Distributed Management Systems Ltd

https://www.startus.cc/company/distributed-management-systems-ltd

Stockclough lane

Blackburn

BB2 5JR

United Kingdom

Website

General information:

Distributed Management Systems Ltd (DMS) is a private UK company owned by its Directors all of whom are UK Nationals.

DMS has developed a radical new method of Identity Assurance called CASQUE SNR. Some aspects of the Invention have granted US ane EU patents.

Organisations should have control of who can access their important data assets, especially when these are maintained in the Cloud and choosing the strongest Authentication technology reduces the overall risk.

CASQUE SNR is the most robust Multi-factor Authentication available bar none because it does not rely on fixed secrets so is not susceptible to discovery by hacking or to disclosure by malevolent Insiders.

Used by UK Ministry of Defence, it is the only MFA certified by NCSC as suitable for Secret. It fulfils the highest assurance level criteria (Level 3 Multi-factor Crypto device) as specified in NIST Digital Identity Guidelines.

Company information:

Company type:

Startup

Industry:

IT - Security

Founded when:

Monday, 14 June, 2010

Startup stage:

Shipping stage (actively selling)

Funding needs:

Series A funding

Types of jobs in the company:

IT - Software Dev

Total numbers of employees:

Products and Services:

CASQUE SNR Dynamic Multi-factor Authentication

Product category:

Cyber Security

The US National Institute of Standards and Technology (NIST), in their Digital Identity Guidelines states that common out-of-band Multi-factor Authentication (MFA) methods like SMS and Email need extra support to satisfy high assurance levels with One Time Passwords (OTP) in similar need.

If you use your own smart device, other than carrying a second phone, these out of band methods essentially become Single Factor Authentication. Current Techniques are based on a fixed secret- a hidden key; when hacked or, more likely, disclosed by an Insider, the security is fatally compromised.

The Insider threat is pernicious because of the human motivations of revenge, ideology and greed are persistent. If the User can easily deny their access then they feel they can get away with complicit arrangements. Of course, the larger the Organisation the more likelihood of Insider Attacks.

The remedy is to keep changing the key (so there is nothing for a malevolent Insider to disclose), but this is very difficult to implement because of seemingly intractable problems like indeterminacy, replay attack vulnerability and unavailability. DMS has solved these issues with their CASQUE SNR product that is used by UK Ministry of Defence and is certified at source code level by UK’s NCSC as suitable for secret. One of the supporting inventions has granted US and EU patents.

The technology is based on a Challenge-Response protocol with the User having a hand held secure Token that calculates the response to a challenge after the User enters their credentials. There are many different Token forms including Optical, USB Tokens, Contact and Contactless Smartcard and Surrogate Tokens. All have the same highest level Secure processor chips rated at EAL6. There are options for Client and Client-less architectures.

The CASQUE SNR integration with WSO2 provides universal High Grade Identity Assurance to a Cloud of Web Application Services. This means the User determines who can access their data resources on the Cloud even if these are distributed on diverse Cloud Platforms. Tokens can be completely refreshed (unlike existing OTP Tokens) allowing re-use so can offer Identity as a Service to Managed Service Providers.

WSO2 Identity Server is an open source, standards based architecture that provides Identity federation, SSO, Access control, Account Management, Identity provisioning and API security.

CASQUE SNR also has mutually developed and tested integrations with Pulse Secure and CISCO ASA Gateways for both Hardware and Virtual Appliance form.