AEROX SOLUTION

2-Factor Authentication

AEROX Pass

The New Standard for 2FA

Winning I’s contactless biometric 2FA solution ensures that
internal systems are accessible only through the registered user’s biometric data.
By overcoming the vulnerabilities of traditional 2-factor authentication,
it provides an optimized solution for robust access control and enhanced security

AEROX Pass secures internal access with contactless
biometric-based secondary authentication.

AEROX Pass Process

  • 1st Auth: ID/PW Login

    PC Client

  • Push Alert

    Mobile App

  • 2nd Auth: Contactless Biometrics

    Mobile App

The Final Gateway to Internal System Security

The evolution from traditional SMS, E-MAIL, OTP authentication to current FIDO and AEROX-based authentication, enhancing security

Security, Cost Efficiency, Convenience,
and Reliability—All in One Smartphone

  • Managing each task-specific authentication means A diagram of a distributed authentication architecture in which separate A, B, and C authentication methods are individually applied to business systems, VPN, webmail, and servers.
  • Unified Management with AEROX Pass Architecture Diagram of Integrated Authentication Applied to Work Systems, VPN, Webmail, and Servers Centered on AEROX Pass

AEROX Pass features

  • E-MAIL

    • Outdated Methods with No Room for Improvement
    • Risks of Account Hacking & Password Loss
    • Cumbersome Re-authentication Processes
    • Security Gaps due to Account Sharing
    • High Costs for VPN 2nd Factor Auth

  • SMS

    • Security Risks Based on Device Ownership.
    • Sharable Auth SMS (Vulnerable to Interception)
    • Poor UX: Friction Between Verification and Auth
    • Restricted to Devices Under User's Name Only
    • High Costs for VPN 2nd Factor Auth

  • OTP

    • Sharable & Vulnerable Codes
    • Stressful Time Limits for Code Refresh
    • Tedious App Launching & Typing
    • High User Fatigue & Friction

  • FIDO

    • Lack of Non-Repudiation
    • Weak Security: Vulnerable to Multiple Fingerprint Registrations
    • Inconvenient Re-registration on Device Change
    • Total Service Interruption on Device Damage or Loss
    • Risky On-Device Biometric Storage
    • Manufacturer Disclaimer: No Liability for Security Breaches

  • AEROX Pass

    • Superior Non-Repudiation
    • Zero Sharing, Zero Proxy Auth
    • No Risk of Loss or Theft
    • Instant Re-authentication
    • No Re-registration or Renewal Required
    • Next-Level Security & Convenience
AEROX Pass FIDO OTP SMS E-MAIL
Authentication Subject User (Fingerprint, Palmprint) Device (Smartphone) Authentication Subject Phone Number Account
Biometric
Authentication
Server-side Biometric Data Storage
AOS & iOS Compatibility Authentication
Prevention of Account Sharing and Proxy Authentication
Prevention of Duplicate Registration (Validity Check)

AEROX Pass Key Benefits

All-in-One HW & SW Package
  • Biometric Authentication Server
  • Push Relay Server
  • PC Login Client
  • Mobile Biometric Authentication App
Robust Security
  • Anti-Spoofing Technology Provided
  • Biometric Data Security and Screen Capture Prevention
  • Fingerprint Spoofing Detection (LFD/PAD)
  • Immune to Keyboard Logger and Input Device Hacking
User-Centric Biometric Authentication
  • Consistent Biometric Experience Across AOS & iOS
  • Seamless Auth Recovery on Different Devices (Loss/Damage)
  • Safe and Hygienic via Rear Camera Scanning
  • High Recognition Rate Regardless of Skin Conditions (Sweat/Dryness)
Certified Recognition Performance
  • Designated as an Innovative R&D Product (2022)
  • KISA (Korea Internet & Security Agency) Performance Test Certification (2024)
  • Passed iBeta PAD Testing Level 1 (2024)
    (NIST-Accredited Lab, Presentation Attack Detection Test)
  • KISA Vulnerability Assessment (2017)