Authenex A-Key® Token

The Authenex A-Key® is a house-key sized token that serves as the platform for the Authenex suite of strong, two-factor e-security applications. The unique benefit of the A-Key is its on-board CPU allowing secure functions to be executed on the token and not on the computer. Embedded drivers and combined authentication features offer total mobility and maximum flexibility for A-Key users. The A-Key offers enterprises a wide array of user authentication options and security features to properly identify users before they access a secure network through:

• PKI (Public Key Infrastructure)
• One-Time Password (OTP)
• Challenge-Response
• Total Mobility "Driverless" Experience
• Secure Storage
• AES Encryption

The A-Key is equipped with embedded Crypto Service Provider (CSP) and crypto functions for PKI authentication. The event-based One-Time Password function offers a 6-digit numeric PIN that can be used alongside a password for strong, two-factor authentication. And the A-Key utilizes 128-bit Advanced Encryption Standard (AES) to execute challenge-response sequences with a local or server-side application.

For a total mobile experience, the A-Key is a storage class device that offers a "driverless" experience so that a user does not need pre-existing software on a computer. The memory area is password protected and data stored on the A-Key is encrypted. The A-Key is multi-functional and is available in several versions to offer the exact security specifications you require while still remaining affordable.

How A-Key Works:

The Authenex A-Key® is very simple and versatile to use. Inserting the A-Key into the USB port of a computer, a user only needs to type in their password to use strong two-factor authentication. The Challenge/Response technology of the A-Key will provide the correct response to a challenge from our Authenex ASAS™ server to authenticate the user. For PKI authentication, the A-Key is PC/SC compliant and executes on board key generation and signing. The A-Key is also a storage class device that offers a plug-and-play experience without the need of preloaded software on any computer the user works off of. Plus, the secure flash memory area of the A-Key can store digital certificates that can automatically be used to authenticate within a PKI solution.

If a USB port is not available, the A-Key's OTP function can be used by pressing a button to generate an event based 6-digit password. That password can be used in conjunction with the user's A-Key password to authenticate.

The multiple authentication methods, encryption engine, secure storage capabilities and "driverless" functionality all contribute to a total mobile solution that is flexible and affordable.

A-Key Features and Benefits:

Secure Design - The chip aboard the A-Key is hacker proof and will fail if removed from the board. Our USB model A-Key is injection molded to be tamper resistant. All other A-Keys are tamper evident and in sealed polycarbonate casing.

Non-Duplicable - An assigned Electronic Serial Number and a randomly (or administratively) generated 4096-bit shared secret ensure that each key is unique.

Safe and Easy to Use - The user's password is never transmitted over the network or recorded in a central depository. The transition for users is simple - as it is just like using and ATM card at your local bank.

Multiple Authentication Methods - In addition to the A-Key's challenge/response technology via the USB interface, OTP and PKI allow for multiple options for authentication.

Driverless Mobility - The storage class device allows for a total mobility, "plug and play" user experience.

OTP Functionality - A button activated random number generator and LCD screen allow access by OTP via any VPN connection, allowing secure access from any connection.

PKI-Ready - The A-Key carries a password-activated memory area that can be used for securely storing private keys and certificates.

A-Key Product Specifications:

Standard Compliance:
Public Key Infrastructure
- On Board 1024/2048-bit RSA key-pair generation
- X.509 Digital Certificates
- MS CAPI compliant
- PKCS#11
- PKCS#12

Symmetric Key Cryptography
- AES 128-bit, 192-bit and 256-bit
Secure Hashing Algorithms
- SHA-1
OTP Algorithm
- OATH compliant (160-bit)
Equivalent to FIPS-140 Level 3 security

Hardware:
On-board Security Processor
- V4, 100MHZ
- AES 128-bit, 192-bit and 256-bit
- SHA-1
On Board Memory
- From 128 MB up to 2 GB
Interface
- USB 2.0
Operating Temperature
- -10° to 60° C
Storage Temperature
- -20° to 70° C

Display
- 6-Digit Numeric LCD (Optional)
Battery (available on token with display)
- 5 year life

Physical Characteristics
Casing
-Injection molded plastic, tamper evident

Operating Systems:
- Windows 2000 Professional and Server
- Windows XP Home and Professional
- Windows 2003 Server

LAN and Remote Access (With Authenex ASAS® Authentication Server):
- Dial-up to a remote server with MS RRAS and RADIUS
- VPN with: Check PointTM, Cisco Systems®, Microsoft®, NetscreenTM, Nortel®, SafenetTM and/or others using RADIUS
- SSL VPN
- Secure Web Access
- Network Login for MS Windows 2000 and 2003 Servers and XP Home and Professional Editions

PKI Certificate Storage:
- Compatible with leading Certificate Authorities including:
BaltimoreTM, Entrust®, iPlanetTM, Microsoft®, Verisign, and others
-X.509 Certificates

Encryption:
- Hard Disk Encryption (optional)
- File Encryption

OTP Number Generation:
- OATH 160-bit

Personal Password Manager
- Microsoft Internet Explorer

Authenex SDK:
- ASAS Authentication API
- ASA Management API
- A-Key® API

DataSheets:

	Download the Authenex A-Key Data Sheet (PDF).
	Download the Authenex Overview Data Sheet (PDF).