Just approve & you’re logged in

Tech info

• One Touch

• Assignments

  One Touch displays and signs “assignments” used as a second factor on your device.

• Technical info

  One Touch signs and verifies the “assignments” using asymmetric keys based upon the public key infrastructure provided by the Phenix ID server.

  Private key is created on the device and can never be moved to other device!

• Push notifications

  One Touch also uses push notifications to notify the user and simplify the interaction. Notification is sent to all activated devices.

• Anonymous Assignments (QR-code login)

  This enables a higher security posture since no username or password is exposed!

  See video below:

   

• QR-code login video

• Customization

  Assignments can be customized to a desired behavior using elements like text, images and buttons.

• Platforms

  iOS and Android.

• Enrollment

  Easy for users to do enrollment.
  – Login to PhenixID Self Service
  – Give device a friendly name. Users can have multiple devices
  – Scan QR-code to activate

• Protect

  Protect key with Pin code, Password or Fingerprint

• 
• 
• 
• 
• 

• FAQ

  Which OS and versions are supported?
  – Android version 4.1 (Api Level 16)
  – iOS version 10.0

  Which device component dependencies exist?
  – Camera to scan QR-code
  – Push notifications (not mandatory but strongly recommended)

  Where are the keys generated?
  The keys are generated in the OneTouch app.

  Which algorithms are used?
  Currently RSA. Client and protocol is prepared for other algorithms.

  Which key lengths are supported?
  Key length is defined in server-side configuration. Recommended minimum value is 2048 bits. Please be aware of the fact that key-generation execution can be time consuming if the value is very high.

  Which interface is used between the app and the Certificate Authority?
  Proprietary HTTP-based protocol. JSON data format.

  Is it possible to use a 3rd party CA?
  Yes.

  What mechanisms can be used to unlock key?
  PIN or fingerprint (TouchID iOS)

  How do you protect the keystore on a rooted / jailbroken device?
  Our recommendation is to not use rooted/jailbroken devices.

  Is it possible to force strong authentication when enrolling for One Touch?
  Yes

  Is it possible to use PhenixID One Touch without using PhenixID Authentication Service as the backend server?
  No, PhenixID Authentication Service is mandatory. However, PhenixID Authentication Services provides API’s to clients that would like to use PhenixID OneTouch.