Infrastructure-less USB Token Revealed By Gemalto

Permalink: Infrastructure-less USB Token Revealed By Gemalto

Gemalto North America is demonstrating an “infrastructure-less” Network Identity Manager (NIM) security token at the RSA Conference 2007 in San Francisco, the world’s leading information security event.

USB tokens are ideal vehicles for providing two-factor authentication, where two types of identification are required to give a user access to a Web site, but they require software to connect them to a Web server so that they can communicate with the web site the user wishes to access.

Gemalto North America is launching a USB token device which includes its own software to safely connect users to the Internet.

NIM plugs into a USB port, works with a standard browser, runs on any PC and does not require any software installations or downloads as it houses a processor-based network computer and TCP/IP-based Internet software.

The token is designed for use in places where downloads and software installations are blocked for security reasons. It verifies Web site authenticity and establishes an encrypted browser session directly between the NIM and the online business.

NIM is plugged into a USB port and a browser is called up. The user enters their PIN number via a keypad on the browser to unlock the NIM, which displays a list of Web site links.

Users select a site by clicking a link in the browser window. The NIM then uses its integral computer and Internet software to bypass the PC and any Internet address look-up servers to directly access the desired site and use a certificate to establish its authenticity.

NIM then sets up a secure tunnel directly between the NIM and the site using standard Internet security to protect the user.

The device protects a user’s online identity by eliminating exposure to Trojans, phishing and other security attacks.

The PIN also blocks anyone other than its owner from using the NIM, preventing lost or stolen devices from misuse. It will lock-up after a few wrong PIN entries.