Defcon Authenticator - Jun/Jul '03

Defcon Authenticator

I am a serious gadget junkie. Whether it’s a personal digital assistant, the latest cell phone or TiVo, I absolutely must have the newest and coolest electronic toys. Honestly, if someone were to come out with a battery-operated pencil, I would probably look past its relative non-utility and simply ask what accessories were available or whether it comes in a Bluetooth version.

So, I had serious doubts about my ability to be objective about the Defcon Authenticator from Targus. After all, I can’t tell you how many times I have watched “Alias” on TV and wished I had my very own fingerprint scanner so I would be prepared if terrorists tried to hack into my laptop.

In the real world I would also be prepared against any sort of attack, whether it was a firm employee or a laptop-nabbing thief. With thousands of laptops stolen every year, any lawyer with sensitive information on his or her laptop must have some form of security to prevent intrusion.

Furthermore, if you must have a security system, you might as well have a cool one, right? Well, the coolness factor of this thing is off the charts. Whenever you need to enter a password, you simply place your finger on the scanner, and within seconds, you are authenticated.

The Defcon Authenticator comes in two versions — Universal Serial Bus and Personal Computer Memory Card International Association card.

The USB version is about the size of a Zippo lighter and has two USB connectors located on the scanner. The PCMCIA version hides away until needed, with a postage stamp-sized pop-out scanner.

Aside from the imminently cool hardware, the real core of the Authenticator is the SecureSuite software that runs in the background. Using SecureSuite, you create a profile for each user who will be allowed to access the system. Each user then provides a standard password and three separate readings of the finger of their choice. I found this part of the setup process to be a little finicky, sometimes requiring several attempts for each of the three readings. Happily, though, I didn’t run into the same problem when actually using the software.

I do have one bit of advice. I would suggest taking at least one of the readings while standing, and one while sitting. The software puts together a composite of the three fingerprints, and I found the software’s reliability improves greatly when you provide your print from different angles.

Once all the users are set up, the administrator can assign privileges to each user. The software includes standard privilege configurations for full and minimal access levels. Or, you can customize each user’s access privileges with restrictions on access to applications, directories or individual files.

Also, the software lapses into screen saver mode after a user-defined period of inactivity, and if you have logged out, it requires re-authentication before resuming work.

When an unauthorized user attempts to use a restricted resource, the SecureSuite software interrupts the access and informs the user they are restricted.

The one feature I feel is the most useful is also the one that would be practically unworkable without the Authenticator in place. Whenever an authorized user accesses a restricted resource, the system reprompts for authentication. In a purely password-driven environment, any reasonably safe password is going to prove so time consuming as to be annoying. This is especially true when someone needs to access a protected resource frequently.

However, to use the Authenticator, all you have to do is place your finger over the device and wait a second or two while it resolves your fingerprint. It’s fast, accurate and cool enough that I don’t feel bothered by the brief delay.

Now, I mentioned that I enjoy watching spy shows. And, no self-respecting spy show aficionado could use a device such as this without trying to crack its code. I tried several techniques of varying sophistication, and I could not fool the device. Because the device works in part by detecting the electrical conductivity of your finger (like a laptop touchpad), the Authenticator won’t be fooled by plastic or rubber. In fact, the folks at Targus assured me the device will authenticate nothing short of the real thing.

I have to give Targus kudos for the Authenticator. It’s the first security system I have installed that actually had people lining up waiting for their turn to try it. Even better, it’s the first time I have password protected anything without having to worry about someone either picking a bad password, or forgetting a good one.

Still, this device isn’t for everyone. If your laptop rarely leaves the office and contains no sensitive information, you could probably save yourself the time and trouble. But for road warriors or anyone with a multi-user, multi-access system, I would rate this little bugger as a must have.

Targus Inc.
(714) 765-5555

www.targus.com

Price: $119.99 for USB Hub version; $199.99 for PCMCIA Card Version; $179.99 for PCMCIA Card Version with customer’s own security software.

Windows 98/Me/2000/XP

Reviewed by David Hiersekorn, a legal researcher and brief writer based in
Orange County, Calif. He can be reached at hiersekorn@
sbcglobal.net.

Jun/Jul '03 Issue

PROS
It’s probably the fastest and easiest security verification device imaginable.

CONS
It can be finicky on set up.

VERDICT
If you must have security (and you must), the Defcon Authenticator is just about the easiest way to go.