1/2009
11
E-Banking with Greater Security:
The Swiss Security Token (CLX.Sentinel™)
from CREALOGIX Ensures
Unsurpassed Online Security
The CLX.Sentinel™, a USB smart token, is easy to use and is compatible with the e-banking
solutions of all banks. Just plug it in and perform e-banking more securely!
Potential threats have risen to
dangerous levels
Firewalls and anti-virus software cannot
pro­vide adequate protection against some
of today’s Internet threats such as Trojans.
These threats tunnel into both the PC and
the browser and are able to bypass authen­
tication controls. The “man in the PC” can
manipulate the content seen in the browser
window and can also change payment
orders on-the-fly.
Reactive processes such as anomaly recog­
nition or (more elaborately) confirmations
via a separate channel can help to defend
against such interceptive attacks. However,
a Trojan can also monitor the display and
send information on assets to unlawful
third parties. Therefore, there is need for
more sophisticated protective measures.
The CLX.Sentinel™ is a USB smart token,
featuring a specially developed security
application and a “hardened browser” that
locks intruders out. The CLX.Sentinel™
stops payments from being manipulated and
prevents Trojans from snooping infor­
mation displayed on the screen. With
its CLX.Sentinel™ solution, CREALOGIX
makes it possible to guard against many
kinds of Internet security threats while still
allowing e-banking services to be used in
the usual way.
A secure software solution integrated with
a USB token
As soon as the CLX.Sentinel™ is plugged
into the USB port of the PC, the hardened
browser starts running automatically and
the user can connect to e-banking services
as usual. The token operates on a “zero
footprint” principle, i.e. it is ready for
immediate use with no need to install any
additional software drivers and it leaves no
trace on the PC after its use. The “hardened
browser” does not permit screen captures
and excludes extensions such as plug-ins,
Java applets, Active-X, and Browser Helper
Objects (BHOs). External access to the
Document Object Model (DOM) of pages
displayed in the browser is also prevented.
The browser employs only onboard crypto­
graphic resources and the program compo­
nents (executables, configuration files, etc.)
are further secured by encryption. As an
additional security feature, digitally signed
updates can be received online, making it
possible to upgrade the onboard software
in response to new threats or technical
advances.
The CLX.Sentinel™ represents the result
of a successful cooperation between
CREALOGIX and specialist partners. The
token hardware was developed by G&D.
The security application (patent pending),
including the “hardened browser” as the
core element, was developed by EISST Ltd.
in close cooperation with CREALOGIX.
EISST has comprehensive experience in the
areas of information management, Internet
security, and software architecture. The
resulting product combines the expertise
of all three companies and provides an
unrivaled level of e-banking security.
The security aspects of the CLX.Sentinel™
were tested and assessed by the Swiss
security experts Compass Security AG, an
established provider of penetration testing
and ethical hacking services. Their report
confirms the high standard of security that
is provided: “To the best of its knowledge,
Compass is not aware to this date of
alternative solutions and products which
can match the range and strength of
the CLX.Sentinel™ protection mechanisms
implemented to safeguard Internet-based
e-banking transactions.”
Thomas Avedik, CEO of CREALOGIX
E-Banking Solutions AG, remarks: “With
the CLX.Sentinel™, we are confident
that we have taken a major step towards
achieving our ambitious goal of the highest
security with the easiest usability. Banks
and e-banking users can once again place
trust in “their” online banking services.”
New Business smart!
Company Profile
CREALOGIX E-Banking Solutions AG is
specialized in the development of web-
based software for the financial sector
with a focus on the creation of end-to-end
e-banking systems for retail and private
banks.
The CLX.E-Banking software suite, made
by CREALOGIX, is the most comprehensive
e-banking platform in Switzerland with
standard interfaces to leading core banking
and processing platforms (Avaloq, Apsys,
BOSS, OTMS, SAP). The solution covers
account and depot information, all domes­
tic and foreign payment transactions, and
online share trading. The private banking
offering is rounded off with additional spe­
cialized functions and graphical evaluations
for asset and risk analysis as well as external
portfolio managers.
CREALOGIX is launching CLX.Sentinel™,
a highly innovative product which meets
the high-level security requirements of
online banking.
CREALOGIX E-Banking Solutions AG
be­longs to the CREALOGIX Group. The
CREALOGIX Group is a leading provid­
er of solutions for e-business and ERP
(Enterprise Resource Planning) in Switzer­
land, Germany, and Austria. Shares of
CREALOGIX Holding AG (CLXN) are listed
on the SWX Swiss Exchange. ❑
CLX.Sentinel™ is a registered trademark of
CREALOGIX
For further information, please contact:
>>> Monica Riera Willius
Giesecke & Devrient, Germany
Phone: +49 89 4119-22 08
monica.rierawillius@gi-de.com