CRYPTOCard's CA 5.16 Delivers 'Smart Card for Windows 2000' and Windows XP Support.

Business Editors & High-Tech Writers

KANATA, Ontario--(BUSINESS WIRE)--Nov. 30, 2001

CRYPTOCard, (www.cryptocard.com) the innovative leader in Secure Password Technology, announces its new administration and security server - CRYPTOAdmin 5.16, for the Microsoft Windows environment.

CA 5.16 supports the CRYPTOCard Smart Card (SC-1) for Windows 2000, soft token support for Windows XP users, CRYPTOLogon for Windows 2000 networks, Microsoft IAS RADIUS server support, and support for Microsoft's Windows 2000 certificate server.

A network administrator can implement Secure Password Technology security on Windows 2000 networks. CRYPTOLogon for Windows can replace the Microsoft Logon (i.e. the GINA DLL) to apply CRYPTOCard's 'SPT' security during the Windows log-on process. CRYPTOLogon replaces the Microsoft GINA DLL subsystem that supervises the Windows logon process (and the dialog boxes invoked). Each token enables an administrator to authenticate a user to different applications and, or, secure servers - making security easy to use, deploy, and customize.

The SC-1 smart card makes logging on to a Windows 2000 network as easy as using an ATM card. A user simply inserts the SC-1 Smart Card into a CRYPTOCard Reader to log on, and removes the card to log off - no smart card, no access. The process remains the same whether logging on to a Windows 2000 network locally, or logging on remotely via dialup, ISDN, or the Internet. Windows XP users can utilize a CRYPTOCard software token, housed on their laptop, to gain LAN or remote access. During the logon procedure, CRYPTOCard's authentication server generates a unique and unpredictable one-time 'Secure Password.' The 'Secure Password' is only valid for the current logon attempt, and is immediately discarded after use - making it useless to hackers.

Ideal for today's dispersed workforce, the credit-card-sized SC-1 travels with the user, and can be issued locally or remotely depending on the situation or the organization's security policy. Coupled with CRYPTOAdmin 5.16, the SC-1 provides LAN, remote, or web-server system access for all Windows 2000 authorized users, and enables administrators to instantly identify any user attempting to access the system from any location. Remote SC-1 network users, like remote software token users, can connect through firewall, RAS/NAS, or VPN while local SC-1 and soft token users can log on to a Windows 2000 LAN.

"An organization cannot guarantee system security if it cannot authenticate each individual user," explained Malcolm MacTaggart, President & CEO, CRYPTOCard Corp. "Static passwords are a relic of the 50's, and don't provide the protection required in the 21st century," MacTaggart continued. "CRYPTOCard Smart Cards simultaneously provide system users with ATM-style convenience and organizations with the high-level security of positive user authentication."

The SC-1 enables organizations to significantly increase security by separating a user's Microsoft credentials from their laptop - otherwise if the laptop's stolen, so are the credentials. Each SC-1 can hold a Microsoft certificate that can be used to logon to a Windows 2000 environment - making it impossible to gain network access via a stolen computer. As an additional security measure, the SC-1 itself requires a PIN to prevent unauthorized users from accessing and, or, clearing the card of any stored tokens or certificates. Furthermore, each separate application on the card can be assigned its own unique PIN.

The SC-1's versatility enables security officers to customize security to meet their security-policy requirements for their network access. The SC-1 enables administrators to restrict individual user access to specified network areas by limiting a particular card's network clearance. Also, as the tokens are revocable at any time, the SC-1 enables organizations to administrate large user populations, Intranet partners, or others requiring temporary network access.

The Smart Card Token and the Soft Token, are auto-downloadable from an Internet Explorer Browser. The CRYPTOAdmin 5.16 server is used to generate a soft token configuration file, the only component that must be individualized for each SC-1 user, and a Smart Card Manager is used to load, manage, and utilize SC-1 tokens as well as provide distributed administration.

The CRYPTOCard Reader is ISO 7816-1/2/3 compliant, EMV and Microsoft PC/SC certified, and supports all major PC platforms. The SC-1 is ISO 7816, EMV 3.1.1, and Java Card 2.1 compliant. Its private key algorithms are DES and T-DES, and public key algorithms are RSA and SHA-1.

CRYPTOAdmin 5.16 will ship on December 5th, and runs on Microsoft Windows, Solaris, or Linux operating systems. Pricing for CRYPTOAdmin starts at $2,495.

About CRYPTOCard

Established in 1989, CRYPTOCard provides cost-effective Secure Password Technology to leading enterprises worldwide in the government, technology, aerospace, financial, telecommunications, and healthcare sectors. The CRYPTOCard system positively authenticates a network user's identity by coupling something in the user's possession (a smart card, hardware token, or software token), with something the user knows (a PIN). CRYPTOCard's versatile Secure Password Technology provides centralized authentication for all network access regardless of network infrastructure or user location, and eliminates the need for static passwords. Partners include Cisco, Microsoft, Check Point, Entrust, Oracle, Sun Microsystems and Macromedia. For additional information on CRYPTOCard, visit www.cryptocard.com.

CRYPTOCard, CRYPTOAdmin, and the SC-1 CRYPTOCard Smart Card are trademarks of CRYPTOCard Corporation. Other products mentioned herein may be trademarks and/or registered trademarks of their respective owners.