SSenStone's One-Time Authentication Code (OTAC) is the world’s first one-way dynamic authentication technology that enables MFA for PLCNext devices via users smartphones. Once a PLC is protected with our solution, the user can authenticate to PLC utilizing our dynamic 'one-time authentication code' (OTAC) technology. The code is generated on our mobile app (available on Google Play and Apple App store), is valid for a short period of time and even works offline. OTAC combined with device biometrics and/or PIN provides a highly optimized and secure authentication solution specifically for ICS/OT security challenges.
.jpg?width=900&height=506&name=img_plcotac_app%20(eng).jpg)
.png?width=1020&height=368&name=img_plcotac_after%20(eng).png "img_plcotac_after (eng)")
The latest Version 2 introduces several new features and improvements :
⇛ Enhanced Security : Now, you can protect multiple PLCs with OTAC Auth MFA
⇛ App Split : The application has been divided into two components : OTAC Auth MFA Server and OTAC Auth MFA Client
- Server : Installable on a central edge PLC
- Client : Installable on each PLC you want to protect with MFA
Why OTAC
OTAC, developed by SSenStone, is the original technology that provides all of the following features at the same time.
.svg)
-
OTAC is a dynamic code, which means the code keeps changing. As a result, you don’t need to worry about any leak of your personal information, such as your card details, because the codes must have already been changed when others try to use them.
-
The network connection is NOT necessary at all for generating OTAC.
Reducing an authentication stage that requires the network connection directly means there are fewer gateways for the hackers to access our personal information.
Moreover, this feature enables users to authenticate even when they are in networkless environments, such as on the plane, underground, rural or foreign areas. -
swIDch can guarantee that the code never duplicates with anyone at any given moment.
There is NO chance of someone else having the same code. -
The users or their devices can be identified with the code alone.
Once OTAC has been generated, providing OTAC alone is already fully sufficient to identify the user as the code is unique.
It means, you can forget about the bundles of static information including IDs and passwords.
