The Institute for Information Industry Has Led Several Info Security Merchants to Join Singapore International Cyber Week (SICW) – To Show Taiwan’s Independent Development of Info Security and the Capability of Service Solutions

Posted on October 1, 2019March 13, 2020

In order to improve the communication of domestic Info Security vendors with each other and strengthen international cooperation, the Institute of Information Industry with the support of the Industrial Development Bureau (MOEA) has selected twelve outstanding Taiwanese Info Security vendors to join the Singapore International Cyber Week from the 1st to the 3rd of October, […]

Continue reading→

Lydsec Acquires Keypasco Security Business

Posted on April 24, 2019March 13, 2020

The Taiwanese tech company Lydsec Digital Technology Co., Ltd. acquires the online security business of Swedish security company Keypasco AB. The two companies have been partners since 2012 and this is the natural next step towards a stronger brand and continued strong product development. Lydsec Digital Technology, based in Taipei, Taiwan, has a long history […]

Continue reading→

Season greetings from Keypasco

Posted on December 21, 2018December 21, 2018

Another year has passed, and a new exciting year awaits us. By the end of 2018 several new customers and partners has joined the Keypasco community, and the Keypasco Solution now protects over 2 million end-users. Next year, we will continue our mission to secure all digital assets. Happy Holidays and warm wishes for 2019! For […]

Continue reading→

New update of the Keypasco server – Borgen™ released

Posted on November 29, 2018November 30, 2018

Keypasco are happy to announce the release of the new and improved version of Borgen™. This release addresses many of the things customers have requested to get an even better and more easily managed security tool. Keypasco has now reached over 2 million active users. With good growth in many different application areas, the number […]

Continue reading→

Public Sale starts today – Keypasco ICO update

Posted on October 1, 2018October 2, 2018

When well-established Swedish IT security company Keypasco first heard of ICOs they quickly decided that this was something new and exciting they just had to learn more about – and the best way to learn is to try it yourself. And now after an intense period of preparation, and an extensive private sales road show […]

Continue reading→

Blockchain experts award Keypasco

Posted on June 27, 2018June 27, 2018

Throughout the year Keypasco has been working intensively with preparations for the ICO launch. A work that is now gaining attention, and the project was today announced by leading experts as The Best ICO Project. Keypasco won the award as the best ICO project among 6 candidates. The award was presented after a 2-day event […]

Continue reading→

Keypasco expands to Blockchain

Posted on April 24, 2018April 24, 2018

The Swedish IT security company Keypasco has been working in the field of online authentication since 2010, providing its unique patented solution to millions of end-users worldwide. To expand in to the future Keypasco are now developing their solution in to the world of blockchain. With a clear goal set – to secure all virtual […]

Continue reading→

The New Security Solution for the Title Insurance and Real Estate Industry

Posted on February 27, 2018February 27, 2018

Keypasco and ViaLOK have joined forces to bring a new security solution made specifically to help secure communications between title agents, lenders as well as buyers, sellers and their agents. Technology is always evolving, and to stay ahead of criminals who would defraud members of the title insurance and real estate industry and their customers, […]

Continue reading→

AG2 and Keypasco Welcome New Customer Identicare

Posted on January 26, 2018January 26, 2018

Last November, our partners AG2 travelled to the Trustech Conference to join us in our stand. Professionals from the trust-based technologies gathered together for 3 days in the beautiful surrounding of Cannes, France. For AG2 and Keypasco, the event marked a very special occasion, the announcement of our new client – Identicare. Identicare is focussed on […]

Continue reading→

Keypasco partners with Irish AG2 to deliver Award Winning MDM Solution in Irish Market

Posted on November 14, 2017November 14, 2017

Today Swedish mobile device security company Keypasco, announced a partnership with Irish security company AG2. AG2 is a trading name of Absolute Graphics who have gained both national and international recognition for their specialised security design projects including the Irish passport and Irish passport card. “Significant effort and time has been invested in order to […]

Continue reading→

Device authentication

We offer a “token” for end users without the administration, logistics and hardware cost by using the devices the end users already own!

Security By Your Own Device!

The secure token is the identified device a user already carry, examples could be a smartphone, tablet, browser or a desktop/laptop computer.

Geographical locations

(geo-fencing)

Access is only allowed from locations that are approved, and the approved geographical location can be as large as a country or a continent, or just as small as a city.

We make sure that if a user moves from point A to B that they verify that it is indeed the true user who has moved.

2-channel structure

The Keypasco technology offers a strong authentication solution consisting of the Keypasco server (Borgen), one or several clients (Vakten), and a web channel.

The first channel sends information between the end user’s device/browser and the Internet Content Provider.
The second channel sends information between the end user’s device/Vakten client and the authentication server.

Then the verification of the end user´s attempt is done via the multi-factor levels of security. The Keypasco server verifies the device authentication, geographical location, micro proximity devices (optional), and the risk management.

Micro proximity

The micro proximity feature adds an additional level of security by appointing a dedicated micro proximity device. If this micro proximity device is not in immediate proximity to the Vakten for Desktop client the user can’t login or sign any transactions.

For an example: if device 1 is used to login to an account then device 2 (which is the micro proximity device) has to be within centimetres of device 1 to be logged in.

Risk management

Our risk management analysis feature provides a risk score for each attempt done by the end user. The risk score and it´s value is determent by indicators such as correct device, proximity of additional secure devices, Out Of Band verifications, geographical locations/geofencing, previous fraud and fraud trends etc.

This analysis is improved continuously and is an active part of the service to quickly mitigate new threats.

PKI Sign

The Keypasco PKI Sign feature is a dynamic feature that offers ICPs full support of PKI in a portable mobile device. The feature is based upon the core concepts:

a end users credentials, only known by the correct user,
a transaction can only be approved from the correct device,
a transaction can only be approved from an approved location.

We can guarantee by utilizing the PKI Sign that the signature is done by the correct user. Keypasco has invented (and patented) a new innovative way of using a users mobile device as a secure soft carrier of private keys.

An end users private key is divided into three parts: a client part, a server part, and a secret (PIN). The private keys can only be put together and sign a transaction if the end user has all three parts. The correct user is the only one who knows the secret to achieve the client part, and the server part is only achieved when the correct device and location has identified itself.

The feature does not require a Trusted Platform or a Secure Element, and Keypasco can provide the generating of keys, and verify the signatures if no established PKI CA is provided by the Internet Content Provider through an optional plugin.

Macro proximity

Access is only allowed from locations that are approved, and a user need to have his or hers devices within a reasonable distance of each other.

If the devices are too far apart (example: the distance between point A and point B) it will result in a weak macro proximity score.

GeoOTP

The Keypasco GeoOTP is a complementary mechanism for offline situations. This feature is suitable when a user is in a situation without network access.

The GeoOTP provides information about where the device is located and which device that is being used.

Local sign

Keypasco offers Internet Content Providers a way to provide user a option to sign transactions via the Desktop Client. The Vakten for Desktop client presents a window with the transaction details and asks the user to approve or deny.

This signature option is presented on the same Desktop device that initiated the attempt, but all the information is secured by the 2-channel structure.

Vakten™ Smartphone

The Vakten client is installed on the end users smartphone device to identity the device and location. This Vakten has two functionalities:

To send the device authentication and geographical location information to the Keypasco server Borgen,
and to receive tasks to confirm attempts, which is usually payment signatures or Out of Band recovery.

Supported platforms: Android & iOS.

The Keypasco server – Borgen™

The Keypasco server Borgen is self-scalable to handle any volume, and we offer a SLA on 99,999% uptime on the Cloud Server.

Borgen store the unique identifiers (made up by the device authentication, geographical location, micro proximity devices (optional), and the Risk management.) in the anticipation that an Internet Content Provider and the Vakten software send in an authentication and/or sign attempt.

When an attempt is received, Borgen match the sets of identifiers sent through the different channels with the saved ones.

The Keypasco Server Borgen is offered to be hosted in both the Clouds and On-premise as a Server License.

Vakten™ Browser

The Keypasco product Browser Vakten is an easy and quickly deployable product tailored as an entry level product on it’s own, but comes to it’s full strength in combination with the Keypasco client Smartphone Vakten.

It doesn’t require any installation procedure on client devices; it is instead an integrated part of the web layer of the Internet Content Provider’s web site by an embedded JavaScript.

The Vakten client is installed in the end users browser to identity the device and location. This Vakten has one functionality:

To send the device authentication and geographical location information to the Keypasco server Borgen

Supported platforms: Browsers (Internet Explorer, Chrome, Firefox, & Safari) on desktop (Windows, Mac OSX, & Linux) & smartphone (Android & iOS).

Vakten™ Desktop

The Vakten client is installed on the end users smartphone device to identity the device and location. This Vakten has two functionalities:

To send the device authentication and geographical location information to the Keypasco server Borgen,
and to receive tasks to confirm attempts, which is a local sign payment signatures.

Supported platforms: Windows, Mac OSX, & Linux.

Mitigated Threats

Phishing: Keypasco mitigates phishing by linking the user with a geographical location and the device authentication. A user’s username and password will not work from a wrong device or location.

Man in the Middle & Man in the Browser: Man in the Middle (MitM) and Man in the Browser (MitB) attacks are mitigated by Keypasco’s 2-channel structure and the Out of band secure notifications.

Malicious Virus Control (Viruses, Trojans, etc): Viruses, Trojans, and other infections can control or replicate an end user’s device. Keypasco mitigates these threats by offering Out of Band authentication, which enables a user to regain control of devices and accounts.

Theft/Robbery: In addition to virtual threats, physical theft of a device can compromise a user’s security.
With Keypasco’s proximity feature, a user’s account is safe even if a device is stolen.

English