Deepnet Unified Authentication Platform

FAQ

What is Authentication?  
Authentication is the process of determining whether someone or something is in fact, who or what it is declared to be.

What Benefits does Authentication bring ? 
Confirming a users identity is of paramount importance in these days of phishing, identity theft and fraud.

Authentication makes sure the person accessing their bank account, your network, email account, application, Outlook Web Access, website shopping system etc. is who they say they are, and that they are authorised to view information, make payments etc..  

What does " 2-Way, 2-Factor" Authentication really mean and why is it important? 
Two-way authentication is where (for example), a customer is required to prove their identity to the bank's web site and the web site must in return prove its authenticity to the user. This ensures both parties can be confident that they are dealing with a legitimate source.

Two Factor authentication adds the requirement to have the ability to generate a token, or one time password using an authorised method.  

How does Deepnet Authentication actually work ? 
There are many applications and authentication methods available depending on your requirements - but at a basic level it works like this:

• Customer installs Deepnet Authentication "server" software.
• Customer decides which application they wish to authenticate to occur.  For example lets say Outlook Web Access 2003 or 2007 (OWA).
• Following simple instructions provided customer configures OWA to require authentication.
• Customer decides which form of tokens they wish to issue - for example again lets say you wish to issue "One Time Password" tokens via SMS to their mobile phone.
• In the Deepnet Authentication "server" software, you create a user, set up their details and enter their mobile number.
• End user goes to the OWA server and tries to logon.  Customer enters their username and password, and is presented with a button to send a OTP (one time password) via SMS.
• In a few seconds an SMS is received by the end users mobile phone which they enter into the logon screen, authorised and logon to OWA proceeds as normal.
• End user leaves the company.   Deepnet administrator clicks a button which revokes the customers ability to receive OTP (this can be done automatically via AD / LDAP etc). 

What's wrong with Hardware tokens such as RSA, Vasco and Safeword?  
Cost!  They are expensive to buy, expensive to maintain, expensive to ship, expensive to manage - and have to be replaced every few years when the battery fails.

They are also frequently lost - adding to inconvenience (no token = no access) and expense for both the end user and the issuing company.

Already use RSA, Safeword, Vasco, Aladdin or other push-button hardware tokens? Costing you a fortune to replace, manage and deploy? See Deepnet's free hardware swapout offer.  

Why is Deepnet so more cost effective ?  
Everything is included in one price. 

Server software, all software token types and all application methods are included - you choose how you wish to deploy / mix and match authentication to your requirements.

 How do I manage Deepnet, setup users and and deploy the tokens?  
 Deepnet is managed by an intuitive, simple to use Web application which runs in any browser.

 Full documentation is included in the trial download package.

How do I setup Authentication for example with Outlook Web Access, Citrix or Windows Logon?  
Exact explanation is detailed in the user guides, but at a basic level the procedure is the same as this.  

What Server Platforms does Deepnet Authentication Software run on?  
Deepnet runs on any server platform that's supports Java - that means it can run on for example Windows, Linux, Unix and SUN.  

How does the SMS Token delivery (QuickID) work? 
If you choose to use QuickID (SMS delivery) of OTP tokens, Deepnet is pre-configured to interface to a recommended online SMS service - ClickaTell is recommended. 

The customer will then create an account, and purchase credits which are debited as users receive SMS messages.

ClickaTell are highly reliable, ultra-fast and very cost-effective.  Bulk credits can be purchased and work out at around 2p per SMS.  

How do I generate tokens on my mobile phone? 
For MobileID to work you must have any modern, Java enabled phone (or iPhone, PDA, Blackberry etc) and have a WAP / WiFi connection.

• The Deepnet Administrator would create a user, select MobileID as the delivery method, and enter the end-users mobile number.
• An option would then be presented to deliver the MobileID application to the phone via WAP Push.
• Once received on the mobile device, you save the application.
• Then if for example you wish to log on to Outlook Web Access using MobileID, you would visit the OWA website, enter your username and password as normal.  You will also be prompted for a OTP )one time password).   You would go to "Applications" on your mobile and run the MobileID application.
• A OTP will be generated which you would enter into OWA and logon would proceed as normal. 

What about the other tokens ? 
All are easy to deploy and use.  See the Application Methods section for details of the options. 

Is it easy to install ? 
Very !  An install typically takes 30 minutes. 

Does Deepnet work with Citrix ?  
Yes !  

What reporting data is available? 
A full audit trail is included in the server software. 

Can I run Deepnet Authentication on my PC at home?  
Deepnet is a Business solution - it is not for regular home users.   The server / backend of Deepnet is designed for installation and management by businesses or other organisations.

However, Tokens / token generation is decided on by the business - and depending on which authentication method is chosen you may run some authentication client software on the PC - it may even be a "home" PC....  

Does Deepnet integrate with Active Directory to synchronise user information?  
Yes

How is it priced ? 
Deepnet is priced per token with packs starting at 25 tokens.  You can use these tokens for any authentication method you want.

That's it. There are NO confusing price lists and NO hidden optional extras.

• All of the server software is included.
• You can use ANY combination of available token generation methods- MobileID, QuickID, Typesense etc. etc.  Its your choice from within the management console..
• Annual support and upgrades is included.