Strong software authentication with BioPassword

Stoneware, Inc. has integrated BioPassword’s award-winning software to provide webNetwork customers with strong user authentication without changing their existing login procedures. With the addition of BioPassword, organizations are capable of securing access to all webNetwork resources by using keyboard dynamics to enforce a higher grade of system access. BioPassword offers the only multifactor authentication software that combines the user’s login credentials (userID and password) with the behavioral biometric of keystroke dynamics (unique typing rhythm) to provide a low-cost accurate security solution that is specific to the user, requires no change in user behavior, monitors and authenticates credentials and is immediately deployable across the organization and the Internet without the need for expensive hardware tokens, cards or other security devices.

BioPassword Features

BioPassword leverages keyboard dynamics to strengthen the authentication process. The metrics gathered during the login process become the user’s second factor of authentication. Not only will a user’s ID/Password be required for login, the “rhythm” by which users entered their credentials will be used to validate their authentication. This “rhythm” cannot be shared, lost, or forgotten by end users making it the perfect solution for any organization.

• Prevents phishing, pharming, keystroke logging, and other social engineering attacks
• No changes in the user's behavior or the login process
• Leverages the user's existing network ID and Password
• No hardware to be deployed or managed to/with end users - tokens, cards, keys, etc
• Reduce password changes

Integrated Features

Stoneware, Inc. has enabled the integration of BioPassword technology to strengthen the webNetwork authentication process and provide a new form of multifactor authentication. When enabled, webNetwork user credentials will be validated against the directory service when their “unique typing rhythm” is verified with the BioPassword server. If both factors prove to be valid the user is allowed to access all webNetwork resources, applications, files, documents, reports, published applications, etc. BioPassword features incorporated by webNetwork include:

• Enable BioPassword multifactor authentication via Login Policy
• Configure end-user training options on a user, group, or container level
• Integrates with Micrsoft Active Directory, Novell eDirectory, OpenLDAP, and ApacheDS
• Leverages webNetwork's Password Self Service
• Integrated login page and authentication services

Architecture

Stoneware’s implementation of BioPassword’s leverages the two-tier webNetwork Server/Relay architecture to secure the BioPassword server inside the internal network. Access to the BioPassword server and process will not be available from any device outside the corporate DMZ therefore further protecting the authentication process and the system.