How it Works

Internet Edition

BioPassword is integrated into the current authentication environment. Web authentication services are installed on an authentication server and a Flash-based browser plug-in is loaded when users authenticate to a Web-based application. The plug-in collects user keystroke timings and the Web Service builds a mathematical template that uniquely identifies the user. Subsequent login attempts by the user are compared to their stored template to authenticate login credentials.

• Web Service – Exposes biometric APIs, a standard compliant SOAP interface.
• Flash-based Client Control – Displays login screen to user, collects keystroke timings, and sends data to Web Agent.
• Sample application – A .NET application that publishes a browser Flash plug-in, facilitates enrollment and authentication, and provides a Web-based Management Console.
• Comprehensive implementation documentation.

Enterprise Edition

BioPassword permits network users to gain access to resources only after being authenticated by two-factor identification. This method goes well beyond standard password usage, by delivering highly secure and reliable user authentication (usually referred to as strong user authentication). BioPassword uses two methods (or factors) to accurately identify individuals before granting them access to critical corporate information and resources. First, the user must know both the correct user name and password and second, the user's typing rhythm must match the biometric template that has been stored and secured by the system.

• User types a user name and password at Workstation.
• BioPassword Client collects and then sends the user name, password, and the individual's typing sample to the Windows Server.
• The user name and password are verified to be correct by the network and passed on to the BioPassword Server, along with the typing sample for user authentication.
• BioPassword Server compares the typing sample to the typing samples already on file for the user (a biometric template) to determine if there is a match. If there is a match, the confirmation is passed back to the Windows server.
• User is authenticated as an authorized user.
• User successfully accesses network resources.
• Viewable activity logs that help with troubleshooting, create audit trails, and facilitate regulatory compliance.