AUTHSHIELD TWO

FACTOR
AUTHENTICATION
The threats from within are increasing on a
daily basis. 78% of all information security
breaches happen internally

CASE STUDIES
Information Security at its best

UNIQUE CASE STUDIES

Private and Confdential -INNEFU LABS

Mail Solutions
Database Queries Workflow Management

SAP GUI and Net

weaver

AUTHSHIELD INTEGRATION WITH

MAIL SERVER

Request forwarded to AuthShield Frontend

Plugin
Second factor Authentication validated from
Authentication server
On validation user name and password request
forwarded to Exchange

Private and Confdential - INNEFU LABS

User enters User Name & Password

02/27/15

User enters User Name and

Password on Web Portal
OWA checks for whether
OTP Prompt has to be shown
or not

In case Yes, user is prompted

for OTP else request is
forwarded to exchange
OTP is validated from
AuthShield Server

Microsoft Exchange with

Authentication Frontend Plugin

2
4

On OTP validation, original /

corrupted request is
forwarded to exchange

AuthShield Authentication Server

3
Active Directory

SAP GUI INTEGRATION

2FA integration with SAP GUI

02/27/15

Request forward to AuthShield Frontend server

Private and Confdential - INNEFU LABS

Second Factor of Authentication checked with

Authentication Server
User Name and Password are authenticated as
normal

PROCESS FLOW
User enters User Name and
Password in his client as
normal. Request sent to
AuthShield frontend

Checks for OTP requirement

from Authentication server. If
yes it sends a notifcation to
the handset / Desktop of the
user
On OTP validation, original /
junk request is forwarded to
SAP servers

4
SAP Servers

2
3

DATABASE QUERIES WORKFLOW

MANAGEMENT

For specifc users, when they fre a Database query

A PUSH notifcation is generated and sent to the reporting
manager

The

notifcation contains details on

User making the request

Details on the request

The query is only processed if the reporting manager

approves the query
The same architecture can be replicated from Database to
any other workflow

Private and Confdential -INNEFU LABS

OTHER CASE STUDIES

Windows Logon
with / without
Domain

Critical Intranet Applications

including Core Banking
Solutions

Login to
Remote

SSL VPN Juniper /

Citrix

Wireless
Networks

Private and Confdential -INNEFU LABS

Web Enabled
Applications

WEB ENABLED APPLICATIONS (SOURCE CODE

AVAILABLE)

Two Factor Authentication with

Web

Source Code available with the Client

Changes made to the Authentication Module of the
client application
AuthShield

login APIs integrated with the application

Private and Confdential -INNEFU LABS

Enable Application (PHP Based)

Inhouse built Finance Portal (Java Based)

Private and Confdential -INNEFU LABS

PROCESS
User Name, Pwd, OTP

True Authentication

True Authentication

User Name, OTP

Private and Confdential -INNEFU LABS

Access

User Name, Pwd

INTERNET BANKING SOLUTION

Client wanted Two Factor Authentication with

Reset

Source Code available with the Client

Changes made to the Authentication Module of the
client application
Innefus

Private and Confdential -INNEFU LABS

Password Options

2FA APIs were integrated with the application

Users were provided One Time Password via SMS any time
a user needs to reset his password

PROCESS
User Name, Pwd, OTP

True Authentication

True Authentication

User Name, OTP

Private and Confdential -INNEFU LABS

Access

User Name, Pwd

WINDOWS 7, XP WITH MS AD 2008

Client wanted Two Factor Authentication with

Windows XP with MS Active Directory 2003
Windows Vista with MS Active Directory 2003

Changes made to the Login dll of Windows

Innefus server module was installed on Active
Directory
Seamless integration done with Active Directory

Private and Confdential -INNEFU LABS

PROCESS
User Name, Pwd

Active Directory
True Authentication

User Name, OTP

AuthShield Server

Private and Confdential -INNEFU LABS

True Authentication

INTEGRATION WITH VPN

Client wanted Two Factor Authentication with

Authentication in VPN was done via RADIUS server

AuthShields server inbuilt RADIUS server was used
to authenticate the user
All requests forwarded to the IAS server which
authenticates the request

Private and Confdential -INNEFU LABS

SSL VPN

PROCESS
User Name, Pwd

Active Directory
True Authentication

User Name, OTP

AuthShield Server

Private and Confdential -INNEFU LABS

True Authentication

WHAT WE OFFER
Features

One Touch Authentication

PKI Token using smart Phones

Reusable response based on IP and

time duration
Indigenous Tokens thereby offering cobranding opportunities and instant
turnaround time
Customization as per clients
requirements
Superior support at cheaper costs

5
6
7

Unparalleled experience of working

with large Government and corporate
clients

AuthShield

Others

Private and Confdential -INNEFU LABS

S.no

PREVENT IDENTITY
THEFT!!

Private and Confdential -INNEFU LABS

COUNT ON

QUESTIONS WELCOME
INNEFU LABS PVT. LTD
www.innefu.com

+91-11-47065864 / 66
contact@innefu.com, info@innefu.com

Private and Confdential -INNEFU LABS

THANK YOU