Hosted Advanced Authentication
Effective September 30th, 2014 advanced authentication will be required to meet CJIS compliance under section 126.96.36.199 of the CJIS Security Policy (version 5.1). This section requires any access to criminal justice information outside the secured law enforcement location must use an advanced authentication method. CJIS Solutions offers advanced authentication for agencies who do not want the added expense of owning their own server, managing it, or worrying about upgrades as time goes on. We provide a hosted solution that integrates with your existing onsite environment for a “per user per year” pricing structure.
You have the ability to receive advanced authentication via USB key, SoftToken, or KeyFob (see below). Each one comes with inherent positives and negatives so we recommend discussing your needs with us to better understand the costs involved with this new requirement.
What is Advanced Authentication?
Simply put, Advanced Authentication it is something you know and something you have. Meaning, your password you “know”, but what do you “have”? Our Advanced Authentication Solutions give you several “something you have” options. Whether it be a physical USB device or token, a software option such as an Android or iPhone App, or messaging option that will text your pin numbers. CJIS Solutions offers it all and at a comfortable price.
The CJIS Solutions Difference?
So with so many solutions out there, why ours? For one, we use what we sell. All of our staff uses the exact same product to access our own equipment so we know what you’re going through. Second, and most important, we’re the only CJIS compliant company that hosts the platform leaving you with only the end user devices. You’ll eliminate the need to purchase a server and incur the costly expenses that go along with it.
View our Tokens and how they work
It all begins with the secure token. Our software token technology turns your Windows Mobile, Windows Phone 7, RIM Blackberry, Apple iPhone or Google Android into an SoftToken authentication device. It also works on Windows desktops and directly on USB based Yubikeys. In combination with our Hosted Strong Authentication Server, we then program a unique 192bit AES key into the phone and configure it to produce 8 digit one-time-passwords with each use. This creates a huge keyspace, and with a 4 to 8 digit PIN, produces upwards past a trillion different possibilities… changing EACH time it is used. As a software token, it never expires, and will last as long as your device or desktop does.
Our hardware token technology is based on the industry proven CryptoCard KT1 and KT4 system which has been used to protect everything from Los Alamos Laboratories, Apple Computers and even Google. It generates a new one-time-password each time it is used, and combined with a user’s personal PIN provides for a strong passcode that cannot be forged or ever used twice. Your officers will simply insert the USB key into the computer they need CJIS access on, press the button, and the new one time password will appear for them to use.
In combination with our software, we then program a unique 192bit AES key into the token and configure it to produce 8 alpha-numeric one-time-passwords with each use. Its keyspace offers over 2.8 trillion different possibilities… changing EACH time it is used.
Our hardware tokens are powered by coin-cell batteries that provide 5 to 7 years of service, depending on the number of authentications you perform. (On KT-01 tokens, batteries may be replaced as required to extend the service life of the token) Most other providers have a 3 year life.
Simple Solution, Maximum effectiveness, Simple Pricing!
At CJIS Solutions we like to make things simple for you. Hosted means you’ll be saving. Saving on having to own and manage your own internal server.
|YubiKey USB Token:||$80ea – One Time Non-Expiring Cost (as in never pay again)|
|Rolling Number KeyFob:||$75ea – One Time Non-Expiring Cost (as in never pay again)|
|SoftToken Phone App:||$50ea – One Time Non-Expiring Cost (as in never pay again)|
Server/Device Agents: FREE – Unlimited
|1-100 users:||$48 per user per year|
|Over 100 Users:||$36 per user per year|
|Setup Fee:||$3.00 per user One Time never pay again fee.|
Once account is set up & deployed, all support & maintenance is included in your annual rate.