{"id":384,"date":"2015-04-21T15:02:20","date_gmt":"2015-04-21T12:02:20","guid":{"rendered":"https:\/\/www.protectimus.com\/blog\/?p=384"},"modified":"2019-06-12T18:00:51","modified_gmt":"2019-06-12T15:00:51","slug":"tokens-with-the-cwys-function","status":"publish","type":"post","link":"https:\/\/www.protectimus.com\/blog\/tokens-with-the-cwys-function\/","title":{"rendered":"Tokens with the CWYS Function"},"content":{"rendered":"

To test the CWYS function and learn more about 2-factor authentication visit our demo page: Demo<\/a><\/p>\n

Protectimus offers the following OTP tokens with the CWYS<\/a> (Confirm What You See) function support:<\/p>\n\n\n\n\n\n\n
\"Protectimus<\/td>\nProtectimus Ultra<\/a><\/td>\n<\/tr>\n
\"Protectimus<\/td>\nProtectimus Smart<\/a><\/td>\n<\/tr>\n
\"Protectimus<\/td>\nProtectimus SMS<\/a><\/td>\n<\/tr>\n
\"Protectimus<\/td>\nProtectimus Mail<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Let\u2019s look at them in more detail.<\/p>\n

Protectimus Ultra<\/h2>\n

It is a physical (hardware) token that has a number of advantages as compared to other hardware tokens, as described in more detail on our website.<\/p>\n

From the point of view of the data signing function, it is somewhat inferior to other types of tokens because it is unable to visualize the data signed.<\/p>\n

However, it still protects data from being modified or falsified during the span of time between creating and performing a transaction.<\/p>\n

Protectimus Smart<\/h2>\n

It is a software token and the most popular token in the company\u2019s product line.<\/p>\n

Its advantage lies in the fact that the data signing function is available for any token generated in it. The data signed can be visualized, and there is additional protection against manipulating the transaction data.<\/p>\n

Diagram 1 shows the process of the CWYS data signing.<\/p>\n

\"Data

Diagram 1 \u2013 Data Signing in Protectimus Smart<\/p><\/div>\n

As you can see in Diagram 1, a user needs only to go to the context menu and select the data signing function, scan the QR code, and receive information about the transaction being performed and the \u041e\u0422\u0420 to confirm it.<\/p>\n

This token\u2019s undoubted commercial advantage is the fact that it is provided for free.<\/p>\n

Protectimus SMS<\/h2>\n

It allows receiving the information on the transaction being performed, together with the OTP, via the user\u2019s phone. The downside of this method is the disadvantages of using an SMS message to deliver authentication details.<\/p>\n

This token\u2019s advantages include simplicity of use and generation by the user.<\/p>\n

Protectimus Mail<\/h2>\n

It allows receiving the information on the transaction being performed via email. Although this adds yet another verification channel, it should be noted that generally speaking this token does not provide full-scale two-factor authentication because email is usually also password protected.<\/p>\n

As always, the final choice is up to you. Our recommendation is to use Protectimus Smart or Protectimus Ultra for the CWYS mechanism and secure protection of your system against auto-filling, injecting, and other types of manipulating the user data involved in performing transactions.<\/p>\n<\/span>","protected":false},"excerpt":{"rendered":"

To test the CWYS function and learn more about 2-factor authentication visit our demo page:  Protectimus offers the following OTP tokens with the CWYS (Confirm What You See) function support: Protectimus Ultra Protectimus Smart Protectimus SMS Protectimus Mail Let\u2019s look at them in more detail. Protectimus Ultra It is a physical (hardware) token that has a number […]<\/p>\n","protected":false},"author":2,"featured_media":4612,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[3,9],"tags":[16,142,118,134,139,99],"class_list":["post-384","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-engineering","category-protectimus-products","tag-2fa","tag-cwys","tag-data-protection","tag-data-signing","tag-tokens","tag-two-factor-authentication"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/comments?post=384"}],"version-history":[{"count":12,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/384\/revisions"}],"predecessor-version":[{"id":5065,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/384\/revisions\/5065"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/media\/4612"}],"wp:attachment":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/media?parent=384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/categories?post=384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/tags?post=384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}