SecurMail. The SecurAccess solution employs the process outlined above to secure corporate networks. It integrates directly into Microsoft Active Directory and other directories servers, such as eDirectory, eliminating the need to recreate or synchronise users in a separate database. Administration is also easy and can be accessed remotely and securely via SecurEnvoy's dynamic Web console.

The SecurMail solution uses the same approach to enable individuals to send and receive e-mail across the Internet, without the complexity of traditional digital certificate-based solutions or being blocked by e-mail virus checkers that can't decrypt the messages. No plug-ins are required at the receiving end so the recipient does not need to update or download anything extra to be able to read the mail. All they need is Internet access, an e-mail account and a mobile phone.

AfricaSD is also offering a special introductory concession on all purchases made before 31 December 2007 that entitles customers to an additional three-month extension on their annual licence at no charge.

Parties interested in taking advantage of this introductory offer or finding out more about either SecurEnvoy solution should contact AfricaSD directly on +27 (0) 12 665-2513 or download trial versions of the software packages from the company's Web site at http://www.africasd.com.