Blackshield Server

BlackShield Server is a strong authentication solution that positively identifies individuals before granting access to networks, data and applications. It satisfies the security, compliance and auditability requirements of any identity management policy. 

Enquire about this product

---

Blackshield Server is a new, Web Services based strong authentication, token provisioning and management application that in combination with CRYPTOCard hardware, software, On-demand or 3rd Party OATH tokens enables organizations to efficiently and effectively protect against unauthorized logons resulting from shared, recycled, stolen or hacked static passwords. 

BlackShield Server can be used to protect:  

• Web applications, such as online banking, B2B supply chain management and shrink-wrapped
• applications such as Remote Web Workplace, Outlook Web Access, and SharePoint
• Network access devices such as VPNs, both IPSec and SSL, firewalls and so forth
• Citrix, and similar platforms
• Domain log-on 

And by supporting the full range of CRYPTOCard’s award-winning authentication methods and tokens, the right user experience is assured.

---

Cryptocard Blackshield ID Datasheet

---

Security Policy Support

BlackShield Server is fully customisable to support a company’s security policy, rather than dictating it:

• Flexible PIN and one-time password length and complexity (for example a six digit numeric password or an eight character complex password incorporating numbers, letters and punctuation)
• Lock and unlock policies, plus alerts for dealing with account abuse and hacking detection
• Time of day and week access controls
• Parameters for out-of-sync protection
• Temporary access controls for handling lost or stolen tokens.

 

Compliance and audit

Administrators can be proactively alerted to suspicious activity, allowing action to be taken immediately and thereby further strengthening compliance.

All authentication and operator activity is recorded and can be easily accessed by built-in reporting or via external SQL tools. Token activity history is never lost, regardless of re-initialisation, reassignment or deletion of tokens, providing a permanent and complete audit trail. Logging output can be sent to the event viewer, making it easy to capture and analyse the data.

---

Reporting from Blackshield Server

BlackShield Server allows IT professionals to concentrate on core business. By reducing the instances of account unlock or token reset, organisations are able to realise significant efficiency savings.

Monitoring system log files or exporting data to a separate reporting application is no longer necessary. Real-time information is delivered proactively so that issues can be dealt with instantly.

---

CRYPTOCard offers its clients the ability to initialise their own tokens, so that the unique tokens used to generate the one time password is not shared with an external party.

The solution delivers unsurpassed benefits for businesses looking to implement the latest in two-factor authentication technology:-

• Greatly reduced total cost of ownership
• Best-in-class security
• Simpler, quicker system administration
• Straightforward, rapid deployment and integration
• Industry-leading performance
• Unrivalled end-user experience

Compliance Standards

GCSX No 6 Access Control

GCSX No 10 Mobile / Home Working

Requirement 2 Do not use vendor-supplied defaults for system passwords and other security parameters

Requirement 8 Assign a unique ID to each person with computer access

All agents for network and application integration are included out of the box, including integration with multiple concurrent LDAPs.

RADIUS devices are supported via BlackShield ID agents located on RADIUS servers such as:

• Network Policy Server (NPS)
• Internet Authentication Server (IAS)
• Juniper Steel Belted RADIUS

Additional agents include:

• Outlook Web Access (OWA)
• SharePoint, Remote Web Workplace (RWW)
• Citrix Web Interface/XenServer
• Log-in Agent for Windows Domain Logon
• Log-in Agent for Windows Terminal Server
• Agent for IIS Virtual Web Sites
• Internet Security and Acceleration Server (ISA)

Databases

Many organisations have established corporate standards for databases. BlackShield ID allows substitution of the default database included with BlackShield Server, with Oracle, Microsoft SQL, MySQL and Postgres.

BlackShield ID has a highly secure and resilient architecture. It executes hundreds of authentications a second and scales to support millions of users.

CRYPTOCard and Evidian