Solution features

The offline authentication solution consists of the following components:

• An offline authentication module to support offline authentication without exposing the authenticator secret keys on the client platform.

• OneSpan Authentication Suite Server SDK (software version).

The offline authentication module validates a one-time password (OTP) from a list of hashes. In case of successful validation, it releases an encryption key that can be used to decrypt a static secret such as the Windows password. It is secure against brute-force attacks.

The AS offline authentication solution supports event-based and time-based authenticators. The offline authentication module is available for Windows 32-bit and 64-bit platforms. It is presented as a static library (aal2off.lib) to link with C/C++ applications on the client machine.

Authentication Suite Server SDK is available for any server platform.

Only software versions of OneSpan Authentication Suite Server SDK support functionalities related to offline authentication (hash data block and state data block generation, state data block synchronization). The HSM versions of Authentication Suite Server SDK do not support offline authentication.