Enterprise SAS

SentryBay Enterprise Secure Access System
Product Overview : With its Secure Access System, SentryBay provides 2/3 factor, two-way authentication for enterprise staff and customers that are user-friendly, simple to deploy and affordable.

Summary:

A leading-edge point-to-point solution, the Secure Access System is built around its own locked down browser that securely authenticates the connection to the corporate web server and features two-factor user authentication (via client-side certificate and user credentials). It can also add a third factor limiting use of the application to a specific designated PC/device. User credentials are encrypted preventing ‘Man-in-the-Middle’, ‘Man-in-the-Browser’ and Replay attacks. Encryption of the session cookie even protects against transaction injection and modification.

The software is installed on a Windows PC or Mac and operates in its own separate desktop where virtually no malware can operate. It uses the Qt browser with only SentryBay’s protection allowed to run with the browser. Utilising unique and patented anti-keylogging, anti-phishing and transaction-protection techniques, SentryBay protects entire sessions, safeguarding data at entry and during transmission.

Features:

• Unparalleled Security: Enables full two-factor authentication, and allows the option of three-factor authentication.
• Security with Simplicity: Sentrybay’s Secure Access System is the only software-only two-factor solution available today.
• Simplicity with Flexibility: Eradicates the need for traditional 2FA hardware, associated costs and human-error. Locked down browser with customisable tabs.
• Ease of Deployment:  Minor amendment to the authentication database. Automatic registration of new user authentication factors on first use.
• Total Peace of Mind: SentryBay’s patented key logging protection embedded within the browser protects the entire session.

Deployment

Companies are provided with a detailed SDK providing all files. Deployment normally takes only a few days, and involves minor additions to the database, insertion of a decryption library and small modifications to the relevant web page(s).The software can be downloaded securely from the company's web server, issued via cd-rom, or via a hardware device such as a cd-rom or flash drive. The first time the devices are used the Unique Security ID is automatically recorded against an individual customer - and from that point on the software/device can only be used in conjunction with that customer's login details.As the database requires no ongoing manual intervention or updating, the SAS is much less resource-intensive than other two-factor authentication solutions.