Singapore grants Keypasco patent for PKI Sign

投稿日: 10月 25, 201610月 25, 2016

To secure the core technology, the foundation of the Keypasco authentication solution, Keypasco has filed patent applications in all major countries. Keypasco are now happy to announce that the patent application for PKI Sign has been granted in Singapore. Keypasco´s aim is to make the Internet a safer place and to constantly provide cutting-edge security […]

Continue reading→

Japan grants Keypasco new patents for PKI Sign and Dynamic URL

投稿日: 9月 6, 20169月 6, 2016

To secure our core security technology, the foundation for Keypasco’s authentication solution, Keypasco has filed patent applications in all major countries. We are now happy to announce that the patent applications for PKI Sign and Dynamic URL has been granted in Japan. In total Keypasco holds four different patents that are granted in at least one country, including […]

Continue reading→

Keypasco Announces New Chief Technology Officer

投稿日: 2月 3, 20164月 1, 2016

2015 was a great year; with success on several markets and a wide range of new features Keypasco is moving into an expansion phase. The Keypasco authentication solution is hosted either in the clouds or on-premise and used for securing online- and mobile banking, mobile payment, online gaming, stock trading authentication with PKI signatures, as […]

Continue reading→

Keypasco and Toyo Corporation Partner Up to Provide Japan with Multi-factor Secure Authentication

投稿日: 11月 5, 20154月 1, 2016

Keypasco are happy to announce our latest partnership. Keypasco and TOYO Corporation partner up to provide Japan with Keypasco’s unique multi-factor secure authentication solution. Japan is struggling today with online security, and just in the first half of 2015, 754 incidents struck the banking sector resulting in a 15 billion yen loss according to the […]

Continue reading→

Keypasco Announces New Chairman of the Board

投稿日: 10月 12, 20154月 1, 2016

Keypasco AB, a strong authentication and secure mobility solution provider within patented new technology, is proud to announce the appointment of Owe Krook as the new Chairman of the Board. Our previous Chairman Jan-Olle Folkesson has left the position due to personal reasons. Owe’s background is lined with success in retail with 26 years of […]

Continue reading→

Award Winning Multi-factor Authentication Company Keypasco are Excited for the 2015 RSA Conference

投稿日: 3月 23, 20154月 1, 2016

The security limitations within mobility and the users wish for usability has pushed service providers to explore secure mobility options for their services. The estimated revenue of mobile services in 2015 are $600 billion and this makes the mobile platform a hacker’s first choice for victims. Mobility is a revolution in flexibility, and the only […]

Continue reading→

Keypasco join Concert International as a Concert International Member

投稿日: 2月 10, 20154月 5, 2016

Continue reading→

Keypasco and Innova Partner Up to Provide Turkey with the Keypasco Secure Authentication Solution

投稿日: 1月 28, 20154月 5, 2016

Continue reading→

Keypasco announces a new Market- and Sales Support Department

投稿日: 1月 23, 20154月 5, 2016

Continue reading→

Patents approved and customers live in production; Keypasco had a great 2013 and 2014 is looking even better

投稿日: 2月 19, 20144月 5, 2016

Continue reading→

デバイス認証

We offer a “token” for end users without the administration, logistics and hardware cost by using the devices the end users already own!

デバイスが自身のセキュリティを保障する！

The secure token is the identified device a user already carry, examples could be a smartphone, tablet, browser or a desktop/laptop computer.

Geographical locations

(geo-fencing)

Access is only allowed from locations that are approved, and the approved geographical location can be as large as a country or a continent, or just as small as a city.

We make sure that if a user moves from point A to B that they verify that it is indeed the true user who has moved.

デュアルチャネルアーキテクチャ

The Keypasco technology offers a strong authentication solution consisting of the Keypasco server (Borgen), one or several clients (Vakten), and a web channel.

The first channel sends information between the end user’s device/browser and the Internet Content Provider.
The second channel sends information between the end user’s device/Vakten client and the authentication server.

Then the verification of the end user´s attempt is done via the multi-factor levels of security. The Keypasco server verifies the device authentication, geographical location, micro proximity devices (optional), and the risk management.

ミクロ・アプローチ

The micro proximity feature adds an additional level of security by appointing a dedicated micro proximity device. If this micro proximity device is not in immediate proximity to the Vakten for Desktop client the user can’t login or sign any transactions.

For an example: if device 1 is used to login to an account then device 2 (which is the micro proximity device) has to be within centimetres of device 1 to be logged in.

リスク管理

Our risk management analysis feature provides a risk score for each attempt done by the end user. The risk score and it´s value is determent by indicators such as correct device, proximity of additional secure devices, Out Of Band verifications, geographical locations/geofencing, previous fraud and fraud trends etc.

This analysis is improved continuously and is an active part of the service to quickly mitigate new threats.

PKI Sign

The Keypasco PKI Sign feature is a dynamic feature that offers ICPs full support of PKI in a portable mobile device. The feature is based upon the core concepts:

a end users credentials, only known by the correct user,
a transaction can only be approved from the correct device,
a transaction can only be approved from an approved location.

We can guarantee by utilizing the PKI Sign that the signature is done by the correct user. Keypasco has invented (and patented) a new innovative way of using a users mobile device as a secure soft carrier of private keys.

An end users private key is divided into three parts: a client part, a server part, and a secret (PIN). The private keys can only be put together and sign a transaction if the end user has all three parts. The correct user is the only one who knows the secret to achieve the client part, and the server part is only achieved when the correct device and location has identified itself.

The feature does not require a Trusted Platform or a Secure Element, and Keypasco can provide the generating of keys, and verify the signatures if no established PKI CA is provided by the Internet Content Provider through an optional plugin.

マクロ・アプローチ

Access is only allowed from locations that are approved, and a user need to have his or hers devices within a reasonable distance of each other.

If the devices are too far apart (example: the distance between point A and point B) it will result in a weak macro proximity score.

GeoOTP

The Keypasco GeoOTP is a complementary mechanism for offline situations. This feature is suitable when a user is in a situation without network access.

The GeoOTP provides information about where the device is located and which device that is being used.

現地署名

Keypasco offers Internet Content Providers a way to provide user a option to sign transactions via the Desktop Client. The Vakten for Desktop client presents a window with the transaction details and asks the user to approve or deny.

This signature option is presented on the same Desktop device that initiated the attempt, but all the information is secured by the デュアルチャネルアーキテクチャ.

Vakten™ スマートフォン

The Vakten client is installed on the end users smartphone device to identity the device and location. This Vakten has two functionalities:

To send the device authentication and geographical location information to the Keypasco server Borgen,
and to receive tasks to confirm attempts, which is usually payment signatures or Out of Band recovery.

Supported platforms: Android & iOS.

Keypascoサーバー– Borgen™

The Keypasco server Borgen is self-scalable to handle any volume, and we offer a SLA on 99,999% uptime on the Cloud Server.

Borgen store the unique identifiers (made up by the device authentication, geographical location, micro proximity devices (optional), and the リスク管理.) in the anticipation that an Internet Content Provider and the Vakten software send in an authentication and/or sign attempt.

When an attempt is received, Borgen match the sets of identifiers sent through the different channels with the saved ones.

The Keypasco Server Borgen is offered to be hosted in both the Clouds and On-premise as a Server License.

Vakten™ ブラウザ

The Keypasco product Browser Vakten is an easy and quickly deployable product tailored as an entry level product on it’s own, but comes to it’s full strength in combination with the Keypasco client Smartphone Vakten.

It doesn’t require any installation procedure on client devices; it is instead an integrated part of the web layer of the Internet Content Provider’s web site by an embedded JavaScript.

The Vakten client is installed in the end users browser to identity the device and location. This Vakten has one functionality:

To send the device authentication and geographical location information to the Keypasco server Borgen

Supported platforms: Browsers (Internet Explorer, Chrome, Firefox, & Safari) on desktop (Windows, Mac OSX, & Linux) & smartphone (Android & iOS).

Vakten™ デスクトップパソコン

The Vakten client is installed on the end users smartphone device to identity the device and location. This Vakten has two functionalities:

To send the device authentication and geographical location information to the Keypasco server Borgen,
and to receive tasks to confirm attempts, which is a local sign payment signatures.

Supported platforms: Windows, Mac OSX, & Linux.

Mitigated Threats

Phishing: Keypasco mitigates phishing by linking the user with a geographical location and the device authentication. A user’s username and password will not work from a wrong device or location.

Man in the Middle & Man in the Browser: Man in the Middle (MitM) and Man in the Browser (MitB) attacks are mitigated by Keypasco’s 2-channel structure and the Out of band secure notifications.

Malicious Virus Control (Viruses, Trojans, etc): Viruses, Trojans, and other infections can control or replicate an end user’s device. Keypasco mitigates these threats by offering Out of Band authentication, which enables a user to regain control of devices and accounts.

Theft/Robbery: In addition to virtual threats, physical theft of a device can compromise a user’s security.
With Keypasco’s proximity feature, a user’s account is safe even if a device is stolen.

Japanese