KOREAN / ENGLISH
SSenStone
  • About Us
  • Technology
    • OTAC
    • FIDO
  • Solutions
    • OTAC Solutions
      • swIDch: OT Auth
        • - PLC OTAC
        • - OTAC Trusted Access Gateway
        • - OTAC auth - MFA for PLCnext
      • swIDch: Fin Auth
        • - TAP OTAC
        • - OTAC Holderless Card
        • - OTAC Dynamic Token
      • swIDch: IoT Auth
        • - IoT Auth Platform OTAC
        • - Smart Building OTAC
        • - HomeNet OTAC
        • - Connected Car OTAC
        • - Drone OTAC
      • swIDch: Access Auth
        • - Identity&Access Management OTAC
    • FIDO & mOTP Solutions
      • swIDch Auth
        • - swIDch Auth Package
        • - swIDch Auth SDK
  • Case Studies
    • Case Studies
      • Toss Bank
      • Kakao
      • A-Card Bank
      • E-Stamp : Indonesia
      • Milipass
  • News
    • News & Information
    • Blog
    • Video
  • Contact
  • About Us
  • Technology
    • - OTAC
    • - FIDO
  • Solutions
    • OTAC solutions
      • swIDch: Finance
        • - TAP-OTAC
        • - OTAC Holderless Card
        • - OTAC Dynamic Token
      • swIDch: OT
        • - PLC-OTAC
        • - MFA for PLCnext
      • swIDch: IoT
        • - IoT Auth Platform OTAC
        • - Smart Building OTAC
        • - HomeNet OTAC
        • - Connected Car OTAC
        • - DroneOTAC
      • swIDch: Access
        • - Identity & Access Management
    • FIDO & mOTP Solutions
      • swIDch Auth
        • - swIDch Auth Package
        • - swIDch Auth SDK
  • Case Studies
    • Case Studies
      • - Toss Bank
      • - Kakao Bank
      • - A-Card Bank
      • - E-Stamp : Indonesia
      • - Milipass
  • News
    • - News & Information
    • - Blog
    • - Video
  • Contact

OTAC Solutions

OTAC auth
- MFA for PLCnext

SSenStone provides ‘OTAC auth – MFA for PLCnext’, an advanced modular user authentication solution available on PLCnext Store, the digital software marketplace of Phoenix Contact.

SSenStone's One-Time Authentication Code (OTAC) is the world’s first one-way dynamic authentication technology that enables MFA for PLCNext devices via users smartphones. Once a PLC is protected with our solution, the user can authenticate to PLC utilizing our dynamic 'one-time authentication code' (OTAC) technology. The code is generated on our mobile app (available on Google Play and Apple App store), is valid for a short period of time and even works offline. OTAC combined with device biometrics and/or PIN provides a highly optimized and secure authentication solution specifically for ICS/OT security challenges.

img_plcotac_app (eng)

 

OTAC auth resolves : 

⇛ Password sharing in password-only authentication systems

⇛ Difficulty managing ID/PW specified for each PLC device

⇛ Difficulty managing user changes (leavers / contractors etc)

⇛ Hacking attempts using password-cracking software

⇛ Enforce MFA on multiple PLC devices at once

img_plcotac_after (eng)

OTAC auth benefits : 

⇛ Significantly enhances authentication security on PLC devices, adding MFA capability (without network access)

⇛ Does not require or rely on Public Key Infrastructure (PKI)

⇛ Works on fully standalone / air-gapped PLCs as well as networked PLCs

⇛ No impact to User Experience (UX) - enables single-step login and MFA combined for super fast secure access

⇛ Works for multiple users on multiple PLC devices

⇛ Easy to deploy - installs directly onto the PLC

⇛ No additional hardware required

⇛ Low cost compared to other MFA solutions utilizing PKI

⇛ No more forgotten passwords / password resets, means reduced overheads for OT security teams

⇛ Enforces secure and dynamic login every single time (without having to update passwords)

What's New in Version 2 :

The latest Version 2 introduces several new features and improvements :

⇛ Enhanced Security : Now, you can protect multiple PLCs with OTAC Auth MFA

⇛ App Split : The application has been divided into two components : OTAC Auth MFA Server and OTAC Auth MFA Client

     - Server : Installable on a central edge PLC 
     - Client : Installable on each PLC you want to protect with MFA 

 

OTAC auth v2 image 1

 

More supported products coming soon

OTAC auth - MFA for PLCnext

You can find more information about OTAC auth - MFA for PLCnext from PLCnext Store.

Learn about our solution

OTAC auth MFA Server          OTAC auth MFA Client

 

OTAC auth Mobile App Download

You can download the OTAC auth app from the respective Google and Apple app stores :

otacauth_plc_appdownload_android          otacauth_plc_appdownload_ios

 

otacauth_plc_app

 

Documentation

You can download all the documentation for using the OTAC auth : 

1. OTAC auth Design Guide

2.1. OTAC auth Server Install Guide

2.2. OTAC auth Client Install Guide

3. OTAC auth Admin Manual

4. OTAC auth Mobile App User Manual

Video

You can also watch tutorial videos for the OTAC auth : 

1. Installing OTAC auth MFA Server

2. Installing OTAC auth MFA Client

3. Applying licenses on OTAC auth MFA Server & Client

4. Mobile App and User Onboarding setup

Why OTAC

OTAC, developed by SSenStone, is the original technology that provides all of the following features at the same time.

Main Large

    OTAC is a dynamic code, which means the code keeps changing. As a result, you don’t need to worry about any leak of your personal information, such as your card details, because the codes must have already been changed when others try to use them.

    The network connection is NOT necessary at all for generating OTAC.

    Reducing an authentication stage that requires the network connection directly means there are fewer gateways for the hackers to access our personal information.

    Moreover, this feature enables users to authenticate even when they are in networkless environments, such as on the plane, underground, rural or foreign areas.

    swIDch can guarantee that the code never duplicates with anyone at any given moment.

    There is NO chance of someone else having the same code.

    The users or their devices can be identified with the code alone.

    Once OTAC has been generated, providing OTAC alone is already fully sufficient to identify the user as the code is unique.

    It means, you can forget about the bundles of static information including IDs and passwords.

OTAC Algorithm Analysis and Academic Verification

report_otac_surrey univ

The University of Surrey, one of the leading global cyber security companies in the UK, conducted OTAC algorithm analysis and academic verification of SSenStone. For the full text of the thesis, please visit the University of Surrey website and download the report.

 

Univ. of Surrey Website
Download the Report

New Excellent Technology (NET) Certification Acquired

NET신기술인증-removebg-preview

SSenStone has received the NET Certification from the Ministry of Trade, Industry, and Energy for its "Individual IoT Device Authentication and Transmission Data Security Technology through Unidirectional Dynamic Authentication (OTAC)."

 

NET Website
Press Release

International Common Criteria (CC) Certification Achieved

국제CC인증_엠블럼 (png)

OTACTokenV1.0, the authentication solution based on the world’s first unidirectional dynamic authentication technology, OTAC, has earned the international Common Criteria (CC) certification. For more information, please refer to the press release.

 

ITSCC Website
Press Release

OTAC for Phygital Wins IR52 Jang Yeong-sil Award

IR52 logo

SSenStone's OTAC for Phygital has been awarded the 40th-week IR52 Jang Yeong-sil Award for 2024, hosted by the Ministry of Science and ICT. For more details, please visit the official IR52 Jang Yeong-sil Award homepage or the press release.

 

IR52 Website
Press Release

Insights

  • The Future of Financial Security in the Face of Phishing Attacks

    In recent years, financial security incidents, especially phishing attacks, have become a serious...

    Read more

  • How is ChatGPT addressing financial fraud?

    Last year, after giving birth, I hired a postpartum doula to help me. After trying out a few...

    Read more

  • Solving Voice Phishing and Smishing Security Issues: SSenStone's Personal Information Authentication Technology

    Today, I'd like to discuss a crucial financial security issue that affects us all, and explore the...

    Read more

  • Securing the Seas through Advanced Authentication Revolutionising Safer and Cleaner Shipping

    The maritime industry is undergoing a significant transformation, driven by the dual imperatives of...

    Read more

Contact Us

Improve your authentication environment and
make your service reliable with SSenStone!

Inquire now.

5F, 329, Cheonho-daero Dongdaemun-gu, Seoul, Republic of Korea (02622)

Contact below if you have an urgent inquiry.

Korea Office (SSenStone)

5F, 329, Cheonho-daero Dongdaemun-gu, Seoul, Republic of Korea (02622)

Tel : 02-569-9668  |  Fax : 02-6455-9668

im@ssenstone.com

UK Office (swIDch)

Floor 1, 3 More London SE1 2RE, United Kingdom

Tel : 020-3283-4563

info@swidch.com

SSenStone Inc.

5F, 329 Cheonho-daero Dongdaemun-gu, Seoul, Republic of Korea (02622)

T. 02-569-9668

F. 02-6455-9668

E. im@ssenstone.com

Sitemap

Copyright© SSenStone Inc. All rights reserved.