SITEPRO-SA

iKey 1000/1032

Secure User Authentication

Hardware iKey 1000 Details

PDF’s Brochures

_Hardware iKey 1000 Details

The iKey 1000 token consists of a Microprocessor with a USB controller and memory all within a device small enough to store on your key chain. The iKey 1000 Series provides highly reliable storage capabilities as shown below.

Internally the key is formed by a circuit printed within a housing with connector USB in an end. This housing covers the microcontroller and the memory who mount on the circuit.

The criptographic key iKey 1000 USB includes a serial number for each device and is programmed before delivering it to the customers.

One other such sensitive operation is initialization of PKI functionality on the iKey 1000 token. In the Windows version, it is a function of the Security Officer to decide whether to dedicate some of the overall iKey 1000 memory for exclusive use by PKI functionality embodied in the iKey 1000 series software libraries.

When enabled, the PKI libraries divide the dedicated memory into two areas. One area is for public storage where digital certificates, public keys, cookies and other unprotected data can be stored. The second storage area is for private storage of shared secrets and private keys. This private area has authenticated secure access and the data is held in encrypted form.

The storage within the iKey 1000 token is organized into directories and files. Access to files can be controlled through the use of the PIN-based access control security functions. The iKey 1000 security system provides for two levels; the end-user and the Enterprise Security Officer. An end-user can be authorized to perform sensitive functions in the iKey 1000 via PIN or pass phrase authentication. A Security Officer (SO) may also be authenticated to the token with a separate PIN or pass phrase to perform sensitive operations, such as initializing an End-user’s PIN.