The WiKID Blog

Viewing posts by root

When do I need a commercial license?

Posted by: root 15 years, 11 months ago

If you want support, if you want one of the wireless software tokens clients, or if you want RADIUS support, you should get the Enterprise version. In general, for enterprise deployments, we recommend the Enterprise version.  Or, if you like the project and just want to support us, buy the Enterprise version.

Will the WiKID token run on a USB Token?

Posted by: root 15 years, 11 months ago

Yes. It can run on any USB drive and because we use asymmetric keys and the key pairs will be generated on the USB drive, the distribution of tokens is much easier. Any user can get any fresh USB drive and use it.

What is the base architecture of WiKID Authentication?

Posted by: root 15 years, 11 months ago

WiKID Strong Authentication consists of two main elements, the WiKID Strong Authentication Server  and the WiKID Two-factor Client for user devices. The WiKID Strong Authentication Server interfaces with various Network Clients, such as firewalls, VPN services, Citrix, directories or applications via Protocol Modules, such as RADIUS, LDAP, SMB or the WiKID Authentication Protocol, an SSL-encapsulated API for web-enabled application integration.

When a user wants to login,say to a VPN service, they enter a PIN into the WiKID Software token client, it is encrypted by the public key of the WiKID server and sent to the server. If the encryption is valid, the PIN is correct and the account is active, the server returns the one-time passcode encrypted by the Client's public key. The user then enter their username and one-time passcode into the VPN client. The VPN service forwards the credentials to the WiKID server via a protocol such as Radius for validation.

What are WiKID "Domains"?

Posted by: root 15 years, 11 months ago

A WiKID Strong Authentication Server is capable of managing multiple domains. A domain segregates users with respect to access and security. For example, remote office users would be associated with a VPN domain that granted access through a Cisco ASA service. Remote access to the Cisco ASA itself could be granted to administrators using a separate domain. Each domain can have different security elements such as PIN length, passcode lifetime, maximum bad PIN attempts, etc.

The WiKID client is capable of working with domains across multiple authentication servers, even from different enterprises, with no reduction in security. Thus WiKID is ideally suited for the Internet age.

But we can't ask non-employees to run software on their PCs. What can we do about vendors?

Posted by: root 15 years, 11 months ago

We suggest you use USB tokens or wireless tokens.

• Page 11 of 14
• ←
• 1
• 2
• 3
• 4
• 5
• 6
• 7
• 8
• 9
• 10
• 11
• 12
• 13
• 14
• →