The eToken family of products encompasses both the actual hardware tokens used to facilitate two-factor authentication schemes, as well as deployment and implementation tools from both Aladdin and third party partners. Individual capabilities of the platform include--per the needs of the organization--single sign on, Web sign on, network login, and other PKI-based authentication schemes. One-time password generation and authentication for those situations where direct USB/Smartcard usage isn't possible is also available.

The tokens themselves include USB, Smartcard, and stand alone form factors, all with on-board 1024-bit and 2048-bit PKI key generation and RSA authentication/digital signing, or, in the case of the eToken PASS, OATH compliant HMAC-SHA1-based OTP generation. Individual offerings include the eToken PRO Smartcard, the eToken PRO USB device, the eToken NG-FLASH device (same as the eToken PRO USB, but with the addition of Flash memory), the eToken NG-OTP--a USB device with an LED readout that can produce a one-time password for use with systems so-enabled, and the eToken PASS, a mini device with an LCD readout for OTP generation, only.

At the heart of the enabling software is the vendor's Token Management System--or TMS--that provides deployment, management, and provisioning capabilities for linking eTokens with authentication systems and managing eToken lifecycles. TMS facilitates connectivity with external security applications via a set of APIs.

Specific modules and functionality available to eToken implementations include:

- PKI (digital signing): Via the ability to operate, generate and store private keys and digital certificates inside the token. eToken supports PKCS#11 PKI-enabled applications, Microsoft Security Applications and services via CAPI, user repositories including Active Directory and LDAP using standard X.509v3 certificate format, DES, 3xDES, DES-X, MD5, and up to 2048 Bit RSA keys.

- Single-Sign On: Save login credentials for multiple applications on the eToken device; credentials that can then be submitted automatically to the applications when needed (the user must first authenticate themselves to the eToken itself before being granted access).

- Network Sign On: For Windows networks.

- One-Time Passwords: In scenarios where direct connectivity to a USB or Smartcard port is not available, systems can still make use of two-factor authentication via the eToken NG-OTP or eToken PASS tokens, which allow for One-Time Password generation via an on-device readout. Supported platforms for eToken OTP include RADIUS-compatible security gateways, platforms and applications including Check Point, Cisco, Microsoft (ISA and IIS), and Citrix.

New to the eToken product line is the introduction of the eToken NG-FLASH 72K token, which boasts up to 4 GB of encrypted storage and memory expansion to 72K (the memory expansion is also available in the eToken PRO and eToken PRO Smartcard); and Java Card support for all smartcards that allows users to customize their token functionality by creating their own Java applets on board the token itself. The vendor states that their Java Card-based tokens leverage a JVM compatible with Sun Java.

The eToken product suite is available now. Visit the Aladding Knowledge Systems Web site for further information.