SyferLock 2form User Guide 2 4 2 0

2Form™ Security Authentication
User Guide 2.4.2.0
1 of 25
SyferLock Technology Corporation™ reserves the right to make changes to any portion of its products at any time, without any notification to any person or entity.
Export authorization from the U.S. Department of Commerce may be required prior to export of SyferLock Technology Corporation™ products and technologies.
©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

System and method U.S. Patented 7,143,440 Additional U.S. and Foreign Patents Pending.
User Guide
11/19/2008
Table of Contents
Overview ................................................................................................................................ 3
User Name Login ...................................................................................................................... 3
Register a New User .................................................................................................................. 4
GridGuard™ Login .................................................................................................................... 6
Manage GridPIN™ .................................................................................................................... 9
User Administration ................................................................................................................. 13
APPENDIX A – MyGrid™ Samples .............................................................................................. 16
APPENDIX B – Frequently Asked Questions ................................................................................... 21
APPENDIX C – Terminology ...................................................................................................... 22
2 of 25

User Guide
11/19/2008
Overview
As more and more enterprise employees work remotely, from home offices or from mobile locations, the need for
reliable and secure application access is growing While current solutions can leverage SSL to provide a secure
connection over the internet, they cannot protect against threats on the remote computer such as key loggers,
stored browser passwords, or simple shoulder surfing. The GridGuard™ authentication system can help. By
converting your user’s existing password into a secure one-time code that changes every time, remote users will be
protected against many common threats.
In addition to offering enhanced authentication into applications and allowing a one-time password log-in
replacement of static log-ins, Grid provides enhanced features such as detailed account history and monitoring at
the user level which assists in anomaly detection and detecting fraudulent account activity. This information can
also be exported into master corporate audit and compliance information records and databases.
With GridGuard™ 2Form™ Security Authentication, there are two “layers” of security as the user will be entering
their password, and also a GridPIN™ that they define. The GridPIN™ along with their password will authenticate
the user. In addition to the corner selection of the standard GridGuard™ user interface. we have increased the
security of GridPIN™ by adding a North, South, East and West position.
Within this guide, you will be walked through the 4 main areas of functionality:
User Name Login Register a New User
GridGuard™ Login Manage GridPIN™
User Name Login

To login to your application using GridGuard™, simply enter your network user name.
3 of 25

User Guide
11/19/2008
If this is the first time that you are using GridGuard™, the system will launch the Register a New User screen. You
will need to enter your domain password, define your GridPIN™ as well as define the target position that is
associated to the GridPIN™ value.
If you enter an incorrect or invalid user name, the system will reset to the User Name Login page and any
selections made will not be saved.
Register a New User

If this is the first time that you are using the Two Form GridGuard™ system, you will need to define your GridPIN™
as well as the target position that will be used when entering your GridPIN™ at login.
There are 3 required steps to complete to successfully register. The following will walk you through defining the
fields and expected values for each of those steps.
TIP: If using the keyboard to navigate through the Register a New User screen, once you tab to the Select
GridPIN™ position section, you may then use the arrow keys to select your grid corner.
4 of 25

User Guide
11/19/2008
Step 1: Verify Password – This password is your domain password. Remember, it is case sensitive.
Note: If a user tries to save with the wrong password entered (even if the PIN is correct), user will be
prompted back to the first screen to re-enter their user name. If a PIN or PIN position selection was
defined, it will not be saved.
Step 2: Select a GridPIN™ - The GridPIN™ is your extra layer of security that is entered in addition to your
network password. Your PIN can be any combination of values 0-9, pound (#), and/or asterisk (*). After
entering the value, you will need to re-enter you selection exactly as you typed it.
Alpha characters as well as any other special characters not previously noted are not allowed.
Step 3: Select GridPIN™ Position - The GridPIN™ position is the numeric value that is entered at login. You
will be able to select a corner (upper left, upper right, lower left or lower right) or a middle position (top, bottom,
right or left).
If you do not wish to register at this time, select the Cancel button, which will bring you back to the login page.
Once Steps 1-3 have been completed, click the Save button. If all fields have been successfully completed, you
will receive a registration confirmation. Click the OK button and you will be able to login with your password and
GridPIN™.
Registration Confirmation
Within Register a New User, you will be able to launch the GridGuard™ video that will show you how to use the
system. To launch the video, click the green arrow in the middle of the video player and a separate window will
launch to play the video.
5 of 25

User Guide
11/19/2008
GridGuard™ Login
Once you have successfully registered, you will be brought to the GridGuard™ Login page. You will be required to
enter the network password (case sensitive) and the GridPIN™ value. The value that is entered will not be the
actual PIN value but the numeric value that exists in the targeted position that was defined at registration.
The GridPIN™ value only allows numeric values. Alpha or special characters will not be allowed. Users are also
allowed to enter DecoyDigits™.
DecoyDigits™ are numeric values that can be added “on the fly” within any position of the GridPIN™.
Administrators have the ability to define the number of DecoyDigits™ that can be entered with a password. The
default is 1 DecoyDigit™ for every 2 GridPIN™ values. For example, if your GridPIN™ is 7939 you could use a
maximum of 2 DecoyDigits™. These digits could be placed at the beginning, end, middle, together after the first
digit, second digit, etc.
6 of 25

User Guide
11/19/2008
The following shows the Login page where the GridPIN™ value corresponds to a PIN that is “1234” with Upper
Left Corner selected. Therefore, using the GridGuard™ methodology, a user will not enter 1234, but will type the
values in the upper left corner on the 1, 2, 3, and 4 keys – 7939.
GridPIN™ Without DecoyDigits™
7 of 25

User Guide
11/19/2008
The following shows a Login that is leveraging the DecoyDigit™ feature. Though DecoyDigit's™ can randomly be
distributed through the GridPIN™ value, the GridPIN™ must still be entered in the order that it was defined.
GridPIN™ with DecoyDigits™
Once you have entered your password and GridPIN™, you will be able to login to your application, manage your
GridPIN™ or cancel by selecting the Logout button.
If you select the Login button, the system will validate the password and GridPIN™ values you entered.
If you select the Manage GridPIN™ button, they system will bring you to the Manage GridPIN™ and Account
Dashboard screen. Here you will be able to change your PIN value or targeted position selection as well as review
the recent activity on your account. Review the Manage GridPIN™ section of this guide for further details on what
this feature provides.
8 of 25

User Guide
11/19/2008
Manage GridPIN™
Manage GridPIN™ and Account Dashboard will allow you to manage your GridPIN™ values and or targeted
position selections. In addition to managing this feature, you can view activities that have occurred against your
account.
9 of 25

User Guide
11/19/2008
Change GridPin™
Users change their PIN at anytime. To successfully change the value, the current PIN, the new PIN, and
retyping of the new PIN must be entered in the applicable fields then saved by the system. GridPIN™ values
must be numeric (0-9) or the pound (#) and asterisk (*) keys may also be chosen.
To clear any values selected, click the Cancel button. You will remain on the screen, however all entries will
be cleared. Once values are entered, click the Save button. Validation that you have successfully changed
your PIN will appear. When completed, select the Logout button at the bottom of the screen.
Change GridPIN™
Confirmation of GridPIN™ Change
TIP: Alpha and special character values (other than the * and # keys) are not allowed as acceptable GridPIN™ values.
10 of 25

User Guide
11/19/2008
Change GridPin™ Position
Users can change the targeted position selection for their PIN. To change the position selection, click the
position that is desired. This will select the button as well as bold your selection to indicate the selection is
made.
To clear any values selected, click the Cancel button. You will remain on the screen, however all entries will
be cleared. To save this selection, click Save. If position was saved successfully, a confirmation will appear
at the top of the screen. When completed, select the Logout button at the bottom of the screen.
Change GridPIN™ Position
Change GridPIN™ Position Confirmation
TIP: Changing either the PIN value or position can be done independently. For example, if you are changing your GridPIN™
position, re-entering your GridPIN™ value is not required.
11 of 25

User Guide
11/19/2008
Recent Account Activity
The Recent Account Activity section provides the user with a history of the last 15 activities that occurred with
their username and password. Activities include successful to failed logins, resetting of the account, and
successful PIN value or position changes. In addition to the activity, the date, time and IP Address from where
the activity occurred is also provided.
By providing this visually, users are more aware of the activities that are occurring and can escalate any
unexpected behavior.
Recent Account Activity
Once you are done in the Manage GridPIN™ and Account Dashboard screen, select the Logout button to re-login.
TIP: When finished in Manage GridPIN™ and Account Dashboard, select the Logout button. It is not recommended
to use the browser back button.
12 of 25

User Guide
11/19/2008
User Administration
User Administration is a feature within Manage GridPIN™ that is available to those individuals who are assigned
Grid Admin rights.
Grid Administrators can reset a user’s account information which forces them to re-register, change a user’s
password corner, and have visibility to that user’s account activity.
13 of 25

User Guide
11/19/2008
To access User Administration, the Grid Administrator selects the User Administration button from the Manage
Password and Account Dashboard screen.
Once the User Administration button is selected, the Grid Administrator will be prompted to search for the domain
user that requires management on their account.
14 of 25

User Guide
11/19/2008
To search on a user, enter the User Name and select the Search button. This user must be a valid, active user in
Active Directory. Once the system validates the user, the Administrator will be brought to the User Administration,
Manage Password and Account Dashboard screen. For invalid or non-existing users, an error is displayed and you
will be able to search on another user.
Invalid User Error Message
On the User Administration, Manage Password and Account Dashboard screen, you will be able to change the
user’s targeted position selection, reset the user completely, view their account activity, or search for another user.
If you reset a user, they will need to re-register at login.
Once changes are completed, select Logout to exit User Administration.
15 of 25

User Guide
11/19/2008
APPENDIX A – MyGrid™ Samples

The following are a few samples of the MyGrid™ layout options that are provided. MyGrid™ is completely
customizable and flexible to meet your usability criteria. For foreign character display, MyGrid can display in any
language by switching your browser to that language. Appendix A captures two (Arabic and Greek) of the many
that are available.
QWERTY
16 of 25

User Guide
11/19/2008
Alpha – Landscaped (DEFAULT SETTING)
Alpha – Grouped
17 of 25

User Guide
11/19/2008
Alpha + NumPad
Alpha + Numpad 99
18 of 25

User Guide
11/19/2008
Alpha – Portrait
Arabic
19 of 25

User Guide
11/19/2008
Greek
20 of 25

User Guide
11/19/2008
APPENDIX B – Frequently Asked Questions

If I am a new user, how do I select my position?
If you are a new user, after you enter your user name at the login screen, you will be brought to the
Register a New User screen. Here you will be required to enter your domain password and select your
targeted position.
If my password changes, do I need to re-register?
No. GridGuard™ will recognize your password has changed and at the next login, you will be required to
use that password with the corner that you used with your old password.
How can I see what activity is occurring with my account (ie logins, changes to the corner or position
selection, etc)?
Within Manage GridPIN™, you will see the history of the last 15 activities that have occurred with your
account. The Activity, date that it occurred as well as the IP Address where the activity initiated from will be
displayed.
What if I forget my PIN or position selection, what do I need to do?
You can contact your Network Administrator who will be able to reset your account. This will require you to
reregister where you will define your PIN and or targeted position.
Can I change my position selection? Is there a limitation to how many times I change it?
You are able to manage your corner or position selection via the Manage GridPIN™ function. There are no
limitations to the number of times you change your targeted position and each time it is changed, it will be
logged in your Account Activity.
I changed MyGrid™ option, however when I logged back in, it was back to the default.
Your MyGrid™ selection will not be saved until you have successfully logged in. If you change your
MyGrid™ layout and fail at login, when you try logging in again, it will be back at the default screen.
I want to see my layout in a foreign language, is this available?
Yes. You can select the grid under MyGrid™ or change your Browser encoding setting to the language of
choice. Your grid will be populated with the correct character display.
21 of 25

User Guide
11/19/2008
APPENDIX C – Terminology
2Form™ (3Form™, 4Form™…) Authentication
SyferLock Technology Corporation’s patent number 7,143,440 unique and proprietary methodology and means
to layer and/or add additional forms of authentication to a user’s traditional password, such as a GridPIN™,
security modifier(s), corner/position selection (Axiom of Choice concept), etc.
AutoToken™
The Grid Data Security solutions’ ability to user create and generate two factor or multi-factor authentication to
be used in conjunction with a GridPass™ providing “the something you have” with “the something you know”.
Cryptogram Elements
A type of puzzle which consists of a short piece of encrypted text. Generally the cipher used to encrypt the text
is simple enough that cryptogram can be solved by hand. Frequently used are substitution ciphers where each
letter is replaced by a different letter or number. To solve the puzzle, one must recover the original lettering.
DecoyDigits™
A proprietary and protected (USPTO 7,143,440) methodology where arbitrary and/or mandatory use of EXTRA
digits or values can be injected into any position of a user’s GridCode™, thus making the attack scenario of
reverse engineering of a user’s GridPass™ much more problematic.
GridAdvanced™
A system configuration and deployment set-up that maximizes user end-point security, but requires increased
back-end or behind the firewall integration efforts such as a password synchronization agent, domain controller
configuration and the need to store user passwords in reversible encryption. GridAdvanced™ configuration
offers security against stored browser passwords, replay attacks, shoulder-surfing, key stroke loggers, and
forces a concerted attack and multiple observations to begin to reverse engineer a user’s GridCode™ and
associated GridPass™.
GridBasic™
System configuration and deployment that minimizes back-end or behind the firewall integration efforts (such
as a password synchronization agent, domain controller configuration) and the need to store user passwords in
reversible encryption. The GridBasic™ configuration, while still defeating stored browser passwords, replay
attacks, shoulder-surfing and keystroke loggers, does not confer the increased end point security benefits and
features as the GridAdvanced™ system (See GridAdvanced™).
GridCell™
A polygon (usually a square or rectangle) consisting of a single GridPass™char-
acter in the middle and corresponding GridCodeTM Digits for each corner of the cell.
GridCode™
The user’s input, code and/or one time password used to login through the Grid Data Security solutions and
products. The GridCode™ is the result created by the user’s GridPass as applied to the randomly generated
security grid generated upon call to login to a service or application.
22 of 25

User Guide
11/19/2008
GridCore™
SyferLock Technology’s proprietary C++ code and extendible libraries used to deliver random authentication
grids or login sessions data, supporting United States Patent and Trademark Office number 7,143,440
methodology.
Grid Data Security™ solutions

SyferLock Technology Corporation’s various products and product suites created using the corporation’s
patented (7,143,440) system and methodology where users transform static login information into a one time
password allowing for more secure account and application access by defeating many forms of static password
attacks.
GridGov™
The use of various GridWare™ components to secure the specific needs, criteria and certifications necessary
for Federal, State, and/or Local government environments
GridGuard™
An SDK allowing proprietary and third party products and applications to offer and deliver one time password
enhanced authentication.
GridOne™
A web based authentication system offering users the protection of one time password generation and usage
for more secure login into online and web accounts.
GridPass™
The term used for the construction and/or formulization of a user’s traditional password characters PLUS the
addition of one or more functions provided by the various Grid Data Security solutions and products and as
protected by USPTO number 7,143,440.
GridPIN™
The SyferLock Technology Corporation’s system and methodology applied to traditional Personal Identification
Number(s) – PIN(s) – allowing a static PIN to be input and transmitted as a one time PIN. Similar to a
GridPass™, the user constructs the PIN from traditional elements and/or numbers, then applies one or more
functions provided by the various Grid Data Security solutions and products. Again, the use of a GridCode™ is
used at login.
GridPro™
The use of various GridWare™ components to secure individual clients and their possible access to domains,
LANs and WANs.
GridSync™
A proprietary password synchronization agent that once installed on a domain controller(s) allows for the
GridWare™ applicable systems and/or database(s) to be updated with any user password changes and/or
creation.
GridWare™
Reference to the assemblage of the various Grid Data Security solution product components and/or
subcomponents which could include such items as the GridSync™ password filter, database(s), GridCore™
library, etc.
23 of 25

User Guide
11/19/2008
MyGrid™
The unique ability for system users to individually configure and select security grid User Interfaces customized
with individual preferences such as layout, colors, character sets, and skins
Password Character Set

Let P represent the cardinality of the set of possible password characters. For the purposes of this example,
we will define this set to be all uppercase and lowercase characters, decimal digits, and eight of the most
common special characters (such as = + - # .). Therefore, P = 70.
Password Elements (EapType)

An element that identifies the password of the user or machine being authenticated.
24 of 25

SyferLock Technology Corporation
Company & Contact Information
products of SyferLock Technology Corporation
250 Pequot Avenue

Southport, CT 06890 USA
Phone 203-292-6268
Fax 203-292-5440
Email info@SyferLock.com
www.SyferLock.com or www.GridDataSecurity.com
25 of 25


SyferLock 2form User Guide 2 4 2 0

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SyferLock 2form User Guide 2 4 2 0

Uploaded by

Copyright:

Available Formats

2Form™ Security Authentication

User Guide 2.4.2.0

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

User Name Login Register a New User

GridGuard™ Login Manage GridPIN™

User Name Login

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

Register a New User

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

GridPIN™ Without DecoyDigits™

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

GridPIN™ with DecoyDigits™

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

Confirmation of GridPIN™ Change

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

Change GridPin™ Position

Change GridPIN™ Position

Change GridPIN™ Position Confirmation

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

Recent Account Activity

Recent Account Activity

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

Invalid User Error Message

Once changes are completed, select Logout to exit User Administration.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

APPENDIX A – MyGrid™ Samples

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

Alpha – Landscaped (DEFAULT SETTING)

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

APPENDIX B – Frequently Asked Questions

If my password changes, do I need to re-register?

What if I forget my PIN or position selection, what do I need to do?

I want to see my layout in a foreign language, is this available?

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

Grid Data Security™ solutions

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

Password Character Set

Password Elements (EapType)

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

products of SyferLock Technology Corporation

250 Pequot Avenue

©2003 –2008 SyferLock Technology Corporation™ All Rights Reserved.

You might also like