Overview

DSS Enterprise is an Authentication, Authorisation and Access (AAA) Identity-as-a-Service (IDaaS) system.

It uses a SAML-based identity authentication protocol, without SAML message complexity. The total interface requirements are two simple HTTP requests.

The second factor of the inherent Two Factor Authentication (2FA), is the unique signature of the user’s device.
This is derived from the device CPU, CPU clock speed, device graphics adapter and its version, device operating system and its version, and browser type and its version. Such a signature cannot be impersonated by hackers.
The slightest change in any of these parameters, such as a software, firmware or hardware upgrade, produces a different signature, and renders the original one useless.
The device signatures are derived automatically, without querying the device, installing cookies or client software on the device.
The signatures, together with verification of the source IP address, protect the Single Sign-on feature from tailgating and session hijack

Data-at-rest is protected by a novel, ultra secure encryption key management system. The key isn’t stored in any physically accessible location, and only the system knows its value. Although the administrator can change it, he never knows its value. Once changed, not even we can discover the encryption key.

Only the users themselves know and can set and change their passwords. Once set and stored encrypted, neither the administrator nor the root user can access them.
Out-of-the-box installation, simple configuration in under an hour via a smartphone. Just install four files, start your Oracle database and run the schema creation and population script.

Runs on Solaris or Linux, with script-driven user migration from an Excel csv file into an Oracle, DB2 or Informix database.