CRYPTOCard Provides LAN, VPN & Building Access On One Smart Card; The Multi-Function `CRYPTOCard' Integrates Network Access & Corporate Identity.

Business Editors

OTTAWA, Ontario--(BUSINESS WIRE)--Oct. 1, 2002

CRYPTOCard Corporation (www.cryptocard.com) announces a new security and administration server - CRYPTOAdmin 5.32 (CA 5.32); a new 32K Java Smart Card - the CRYPTOCard; a new PCMCIA Smart Card reader - the PC Card Reader; and a new USB Smart Card reader - the USB Reader.

CA 5.32 supports the 32K multi-function CRYPTOCard to provide One-PIN-And-You're-In(TM) access to the LAN (using CRYPTOLogon for Windows 2000 and Windows XP networks), VPN (using CRYPTOVPN for Cisco, Checkpoint, and Nortel VPN's), Web (using CRYPTOWeb for IIS, which can also be used with MS Exchange OWA and Citrix Nfuse), and Building access (supporting HID, or Mifare access control systems).

The CRYPTOCard, is a FIPS 140-1 (level 2), Java card (v 2.1.1), which can be used in conjunction with CRYPTOCard Corp's new PC Card Reader, the USB Reader, Schlumberger smart card readers, or other PCSC compliant readers. A user swipes (or holds in the case of HID or Mifare proximity readers) the CRYPTOCard to gain secure, positively-authenticated access to the building or elevator. To log on to their LAN, the user inserts the CRYPTOCard into the PC Card (or USB) Reader, and enters their PIN. A user simply removes the card to log off the network or to lock-up their computer. The process remains the same whether logging on to a Windows 2000 or Windows XP network locally, and can be applied when accessing the network via VPN, or Intranet/Extranet via the Web.

The CRYPTOCard provides complete one-time-password access security coupled with ATM-like convenience (`One-PIN-and-you're-In'), while the PC Card reader frees the user from having to carry another external device. The CRYPTOCard can also incorporate a corporate logo, user's name, photograph, bar code, and or PKI credentials (from Microsoft, Entrust, or Verisign) to act as a `corporate identity wallet'.

During the logon procedure, CA 5.32 generates a unique and unpredictable one-time `Secure Password' that is only valid for the current logon attempt, and is immediately discarded after use - making it useless to hackers. Additionally, the CRYPTOCard does not transmit the user's PIN over the wire, making it impossible for sniffer technology to steal the PIN.

CA 5.32 makes it easy to authenticate a user to various secured resources on Windows 2000, Windows NT, and Windows XP networks. An administrator can utilize CA 5.32's CRYPTOLogon to replace (or supplement) the Windows logon process (and the dialog boxes invoked) to apply CRYPTOCard Corp's Secure Password Technology during the LAN log-on process.

CRYPTOLogon technology can be integrated with the Cisco, Check Point, and Nortel Contivity VPN client logon process - providing `One-PIN-and-you're-In' access for the remote user. CA 5.32 provides Microsoft IAS RADIUS server support and support for Microsoft's Windows 2000 certificate server.

"An organization cannot guarantee system security if it cannot authenticate each individual user - the weakest link in the chain has always been the authenticity and integrity associated with validating the user requesting access to the system," explained Malcolm MacTaggart, President & CEO, CRYPTOCard Corp. "CRYPTOCard's new multi-function smart card makes it easy for organizations to positively authenticate all users requesting physical, network, or remote access while simultaneously providing users with ATM-style convenience," MacTaggart continued. "And at a price point that fits almost any organization's budget."

"Enterprises that are beginning to grapple with the complex issues around remote access and authorization for sensitive information can either cobble together solutions from multiple suppliers or look for a complete solution from a single supplier," said Eric Hemmendinger, research director for security and privacy at Aberdeen Group. "CRYPTOCard has rolled a smorgasbord of capabilities into its new release, enabling one-stop shopping for remote access VPN and robust authentication, including all the necessary embedded capabilities."

Providing centralized authentication with decentralized administration, regardless of network infrastructure or user location, CA 5.32 enables security officers to customize security to meet policy requirements for secure access. Additionally, CRYPTODeploy makes it easy for security officers to add or delete a system user in seconds - making it simple to administer large user populations, Extranet partners, or others requiring temporary building or network access.

The CRYPTOCard provides LAN, remote, or web-server system access for all Windows 2000 and Windows XP authorized users who can connect through a firewall, RAS/NAS, or VPN. Each CRYPTOCard can hold a Microsoft, Verisign, or Entrust certificate that can be used to logon to a Windows 2000, Windows NT, or Windows XP environment adding another layer of security - while, separating a user's credentials from their laptop to prevent potential hackers from gaining network access via a stolen computer.

CA 5.32 supports hierarchical administration, replication/fail-over, and a wide range of operator definitions on Windows NT/2000, Windows XP, Solaris 2.8, and Red Hat server platforms. The PC Card Reader is ISO 7816 compliant and EMV certified. The USB Reader is ISO 7816 compliant, EMV and Microsoft PCSC certified, and supports all major PC platforms. The CRYPTOCard is ISO 7816, EMV 3.1.1, Open Platform 2.0.1, PKCS #11, Crypto API, and Java Card 2.1.1 compliant and has been FIPS 140-1 level 2, VOP, Java Card, and Entrust certified.

About CRYPTOCard

Established in 1989, CRYPTOCard provides cost-effective Secure Password Technology to leading enterprises worldwide in the government, technology, aerospace, financial, telecommunications, and healthcare sectors. The CRYPTOCard system positively authenticates a user's identity by coupling something in the user's possession (a smart card, hardware token, or software token), with something the user knows (a PIN). CRYPTOCard's versatile Secure Password Technology provides centralized authentication for all physical and network access regardless of network infrastructure or user location. Partners include Cisco, Microsoft, Check Point, Entrust, Oracle, Sun Microsystems and Macromedia. For additional information on CRYPTOCard, visit www.cryptocard.com.

CRYPTOCard, CRYPTOAdmin, CRYPTODeploy, and CRYPTOLogon are trademarks of CRYPTOCard Corporation. Other products mentioned herein may be trademarks and/or registered trademarks of their respective owners.