Defender Software Tokens

Windows Smartphone

Quest has developed the Desktop Token so that it integrates with Windows Smartphones security mechanisms enabling a more secure connection between the device and your corporate assets. The Quest Desktop Token allows Windows Smartphones to authenticate the user in the same way as a Quest hardware token.

iPhone iToken

The iToken is the latest addition to Quest's range of electronic security devices. The iToken Token allows the iPhone to authenticate the user in the same way as a Quest hardware token. For more information on the iToken please visit www.quest.com/itoken.

Palm

Quest has developed the Desktop Token so that it integrates with the Palm security mechanisms enabling a more secure connection between the device and your corporate assets. The Quest Desktop Token allows the Palm to authenticate the user in the same way as a Quest hardware token.

PC / Laptop

Installing the new Desktop Token software on a PC or laptop enables a more secure connection between that device and your corporate assets, authenticating the user in the same way as a Quest hardware token.

When you install the Desktop Token software on your PC or laptop you have the option of storing the token in multiple local folders, on a USB eToken or on a removable device such as a USB memory stick or iPAQ. Installing the token on a removable device will allow you to authenticate to your corporate assets from any of your PCs. When installed on a PC or Laptop you can rename your tokens to make them more memorable, you may also protect them with a passphrase for increased security.

For supported applications, the Quest Desktop Token also allows you to choose to authenticate by only having to enter a PIN identity. The challenge/response dialog can be handled automatically by the Defender VPN Integrator. This simplifies the authentication process making it the ultimate in user-friendliness.

SMS Mobile Token

Defender Mobile is a plug-in to Defender, no additional software is required on the user’s system and the administrator can easily assign mobile tokens. The user can access the Defender Mobile token in two ways, the most popular reactive method is described below:

1. When the user attempts to access a resource protected by Defender, he is prompted to enter his username.

2. The user then enters his Defender PIN.

Defender receives the request, generates a one-time password and automatically sends it to the assigned mobile number as an SMS message. Within seconds, the user receives the one-time password.

3. The user then re-enters the PIN and the one-time password at the prompt. If the information is entered correctly, the user is granted access.

The alternative, proactive method of activating a Defender Mobile token is very similar, but in order to generate the SMS message, the user must dial the modem attached to the Defender Mobile Server from the assigned cell phone. Defender carries out a CLI (Caller Line Identification) and, if the cell phone’s number matches a stored number; the one-time password is generated and sent as an SMS message the phone.