|
Indorse Input is build to secure the Input of a user
sensitive data captured by an Input device (Keyboard, Finger
Print Reader or Digitized Pen and a pad) from an Internet
browser to be sent to a Web Application Server.
The problem:
When a user submits his input using the keyboard or other input
device via web browser there is always the risk that the user
sensitive data might be hacked by malicious software running on
the user PC to take the sensitive data from the http port of the
user browser.
To protect the user sensitive data the usual practice was to
send the hash code of the sensitive data or to encrypt the
sensitive data but hackers’ malicious software used to replay
this data to gain access using this hashed or encrypted data
causing a security problem.
The
solution:
Indorse Input provides a way to secure sensitive data
captured by Web client’s input devices like keyboards,
fingerprint readers or digitized Pens and sent to any Web
Application Server.
The solution serves to generate a unique mix of server time
stamps with symmetric and asymmetric encryption to prevent
hackers from replaying the sensitive data to gain access to the
server. The solution also protects the confidentiality and
integrity of the sensitive data.
A signed Indorse plug in is downloaded to Internet browsers to
communicate with the Indorse Web application software for
performing the tasks required to secure the sensitive data
captured by the Input devices.
The security feature of the Internet browser is utilized in
protecting the integrity of the Signed Plug in software. Having
secured software on the user computer is a key in securing the
user sensitive data. Asymmetric encryption used to encrypt the
user sensitive data combined with the server time stamp provides
a unique technique for the server to verify that user sensitive
data was signed by the Indorse Plug in Key on a particular
server time stamp.
The Benefits
Prevent hackers from replaying sensitive data to get access to
servers.
Protect the confidentiality of sensitive data.
Protect the sensitive data integrity.
Indorse Plug in works on any Internet Browser.
Indorse Web application works on any web server.
|
Page 1
2
|
|
© 2008 InDorse Technologies. All rights reserved. Patent
Pending. This data sheet is for informational purposes
only. InDorse MAKES NO WARRANTIES, EXPRESS OR IMPLIED,
IN THIS SUMMARY. Other company, products or services may
be trademarks of others |
|