Using HP DigitalPass One Time Password protection - Technical White Paper

Introduction

Online identity theft has become a huge international business. In 2009, US citizens lost $560 Million due to internet

fraud

. One of the methods used by scammers and phishers is to obtain your user account and password and then login

to your financial accounts and steal your assets. A compromised password can also allow unauthorized access to online

merchants and social networking sites. HP DigitalPass One Time Password technology helps prevent access to your

assets by providing a second level of authentication that helps validate that the online transaction is originating from a

system that you own and not from a scammer somewhere else. Even if your One Time Password is stolen, the life span

of the password is so short it is highly unlikely that a scammer could use the password again.

What is HP DigitalPass?

HP DigitalPass is a new capability embedded in select HP Compaq Elite 8300 and HP Compaq Elite 8300 AiO desktops. It

is also available on select HP Compaq 8200 Elite, HP Compaq 8200 Elite AiO, HP Compaq 6200 Pro, HP Compaq 6200 Pro

AiO, HP TouchSmart 9300 Elite AiO, and HP rp5800 systems HP DigitalPass offers an elevated level of security and

protection for online transactions by securing the user’s online identity. It provides an automatically generated passcode

and helps protect against phishing and key grabbers. HP DigitalPass registers your PC with participating websites

through a simple user interface. Logging in to these participating websites requires successful traditional authentication

(username and password) with a secret one-time password (OTP) that can be supplied only by the registered PC, thus

limiting access to the authorized user on the registered PC. This feature is important, even if there are multiple users on

the same PC as the combination of usernames and passwords with the OTP would be unique.

HP DigitalPass is offered in conjunction with Intel’s Identity Protection Technology (IPT) and is only available on

platforms with the Intel

generation of Core

i7/i5/i3 processors (Table 1). As users access their favorite websites and

make online purchases or transactions, the user will authenticate to the website. During authentication, the OTP will be

supplied and login will be complete. HP DigitalPass enables this more secure protection at no additional cost to the user.

Table 1: Platforms supporting HP DigitalPass

System Supported CPU vPro required?

HP Compaq Elite 8300 2

Gen Intel Core I3/I5/I7 Yes

HP Compaq Elite 8300 AiO 2

Gen Intel Core I3/I5/I7 Yes

HP Compaq 8200 Elite 2

Gen Intel Core I3/I5/I7 No

HP Compaq 8200 Elite AiO 2

Gen Intel Core I3/I5/I7 No

HP Compaq 6200 Pro 2

Gen Intel Core I3/I5/I7 No

HP Compaq 6200 Pro AiO 2

Gen Intel Core I3/I5/I7 No

HP TouchSmart 9300 Elite AiO 2

Gen Intel Core I3/I5/I7 No

HP rp5800 2

Gen Intel Core I3/I5/I7 No

Source: Homeland Security Newswire, April 27, 2011.