Disclaimer: This information comes from sources that cannot be verified. As such, make no assumptions about its completeness or accuracy. We endeavor to keep this information up to date as much as possible. Feel free to send comments/ updates to the Security News Editor.

October 27, 1997, Section: Test Center:Internet Security Tools

SecurID

Passwords are the first line of defense in keeping unwanted users off a network, but they also are easy prey. Security Dynamics presented one of the most interesting products to this roundup, SecurID. The key to this industry-standard security system is an electronic card called a SecurID token. SecurID tokens generate new, unpredictable access codes every 60 seconds-sort of like one-time passwords. Each SecurID token has a serial number etched on its back plate. Using patented technology, the Access Control Module back at the server synchronizes with the tokens and token serial number to determine the proper code number for each token for any given period. The ACM can reside at a host, operating system, network/client resource, communications device or almost any information resource that needs security. A token reader is not required-the access code is simply read off the token's LCD readout and typed in by the user.

To log onto a network, users must enter both a password or PIN number and the access code generated by their SecurID token. The login procedure must be done quickly because there are only 60 seconds to enter the access code before it changes.

At the heart of the SecurID system is the ACE/Server for Windows NT. ACE/Server is compatible with most remote-access and network vendor products so it can be integrated right into most existing networks. ACE/Server provides a point-and-click interface that lets an administrator set up new users, assign and delete tokens, define access parameters and so on.

Setting up the system is not a casual affair and requires a skilled network administrator. The administrative interface is easy enough to maneuver through, and it does not require too much effort to deliver basic functionality. A fair amount of support is required to manage users of the SecurID system.

---

SecurID

Price: Server (1,000 users), $32,800; 1,000 tokens, $57,000

Warranty: None

Distributors/Integrators:Tech Data

Authorization Requirements:Depend on level, sales and technical training required

Model Number:Server, ACER-NT-1000; authentication token, SECURID SD / 200

Security Dynamics Inc.

Bedford, Mass.

(781) 687-7000

(800) 732-8743

www.securitydynamics.com