HP-NonStop Security
Secure your HP-NonStop system with security software and privileged system products and tools from
GreenHouse Software & Consulting
$AS (Authentication Server)
Overview
Beside the standard authentication service on GUARDIAN systems (which is based on static passwords), the authentication service $AS offers an additional method:
- Challenge/Response and
- TimeToken
Authentication, based on Atalla and Vasco Challenge/Response Devices.
It is intended to be used by customer applications, such as PATHWAY applications, as well as GHS products.
Features:
- The $AS system is monitored by a PATHMON process pair, due to availability reasons.
ANY running PATHMON can be used. - It runs as a server class: The PATHMON in charge of $AS is responsible for starting/re-starting the service.
- The $AS process can be reached through PATHSEND, or directly with OPEN/WRITEREAD/CLOSE procedures.
- $AS process supports the following messages:
- Generate a random number
- Check a Challenge/Response number pair
- Check a TimeToken
- Authentication Request (initialization)
- Authentication (finalization)
- Return statistical information
- INITACR, a block mode program to initialize Atalla (or compatible) Challenge/Response Token.
- ASCOM, (Authentication Server Command Interpreter) allowing the management of the $AS system.
Additional $AS features
- After three consecutive failed checks, the requesting process is delayed for a configurable time. This prevents an exhaustive search for a valid Challenge/Response Number Pair.
- $AS is developed and compiled on an S-Series system, running G06.
This design allows the $AS to become the central authentication service on a Tandem system, even on a network of Tandem systems!
Product Information
Download product information of $AS (Authentication Server)
