Overview
Authentisec is designed to provide a flexible framework, which allows you to select the content and security information most applicable to your business, and to integrate authentication and, where applicable, redemption.

Authentisec and VBT’s
Key to the design of Authentisec is the concept of generating a value based token (VBT) or a data string that can be output to a data carrier of your choice e.g. a Data Matrix 2-D barcode or RFID tag.

Fig 1. Data Matrix & RFID Tag

A VBT is a mechanism that allows a unique entity to be created, printed (or delivered via other media or channels) and subsequently authenticated. All VBTs have a unique identity, the ability to store data and can be secured cryptographically to prevent their content & structure being maliciously amended. For example, a VBT generated for a discount coupon can contain a unique token number, details about the product and the offer that the coupon can be for, and a message authentication code (MAC) used to identify if a token has been altered.

Authentisec Process

• VBT’s are created/updated with the appropriate security policy, format, data carrier i.e. data matrix or RFID as specified for the application, they can then be delivered via any of the supported delivery channels.
• VBT’s can be read via a scanner/reader and the contents verified and/or redeemed via a webservice, or API call to the application.
• VBT’s can be read via a scanner/reader and the contents or status verified against the authentication database and then redeemed if required.
• VBT’s can be authenticated multiple times - redemption or expiration will depend on the rules set up by you. For example, single authentication and redemption at a point of entry to a venue or check-in gate or it may be valid for multiple redemptions such as in a supply chain lifecycle.

First Ondemand Authentication and Redemption System

Authentisec Key Features and Business Benefits
Authentisec is architected and designed to allow you to choose the most appropriate implementation to suit your business needs. It provides:

• Flexible token data structure and security enabling you to store information in the token or in the database with the level of security that you require.
• Real time authentication and redemption to prevent fraud, you can be confident that this is a genuine token and has not been tampered with or previously redeemed.
• Configurable auditing to report on access, token creation, authentication and redemption to provide a full audit trail of transactions
• Integration into your existing systems and processes via standard API’s
• Built on Oracle’s 10g database and Fusion Middleware, Authentisec leverages the resilience, availability, manageability, performance and scalability of the Oracle platform.

Next Steps
For more information, talk to your First Ondemand Sales Representative or contact First Ondemand.