CRYPTOCard Launches CRYPTO-Server 6.2: The First Browser-Integrated Two-Factor Authentication System for Apache Web Servers.

LAS VEGAS -- CRYPTO-Server 6.2 Demonstrates Its User-Friendly Enterprise-Class Authentication Solution For Apache Web Servers At ApacheCon 2004

CRYPTOCard (www.cryptocard.com), the innovative leader in authentication technology, today announced the launch of CRYPTO-Server 6.2, the world's first browser-integrated two-factor authentication solution for Apache web servers at ApacheCon 2004 in Las Vegas. CRYPTO-Server 6.2's CRYPTO-Web component makes it simple to authorize and positively identify all Apache web server users by coupling something in the user's possession (a multi-function smart card, USB dongle token, hardware token, or software token), with something the user knows (their PIN). With almost 75 percent (or more than 13 million) of the world's web servers running on Apache, CRYPTO-Server 6.2 represents a significant advance in authentication technology for the dominant player in the web medium.

CRYPTO-Server 6.2's authentication server generates a unique password for every log-on attempt, eliminating the need for users to memorize, change, or manage a variety of static passwords. This not only significantly reduces the help-desk costs associated with resetting forgotten passwords, but also negates the obvious security risk resulting from users writing down their passwords (or using the same one for everything) or hackers obtaining stolen credentials (by network sniffing, social engineering, or shoulder-surfing). CRYPTO-Server 6.2's familiar ATM-style protocol also eliminates the user resistance often encountered when organizations attempt to implement an additional layer of security, by making the system easier to use than static passwords.

CRYPTO-Server 6.2's browser-based administrative interface makes it simple for organizations to support hundreds of Apache servers (for example, in a web farm) through a single interface, providing a single point of administration that makes it easy for organizations to implement and administer token-deployment - by simply importing existing LDAP (e.g. Active Directory or Open LDAP) directories or to support web farms or virtual web sites. CRYPTO-Server allows easy deployment and activation of software tokens, which can reside on a user's handheld (for Win CE devices), desktop, laptop, or smart card - or for users to activate their hardware tokens (USB, key-chain, or numeric pin-pad).

"An organization cannot guarantee system security if it cannot authenticate each individual user, and this was practically impossible for Apache server-based applications and users," explained Malcolm MacTaggart, President & CEO, CRYPTOCard Corporation. "CRYPTOCard firmly believes in making easy to use, cost effective, authentication available to everybody, and with nearly 75 percent of web servers running on Apache, CRYPTO-Server 6.2 obviously represents a significant advance in this regard."

CRYPTO-Server 6.2 also includes CRYPTOCard's innovative "Follow-Me Computing" that makes it easy for server-based computing (Citrix or MS Terminal Services) users to start a remote session by simply inserting their CRYPTOCard multi-function smart card, or USB dongle token, and entering their PIN. Then, after logging off by simply removing their authentication device, the user is free to reinsert their smart card or USB dongle token and enter their PIN at another thick-client or thin-client terminal to resume the same session at exactly the point at which it was suspended (e.g. Cell D3, in a Microsoft Excel spreadsheet) - the applications literally follow the user around the building or campus. The system can also be set by the administrator to lock the machine or to simply log-off the user.

By coupling "Follow-Me Computing" with the door access capability of CRYPTOCard's smart card, an organization can ensure that users have to log off after every session in order to be able to travel around the campus - eliminating the considerable security risk associated with users leaving a computer logged on - particularly in the health services, government, and financial services sectors. Alternatively, CRYPTOCard's newly-developed USB dongle token, that plugs straight into a computer's USB port, enables organizations to provide users with smart card-like ease of use without incurring the expense of having to purchase smart card readers.

CRYPTO-Server 6.2's other components include CRYPTO-Web, which protects Apache and IIS Websites down to the page level; CRYPTO-Kit, which provides developers with the tools to make it simple to integrate CRYPTOCard's technology with existing security applications/systems; CRYPTO-Deploy, to facilitate the deployment and activation of tokens; CRYPTO-VPN, that makes it simple to provide authenticated access to third-party VPNs (e.g. Cisco (Nasdaq:CSCO), Checkpoint (Nasdaq:CHKP), Nortel (NYSE:NT), and Neoteris); and CRYPTO-Migration, which provides RSA Migration functionality that enables organizations to switch from an alternative system (CRYPTOCard's tokens, with replaceable batteries, are deployed once and can be utilized indefinitely).

CRYPTO-Server 6.2 will ship for the Microsoft Windows (Nasdaq:MSFT) and Mac OS X Panther (Nasdaq:AAPL) server operating systems in the next few weeks. A five-user (all-you-need-in-1-box - the full server software plus five tokens) bundle will be available for $499. CRYPTO-Web for Apache will also be available for the Linux platform shortly. CRYPTOCard's products are available from Tech Data and other distributors, integrators, and resellers throughout the world. For more information on CRYPTO-Server 6.2, please view CRYPTOCard's free web cast from ApacheCon at www.apachecon.lpbn.org on Wednesday, November 17 at 3:00 p.m. EST, go to www.cryptocard.com, or visit CRYPTOCard at ApacheCon 2004.

About CRYPTOCard Corporation

Established in 1989, CRYPTOCard provides cost-effective Secure Password Technology to leading enterprises worldwide in the government, technology, aerospace, financial, telecommunications, and healthcare sectors. CRYPTOCard positively authenticates a user's identity by coupling something in the user's possession (a smart card, hardware token, or software token), with something the user knows (their PIN), and provides centralized authentication for all physical and network access regardless of network infrastructure or user location. CRYPTOCard's partners include Microsoft (Nasdaq:MSFT), Apple (Nasdaq:AAPL), Cisco (Nasdaq:CSCO), Check Point (Nasdaq:CHKP), Citrix (Nasdaq:CTXS), Entrust (Nasdaq:ENTU), Oracle (Nasdaq:ORCL), Sun Microsystems (Nasdaq:SUNW), and Macromedia (Nasdaq:MACR). For additional information on CRYPTOCard, please go to www.cryptocard.com, or visit us November 15-17 at ApacheCon 2004.

CRYPTOCard(R), CRYPTO-Server 6.2, CRYPTO-Consul, CRYPTO-Deploy, and CRYPTO-Logon, CRYPTO-Web, CRYPTO-Kit, CRYPTO-VPN, Secure Password Technology and "Follow-Me Computing" are trademarks of CRYPTOCard Corporation. Other products mentioned herein may be trademarks and/or registered trademarks of their respective owners.