双因素认证（2FA）

芯盾时代双因素认证Two-factor Authentication（2FA）通过移动安全认证技术与标准认证插件，融合推送、扫码、动态口令、生物认证等技术，为客户提供多种移动安全免密认证方式。支持Radius、LDAP、Web SDK、Scheme、Plugin、API等标准集成方案，简化集成工作，无须对目标系统进行改造便可实现密码认证之外的第二因素认证，满足安全合规要求；支持用户管理、认证管理、应用管理、授权管理、审计管理等功能的可视化。

产品功能

移动认证APP 利用终端安全核心技术（移动设备指纹、软件安全沙箱、终端安全防御），融合推送、扫码、动态口令、生物认证等技术，为客户提供多种移动安全免密认证方式。

认证插件支持Radius、LDAP、Web SDK、Scheme、Plugin、API等标准集成方案，简化集成工作。

可视化管理中心提供可视化管理平台，包括用户管理、认证管理、应用管理、授权管理、审计管理等功能。

应用场景

设备双因素认证

支持Radius、LDAP标准认证协议的应用，比如VPN、堡垒机、交换机、路由器、云桌面、SVN、Git等，通过Radius或者LDAP协议代理服务，拦截转发用户认证请求到手机APP进行双因素认证。
Web双因素认证

Web应用可以通过集成Web SDK，由Web SDK接管Web应用认证，实现安全免密认证，Web SDK支持java、php、.net、python、nodejs等各种语言版本。
操作系统双因素认证

通过在Windows/Linux操作系统安装认证插件，拦截转发认证请求到手机APP进行安全认证，支持双因素认证及免密认证。
移动应用免密认证

针对Android、iOS、H5移动应用，通过Oauth2.0、Scheme协议，唤起认证APP，进行指纹或手势认证。

产品特色

安全认证终端

移动终端安全核心技术（移动设备指纹、软件安全沙箱、终端安全防御），保证认证终端安全性，提供独立APP与SDK形态。

灵活认证方式

支持密码、短信、扫码、动态口令、推送、人脸识别、微信、钉钉、CA等多种认证方式，灵活认证策略。

丰富认证场景

覆盖VPN、堡垒机、Web、Android、iOS、H5、Windows、Linux、SVN、Git等在内的各种网络设备、Web应用、移动应用、操作系统、中间件相关认证场景。

标准集成方案

提供Radius、LDAP、Web SDK、Scheme、Plugin、API等标准集成方案，大幅简化集成工作，无须改造系统便可实现外接双因素认证功能。

Products & Services

Human-Centered Zero Trust Business Security Protection System

Home > Products > Enhanced Identity and Access Management (EnIAM) > Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA)

Through mobile security authentication technology and standard authentication plug-ins, Trusfort's Two-factor Authentication can integrate pushing, QR-code scanning, OTP, biological authentication and other technologies to provide a variety of mobile security password-less authentication methods for customers.It supports standard integration scenarios such as radius, LDAP, web SDK, scheme, plugin and API to simplify the integration work, and realise the second factor authentication without modifying the system to meet the security compliance requirements. Supporting the visualization for funcations, including user management, authentication management, application management, authorisation management, audit management etc.

Functions

Mobile Authentication App Use the endpoint security's core technologies with patents (mobile device fingerprint, software security sandbox, endpoint security defense), and integrate push, QR-code scanning, OTP, biological authentication and other technologies to provide customers with a variety of mobile security password-less authentication methods.

Authentication Plug-in Support standard integration solutions such as Radius, LDAP, Web SDK, Scheme, Plugin and API to simplify integration.

Visual Management Center Provide visual management platform, including user management, authentication management, application management, authorisation management, audit management, etc.

Scenarios

Two-Factor Authentication For Device

It supports the applications of Radius and LDAP standard authentication protocols such as VPN, Bastionhost, Switch, Router, Cloud Desktop, SVN, Git, etc. By using Radius or LDAP protocol proxy service, it intercepts request of user's authentication requests to mobile App for two-factor authentication.
Two-Factor Authentication For Web

Through integrating Web SDK, the authentication of Web application can be taken over by Web SDK, and then it can realise secure passwork-less authentication. Web SDK supports Java, PHP, .Net, Python, Node.js etc.
Two-factor Authentication For Operating System

By installing authentication plug-ins on the Windows or Linux operating system, it intercepts authentication requests to mobile Apps for security authentication, and supports two-factor authentication as well as password-less authentication.
Password-Less Authentication For Mobile Applications

For Android, iOS, H5 mobile applications, through the Oauth2.0 and Scheme protocol, it can active the authentication Apps for authentication of fingerprint or gesture.

Features

Security Authentication Endpoint

Use mobile device security core technologies (mobile device fingerprint, software security sandbox, endpoint security defense) to ensure the security of authentication endpoints. It also provides independent App and SDK formats.

Flexible Authentication Method

Support password, SMS, QR-code scanning, OTP, pushing, face recognition, WeChat, DingTalk, CA and other authentication methods. The authentication policy is flexible.

Enrich Authentication Scenarios

It contains various cyber devices such as VPN, Bastionhost, Web, Android, iOS, H5, Windows, Linux, SVN/Git for enrich authentication scenarios, including Web applications, mobile applications, operating systems, and middleware.

Standard Integration Scheme

Provide standard integration solutions such as Radius, LDAP, Web SDK, Scheme, Plugin, API, etc. to simplify the integration work and realise external two-factor authentication without modifying the system.