Keystone Authentication

True Multi-Factor Authentication

Strong Authentication-Validation Solutions

Website
ATM and Card-Based Networks
Next-Tier User Authentication & Transaction Verification

Website

Strong User Authentication and Site Validation

Keystone Authentication

Keystone Authentication provides mutual authentication for website applications. The solution is easy, intuitive, and even engaging to use:

User enters their username, and a randomly-generated one-time password (OTP) challenge appears.
The user decodes and enters the OTP using their Keystone CodeSheet.

The appearance of images from the user's personal CodeSheet in the OTP login challenge validates the site to the user. A randomly-generated "Keystone" image is also designated on the user's Keystone CodeSheet and will appear in every OTP challenge, providing users an additional layer of anti-phishing protection.

ATM and Card-Based Networks

Strong User Authentication and Network Validation

Keystone Authentication with IdenTrust EMV Smartcards

Keystone Authentication combined with IdenTrust EMV smartcards provides a comprehensive mutual authentication and fraud tracking solution for ATM and card-based networks.

Keystone card network authentication is easy to use and provides secure access from any location around the world:

IdenTrust encrypted digital certificate on the user's EMV standard smartcard is authenticated.
In parallel, the user's Keystone Image appears. By verifying the appearance of this image, the user validates the network connection before entering a valid pin/password.

Note: Additional user authentication that requires decoding an OTP login challenge can be applied dynamically, based on ATM location or transaction type.

Next-Tier Authentication Security & Transaction Verification

User Authentication and Transaction Verification

Keystone Authentication with Cronto Images Module (CIM*) Option

User Authentication for Online Transactions

Keystone Authentication with CIM enables next-level security for user authentication and online transactions and payments:

A visual code that is unique to the transaction is generated and can be read by the user's client application.
The client application displays transaction details for the user to verify and a one-time authorization code to enter back into the browser.

The image can only be decoded if generated by a genuine provider, and the correct response for the current transaction can only be produced by the genuine user client, thus providing strong, mutual transaction authentication. There are three convenient client options: an application on the user's camera phone, a desktop application, a dedicated optical token.