CAT

1
CAT
Cellular Authentication Token

• CAT the problem the solution
• Using the CAT
• Top Security
• Mega AS

2
CAT Maximum Security

• Two Factors Authentication
• What you have Cellular token
• What you know Password
• The Cellular is protected by PIN
• CAT is protected by CAT Password
• CAT Password used to encrypt Secret Data
• CAT Password not kept on Cellular
• Only Verification sentence is kept on Cellular
• Encryption with the Cellular unique ID (IMEI )
• After 3 minutes shuts down

3
CAT Maximum Security

• User enters a One Time Password to login
• CAT Generates OTP every 60 Seconds
• Hacker can not reuse old OTP
• Hacker can not predict the next OTP
• Hacker will look for the CAT Password on the
  Cellular

4
CAT Maximum Security
Usually
Encryption Process
Enc. Password xxxx
Password 1111
xxxx saved in memory
Hacker finds XXXX in memory
no
Encryption Process
Is it xxxx ?
Try word zzzz
yes
zzzz Password 1111
5
CAT Maximum Security
With CAT
Password 1111
Encryption Process
Enc. Verification xxxx

Verification Joe is the best
xxxx saved in memory
Password NOT SAVED
Hacker finds XXXX (Enc. Verification) in memory
Try word zzzz
Encryption Process
Is it xxxx ?

yes
Verification ??????
zzzz Enc. Verification
Password NOT FOUND
6
CAT Maximum Security
Hacker finds XXXX (Enc. Verification) in memory
Try word zzzz
Decryption Process
Is it ?????

yes
Enc. Verification xxxx
Nothing to compare too No way to know when the
Verification sentence is found
7
Performance
Old way
CAT way

• Check if user exists
• Check if user enabled
• Encrypt entered password
• Compare with saved password
• Allow access

• Check if user exists
• Check if user enabled
• Calculate required OTP
• Compare with entered OTP
• Allow access