Public Relations

Asgent Announces Start of Sales for Tokenless 2 Factor Authentication Solution as Countermeasure to List-based Attacks

- Asgent and Security Strings Sign Reseller Agreement -

July 8, 2014
Asgent, Inc.
(JASDAQ: 4288)
Security Strings LLC

Asgent, Inc. (President & CEO: Takahiro Sugimoto, located in Chuo-ku, Tokyo) and Security Strings LLC (Representative Managing Partner: Yoshiaki Tsujine, located in Chiyoda-ku, Tokyo), the Japanese distributor for Swivel Secure Ltd. (VP: Fraser Thomas, located in the UK) announce the signing of a reseller agreement to sell the tokenless 2 factor authentication solution “PINsafe”.

Web-based services are currently under pressure from a rash of unauthorized access cases.

The most virulent of these are “list-based” attacks (list-based account hacking). List-based attacks make used of human vulnerabilities, that is, the tendency for users to use the same password on multiple websites and web services. For example, if a user ID and password that such a user had set for a particular Web site or Web service were to fall into the hands of a third party, that party (the attacker) will attempt illegal logins to other websites and service on the presumption that the user had set the same ID and password on multiple sites. This is an example of a list-based attack.

To counter such attacks, in December 2013 the Ministry of Internal Affairs and Communications published a set of guidelines entitled “Regarding Measures for Dealing with Unauthorized Logins Resulting from List-based Account Hacking”, aimed at service providers. In these guidelines, points reinforcing the importance of raising awareness regarding the widespread use of user IDs and passwords, setting expiration dates for passwords and configuring systems to reject easily guessed passwords, are raised. However, because the underlying vulnerability related to reuse of IDs and passwords is reliant upon the users’ security awareness, it is very difficult for service providers to take sufficient steps to prevent such attacks from occurring.

With this background in mind, Asgent and Security Strings will work to promote sales of Swivel’s “PINsafe” product. “PINsafe” is a tokenless 2 factor authentication solution that has a traditionally strong presence in Europe and the UK. Implementing “PINsafe” enables one time password-based 2 factor authentication while also providing a countermeasure to list-based attacks. “PINsafe” does not require physical hardware tokens, releasing the administrator from the cumbersome procedures and processing that is required to manage tokens, while also allowing users to use various services just by remembering a simple PIN code.

【2 Factor Authentication with PINsafe】

1）The user configures and remembers a predefined PIN (Personal Identification Number)

2）A “Security String” (a random string of numbers and/or letters) is obtained through a mobile device or over the Web

3）The user matches the PIN code with the “Security String” to create a one-time password

Regarding the signing of this reseller agreement, Asgent President & CEO Takahiro Sugimoto says, “PINsafe is an effective solution for combating list-based attacks. With its ease of use and flexibility including support for mobile devices, we expect it to be adopted by many service providers. We plan for many ventures in hand with Security Strings to realize a safer Web environment for all users”.

In turn, Security Strings Representative Managing Partner Yoshiaki Tsujine says, “We are extremely happy to have signed a reseller agreement with Asgent, who has such a stellar and outstanding record in the Japanese IT security industry. Asgent has a very strong record and reputation for providing network security solutions. We have very high expectations that Asgent will work to link PINsafe with their existing solutions to develop an authentication solution with high added value. We will vigorously push forward with Asgent in our business to help create a safe Internet, Web and Cloud environment that society can feel secure in using”.

Asgent will work with existing partners to promote sales of “PINsafe”, with plans to also utilize Swivel technology as an authentication service for Asgents security service “SecurityPlus”.

The sales target for Swivel solution business is 1 Billion Yen in 3 years.

【PINsafe Tokenless One-time Password】

Start of Sales:

July 8, 2014

Sales Price:

Price differs by Volume (Ex: 1 user/month starts at 176 Yen for 10,000 users)

Product Features:

・Tokenless

As hardware tokens are not used, the risk of losing a token and the burden of managing tokens is reduced.

・Easy Operations

Passwords are created by matching a PIN with a security string, so the user only needs to remember their PIN number.

・Multi-device Support

Security strings are provided on many devices such as browsers, mobile apps (Android, iPhone etc.), SMS and hardware tokens (option).

・Easy Integration with Active Directory

【Asgent, Inc.】

【Security Strings LLC】

※ SecurityPlus is a registered trademark of Asgent, Inc. Other company names and product names are trademarks or registered trademarks of the representative parties