ePassport Suite

 
PROJECT ID
C021
ASSURANCE LEVEL
EAL1
Security Target (ST)
 
Certification Report (CR)
 
PRODUCT NAME AND VERSION
ePassport Suite
PRODUCT TYPE
Web based authentication system
PRODUCT SPONSOR / DEVELOPER

Extol MSC Berhad

PRODUCT SPONSOR / DEVELOPER CONTACT DETAILS

Jackson Lim

Unit G-1, Ground Floor,
Wisma UOA Pantai, No. 11,
Jalan Pantai Jaya,
59200 Kuala Lumpur
MALAYSIA

URL: http://www.extolcorp.com/
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: + 603 2240 0008
Fax: + 603 2240 0002

ePassport Suite v2.5, is a web based authentication system which supports a suite of authentication mechanisms to secure user accounts, intranet web apps and online transactions. ePassport Suite v2.5, which is installed behind an internet gateway firewall, is providing a secure remote access with security implementation of Two-factor Authentication (2FA) for the users. The users of the ePassport Suite could integrate any application which require authentication. Any system that is able to seek authentications via web service protocol or radius will be able to utilize the facility.

ePassport Suite v2.5 requires users to provide two means of authentication by enforcing usage of username, and One-Time-Password (OTP) replacing the normal password mechanism. OTP generated by application pre-installed inside several mobility platform such as mobile phone (java application), hardware token and desktop (software application).

The security functions of ePassport Suite v2.5 which had been evaluated are:

  • Audit – logs are captured if there are system wide changes (overall changes happening on the ePassport Suite), authentication attempts and system status.
  • Authentication – based on the user credentials. Authentication process is performed by Authentication module of Core Engine, and supported by ePassport Suite Tokens specifically desktop software and mobile phone application that generates OTP.
  • Cryptography – performed by Cryptography module of Core Engine, and ePassport Suite Tokens specifically desktop software and mobile phone application.
  • Security Management - User, Token and Server management of the ePassport Suite are configured by the Administrators via the Management Console.