Solution for securing VPN/RAS using 2-factor SMS Authentication

Solution for securing VPN/RAS using 2-factor SMS Authentication

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Solution for securing VPN/RAS using 2-factor SMS Authentication Joshua Lim 06-12-2005
Posted by Joshua Lim on June 12, 2005, 3:01 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi Everyone,

I've developed an IAS plugin, 'MobileKey', that provides 2-Factor
Authentication (via SMS) for VPN/RAS networks using Microsoft IAS
(Win2k/Win2k3) as RADIUS server.

Two authentication modes are supported - Windows password plus SMS
access code, and Challenge Password plus SMS access code. Delivering
access code by SMS secures the VPN against key-press capture spyware
and trojans residing on the client PC.

'MobileKey' is database driven/secured and can comfortably authenticate
up to 50,000 users a day with an SMPP connectivity to an SMSC.

I'm now looking for beta testers for this plugin to test out on ISA
Server and other VPN/RAS equipment, as well as partners interested in
reselling this kind of solution out of the box, customized or OEM.

'MobileKey' offers unbeatable value for deployments exceeding 30 VPN
users as no hardware key is required - your mobilephone is your key
generator!

Here's some preliminary information:-

SMS Gateway used - VisualGSM Enterprise Server
(http://www.visualtron.com/products_enterprise.htm)

IAS Plugin Windows Installer with Help file
(http://www.visualtron.com/download/mobilekey-radius.exe)

SMS delivery mode - GSM or SMPP 3.3/3.4


Please feel free to contact me anytime.

Rgds,
Joshua Lim
Visualtron Software
http://www.sms-gateway-software.com



Similar ThreadsPosted
Another example of why cheap 2factor is doomed April 26, 2006, 1:06 am
Looking for system/device authentication solution for web app February 8, 2006, 9:12 am
remote access solution with mobile phone / SMS-based authentication? December 19, 2005, 4:43 am
SSL Server authentication, SSL client authentication, SSL connection and SSL session August 14, 2006, 1:05 pm
WEP authentication, why WEP authentication scheme is flawed and how it can be attacked August 1, 2006, 12:51 pm
Securing the database from the DBA March 30, 2004, 7:51 am
Securing tcp data November 10, 2005, 2:51 pm
Securing network from laptops July 23, 2005, 3:44 pm
Securing code in embedded devices February 14, 2005, 5:08 pm
Securing Endpoint Access such as USB Ports January 5, 2006, 7:47 am

The site map in XML format XML site map

Contact Us | Privacy Policy