aXsGUARD Identifier 3.0.2.0 Product Guide v1.5
aXsGUARD Identifier
2
aXsGUARD Identifier
2.1
Overview
In this chapter, we introduce the products and concepts which together provide VASCO's authentication solution
with the aXsGUARD Identifier.
briefly describes VASCO's authentication solution.
introduces the aXsGUARD Identifier.
introduces the IDENTIKEY Server.
explains management of DIGIPASS devices and records.
describes the structure and components of the aXsGUARD Identifier.
outlines VASCO aXsGUARD Identifier licensing models.
Finally, sections
and
describe the support procedure and VASCO Service Center.
2.2
VASCO's Authentication Solution
DIGIPASS devices provide the client component of VASCO’s authentication solution, issued by the Application
Service Provider (ASP) to end users (the DIGIPASS holders), to support:
One Time Passwords, to authenticate end users to the ASP, to protect access to services and resources
Host Codes, to authenticate the ASP to end users
Electronic Signatures, to protect the integrity and authenticity of financial transactions or other security-critical
communications (not currently available with the aXsGUARD Identifier).
The DIGIPASS client component uses a variety of cryptographic algorithms to calculate One Time Passwords, Host
Codes and Electronic Signatures. Each DIGIPASS device is pre-programmed by VASCO with a unique secret value,
which is used to generate One Time Passwords and Electronic Signatures, so that these are unique to each
DIGIPASS.
VACMAN is the server side component of VASCO’s authentication solution, installed on the computer or back-end
system of the ASP. This VACMAN software can be installed as an appliance, a server component, a middleware
component, or an Application Programming Interface (API). One Time Passwords and Electronic Signatures
generated by the DIGIPASS client devices are verified by the VACMAN software.
©
2009 VASCO Data Security
16
