SAINTlogin allows users to log-in to a web site or to a private network (VPN) without using passwords and/or users-id.
After pressing a button on the login page, the user is only requested to dial a phone number on his Cell-Phone, used just to identify the caller. The call is at zero-cost since the system will hang up after the first ring.
Magically, after dialling the number, if user has been recognized, a private session will be established and access to the requested pages will be granted.
User's can register to a service just sending am SMS text message containing a use-once password that is given by the service provider after subscription is accepted.
SAINTlogin is a simple and effective solution to the password sharing problem for companies or individuals who publish their on line services with reserved granting rights for their users.
THE PROBLEM:
On-line services are often deployed using subscriptions, users receive a
userid/password to access the web site online. This practice leads, obviously,
to undesired access from unauthorized people, obviously webmasters and online
publishers do not appreciate it at all.
WHICH IS THE RIGHT SOLUTION TO SOLVE THIS PROBLEM?
Rotating passwords?
It is not so easy to manage and users won't appreciate much the fact of
frequent password change.
Certificates?
Certificates are simple files that could also be shared, and don't grant access
from other pcs than the one on which the certificate is installed.
Hardware smart-cards or tokens (i.e. usb)?
They imply using hardware and are expensive for the publisher.
BUT here is...a new... inexpensive solution...