The m-trusted application is an OTP generator (One-Time Password). It is a complete solution adherent to the OATH standard, which supports multiple authentication methods and tokens arranged as a catalog.
The m-Trusted provides security in transactions between companies and their customers following the tendency of convergence and mobility.
The strong authentication methods available are:
• OATH Time OTP;
• OATH Event OTP;
• OCRA (OATH Challenge Response Authentication);
• Transaction Signing (based on OCRA algorithm).
The token download is a simple and fast procedure through the "Tools Module", which also perform the token activation and synchronization when needed.
The "Tools Module" and the "m-Trusted Server" (OTP authentication server) are solutions available for companies that uses m-Trusted solution to protect access to its electronic resources.
The m-Trusted works like OTP hardware tokens, but with advantages, outstanding among which are:
• Eliminates the acquisition of physical tokens;
• Has anti-cloning mechanism, which prevents copying of the token to another device;
• Provides a secure download of the token, which prevents the capture of information by an attacker;
• The clock synchronization process occurs in the authentication server, eliminating the attacks in the synchronization process of the token;
• Password to prevent an attacker to view the token.
To download the token the user loads the application, login and access the "Add Token" from the menu. The application prompts the user to enter the Serial Number and Activation Code, which is obtained by accessing the "Tools Module." The phone will initiate a connection to the server and establish a secure connection with this to transmit the token.
Once the download token, this needs to be enabled, informing them two temporary passwords, as requested in the "Module Tool." Once activated, ready to protect users' access to electronic resources protected by the solution.
Target Audience: employees, partners and users who access the electronic resources of a user enterprise solution m-Trusted.
