Encrypt documents with One Time Codes without DRM

AuthentiDoc® secure document access

Protection for Microsoft Office, PDF, and ZIP files

Document Security Information is power and has always been a commodity that needs to be closely guarded. In the Information Age, success or failure of any endeavour is ultimately reliant on the handling of information and restricting access to it. This is as true from a small 5-person business to a country fighting a war. Securing the information directly within the document and not relying on the document storage to add security mean the information is safe regardless of where it is located.

The majority of a companies' sensitive information resides in Word and PDF documents or within schematics, diagrams, designs and workflows which are stored in compressed ZIP files. At best, these resources are secured by a password when sent via email or USB stick. The password is typically forwarded onto dozens of people, often in the email body, rendering the security practically useless. Unfortunately in most cases, the documents are sent with no security at all.

Traditional Digital Rights Management (DRM) systems can provide high-levels of security on documents by “tagging” documents and limiting access to them based on authorization rights. Unfortunately, these systems typically tend to be very expensive and difficult to install,

maintain and use. For these reasons, DRM has not been universally adopted.

Authlogics and Encryption What if there was a way to encrypt highly sensitive documents and ZIP files with a unique PIN that changes for every document, but you always know what it is without sharing it like a password? AuthentiDoc® provides a simple and effective method for encrypting Microsoft Word, Excel & PowerPoint files, PDF documents and ZIP files with a code that changes from document to document. Not only can you now encrypt your sensitive information, you can also ensure that only the people who need access to the information will know how to decrypt the document.

AuthentiDoc® leverages our patented PINgrid technology to generate a One Time Code from a grid of numbers using a pattern.

Authentication Watermark While electronically protecting access to a document is important, why not also add extra value by turning an analogue printed version of a document into a 2 factor token?

AuthentiDoc® can embed a unique PINgrid challenge onto a PDF document page. A user can then use that printed document as a paper

AuthentiDoc® provides a simple way to encrypt day to day files without the uses of passwords or complex DRM systems. It can also turn a piece of paper into a hardware 2FA token.

Features and highlights

• Protection for common document formats.

• Access documents with a One Time Code.

• Open files with their native app ensuring 100% compatibility.

• No DRM client software required.

• Turn printed documents into hardware 2FA tokens with an Authentication Watermark.

• Send files via email, USB stick, Dropbox, OneDrive, SharePoint etc.

• Integrate into existing document management systems via WebAPI’s.

www.authlogics.com | Strong Authentication Made Simple

Hassle free One Time Code document protection

An end to static passwords in encrypted documents

based hardware token to authenticate themselves to a call centre or help desk.

How the System Works Before a document is sent to a recipient it needs to be protected. Each AuthentiDoc® user requires a PINgrid pattern which is known only to them. The Authlogics Authentication Server will generate a PINgrid challenge specific to each document and encrypt the document with

a unique code which only the recipient will be able to decipher.

The recipient will use the document specific challenge grid combined with their pattern to reveal the code required to decrypt the document.

Should the document and challenge grid fall into the wrong hands they will not be able to determine the encrypting code as they will need to know the end user’s pattern. If a user is negligent and gives the

code to someone that should not have access to the document then only that document will be at risk. All other document versions and copies will remain safe as each has their own unique code.

Encryption and Compliance Although it is prudent for organisations to take the necessary steps to protect their information and systems, governments

world-wide are creating legislation which companies are required to comply with. These regulatory statutes compel organisations to ensure that reasonable precautions are followed to protect sensitive corporate and client data. As such, it is not only reasonable to encrypt sensitive objects but it is also imperative to ensure that only the person/people that require access to the information are ultimately the ones that can access the contents. In compliance terms passwords are a major issue when encrypting files as there is no accountability. Once a 1 Factor password has been created and distributed (or even entered) we should assume that the password has been compromised and therefore, there is no way to know who actually has access to the document.

As AuthentiDoc® leverages PINgrid technology, the uniqueness of patterns and challenge grids ensure that only the person who should have access to the object does so. Any compromise falls squarely on that individual user and the accountability component of the governance controls are satisfied.

Seamlessly encrypt and send various file types via email or shared Cloud storage and access them on any device without any custom client software.

Key Compliance Legislation

Authlogics, Ocean House, The Ring, Bracknell, Berkshire, RG12 1AX, United Kingdom www.authlogics.com | sales@authlogics.com | +44 1344 568 900 | +1 857 214 2174

Sender

Deliver secure file

Submit file

(1) Sender submits unprotected file to Authlogics Server

(3) Protected file and PINgrid challenge is returned to the sender

(4) Sender delivers protected file and PINgrid challenge to the recipient via any chosen method

Return

secure fil

e

Recipient

Sender

Email secure fileSubmit file

(1) Sender submits unprotected file to

Authlogics Server to be emailed

(3) Protected file and PINgrid challenge is emailed directly to the recipient on the senders behalf

Recipient

(2) Authlogics Server encrypts the file and generates a PINgrid Challenge

AuthlogicsAuthlogics

(2) Authlogics Server encrypts the file and generates a PINgrid Challenge

AuthlogicsAuthlogics

Custom delivery

Email delivery

• EU: General Data Protection Regulation of 2016 (GDPR) - NEW

• UK: Government Connect Secure Extranet Code of Connection (GCSx CoCo Compliance)

• UK: Data Protection Act of 1998

• US: Sarbanes-Oxley Act of 2002 (SOX)

• ZA: The Protection of Personal Information Act of 2013 (POPI)