Confidential // Neoris 1 Confidential // Do Not Reproduce without prior written permission from Neoris

Authenware - Security as a Service

October 2010

Confidential // Neoris 2

Authenware - Security as a ServiceIndex

About Neoris

Authenware – Security as a Service

Introduction

Authentication behavior

Process Model

Architecture

Implementation Process

Integrations & Certifications

References

Confidential // Neoris 3

Who we are

Neoris is a global business and IT consulting firm. We establish long-term relationships with our clients, helping them improve performance throughout the different stages of their business. Our unique global delivery model, combined with cutting-edge IT services, allows us to innovate, build, deploy and operate business solutions that are both practical and visionary.

Fast Facts

Employees:

Founded:

Offices:

Headquarters:

Presence:

Over 3,000

2000

20

Miami, Florida USA

U.S., Latin America, Europe, Middle East, Africa

Confidential // Neoris 4

Where we come from

2nd IT Consulting in LATAM – IDC Ranking Premier Nearshore services for US 4th Largest SAP Partner in LATAM Started Operations in the Middle East Rapidly growing presence in Europe Acquired 15+ organizations Expanded throughout Latin America Spinoff technology arm of $21Bn CEMEX

2010

2000

Confidential // Neoris 5

Global Coverage

Bogota.Colombia Budapest.Hungary Buenos Aires.Argentina Madrid.Spain Monterrey.Mexico Sao Paulo.Brazil

Global PresenceSAP Centers Software Development CentersBudapest.Hungary Buenos Aires.Argentina Culiacan.Mexico Madrid.Spain Monterrey.Mexico Rosario.Argentina

Argentina (*)Australia Brazil (*)CanadaChile (*)Colombia (*) El Salvador

FranceGermanyGuatemalaHungary (*)Mexico (*)MoroccoNetherlands

OmanPeruPolandPortugalQatarSpain (*)Trinidad & Tobago

TurkeyUnited KingdomUnited Arab Emirates (*)USA (*)Venezuela

(*) Office locations

Confidential // Neoris 6

Our Vital Statistics

3000+

2000

2009

2000

2009

250+

Clients Consultants

US$300M+

2000

2009

2000

2009

600+

Projects Revenues

Confidential // Neoris 7

What we stand for

Unquestionable Ethics •

Commitment to our clients’ success •

Flexibility and agility with a purpose •

Teamwork spirit •

Respect for the individual and for diversity •

Accountability •

Confidential // Neoris 8

What we do

Innovate Build & Deploy Operate

Value Engineering Information Architecture

Process, People, TechnologyBusiness Process Design

ConfigureDevelop / BuildImplementStabilize to Operate

HostSupportEnhanceMeasureContinuous Improvement

We innovate by constantly converting new ideas into realities. Our cutting-edge services and solutions are the best in class. We are performance driven and invest in our vision to enhance shareholder value.

We build and deploy solutions by striving to make employees a part of our client’s team. This unique approach give us direct and unfiltered access to the business, not just technology. This is how we bring a different perspective to our employees and their learning curves. They not only execute; they experience the solutions from development to implementation.

A successful project delivery is just the first step of a long-term partnership with our clients. We have the expertise to operate the solutions that we deliver, ensuring incremental value to them. We understand our client’s needs and we provide continuous innovation with experienced resources at the highest service levels, beyond project completion.

The essence of our expertise defines what we do

Confidential // Neoris 9

Manufacturing ConsumerPackaged Goods Natural Resources Distribution & Logistics Retail

Technology &Telecommunications Financial Services Healthcare Public Sector Other

Industries we serve

Appliances Glass Motor Vehicles Plastics Rubber

Food Beverage Tobacco Cosmetics

Cement and Concrete Oil and Gas Utilities Metal and Mining Pulp and Paper

Cargo (LSPs) Freight & Distribution Ports and Airports Rail Transportation

Department Stores Specialty Retail Wholesale Office Equipment Pharmacies

Computer Hardware Office Equipment Telecom Semiconductors Media &

Entertainment

Consumer Banking Internet Banking Insurance Credit & Lending Corporate Banking

Pharmaceuticals Health Providers Hospitals Medical Devices Biotechnology

Local & Municipal Regulatory Public Education Public Services Safety and Police

Aerospace & Defense Agriculture Education Publishing Airlines

Confidential // Neoris 10

Recognitions by the analysts

“Neoris is one of the largest Nearshore companies in the IT Services space.” “We believe Nearshore capabilities are an important piece of the puzzle for Indian offshore vendors. Nearshore

pure plays like Neoris should continue to thrive in this environment.”

Best ranked Nearshore Outsourcing player from Latin America “One of the fastest growing IT vendors globally, Neoris, based in Miami serves the Latin American

region and is converting prospective business in the US and Europe with clients praising IT capabilities and transformation approaches.”

Best IT Service Provider in Latin America, Global Services 100 “Neoris stands out as one of the few strong alternatives to U.S. and India based vendors”

“Using Neoris for Nearshore delivery has some potential advantages for North American clients.” “The significant presence Neoris has in Spanish-speaking countries makes it unique in its Ibero-American presence.”

“IDC ranked Neoris as the second-largest IT consulting firm in Latin America, and the largest in Mexico.” “Neoris is Latin America's largest native-borne IT consultancy.”

“”Neoris is emerging as a Latin American contender.” “Neoris has strong technical implementation skills…and is clearly a good candidate for SAP implementation work”

“Neoris is one of the best SAP service providers” “Neoris ranks among the 25 top SAP service providers around the globe based on headcount”

Confidential // Neoris 11

AwardsSAP Awards

Strategic Reference Award ASUG Impact Award Innovative SAP Project Implementation New Solution Introduction Number of certified consultants in Latin America Strategic Implementation - SAP MII SAP Award of Excellence

IDC Latin America Semi-annual IT Services Tracker2nd Largest IT Consulting firm in Latin America2nd Largest Systems Integration firm in Latin

America1st IT Consulting firm in Mexico1st Systems Integration firm in Mexico 1st Custom Application Development firm in

Argentina

Brown-Wilson Black Book of OutsourcingBest Nearshore Outsourcing company from Latin

America “50 Best Managed Global Outsourcing Vendor”

Global Services 100Leader – South of the Border Top 10 Best Performing Infrastructure Providers

The IAOP Global Outsourcing 100Global 100 - Leaders CategoryTop 10 companies by Industry Focus: Oil & Gas Companies with most employees in Latin

America

Confidential // Neoris 12

Selected Client ListServing Local and Global World Class Customers

Confidential // Neoris 13

What makes us different

“We have a unique global approach to consulting: We create a practical engagement model while establishing a unique intimacy with our clients. We work hand in hand with

them, understand their business and excel at anticipating solutions that improve their results.

That is why our tagline is Practical Visionaries. That is what makes us different.”

Claudio Muruzábal - CEO

Confidential // Neoris 14

Business Consulting Technology Outsourcing

Services

Enterprise Value ServicesProcess Consulting ServicesPost Merger Integration

SAPOracleEnterprise ArchitectureSoftware Engineering

ServicesInformation Mgmt ServicesLearning Solution Services

Application Mgmt ServicesBPO ServicesInfrastructure Mgmt

ServicesSoftware as a Service

(SAAS)Software DevelopmentTesting ServicesContact Center Services

Confidential // Neoris 15

Authenware - Security as a ServiceIndex

About Neoris

Authenware – Security as a Service

Introduction

Authentication behavior

Process Model

Architecture

Implementation Process

Integrations & Certifications

References

Confidential // Neoris 16

Authenware - Security as a ServiceIntroduction

Authentication of individuals in a network, for access to internal corporate and external Internet, usually done using methods related to the ...

• TO KNOW: 92%Password, PIN, sequence of characters, ...

• TO KEEP: 7%Cards, Tokens, USB keys ...

• TO BE: 1%Biometrics

• The first two methods have in common that are not based on systems inherent to the individual, i.e., do not identify individuals, and therefore can reach be misused by others.

The third method works with the individual, with what we are, that is, traits and personal characteristics that identify us so unambiguous, and therefore can reliably authenticated as compared with Information Systems

Confidential // Neoris 17

Authenware - Security as a ServiceAuthentication behavior: computer security as a service is evolving ...

Security today… Authentication is the most critical element to

ensure the digital identity of authorized users to access certain services.

Digital identity theft of a person is one of the most serious problems today, and is a disincentive for business and Internet services are developed more intensively.

Authentication of individuals in the network, for access to internal corporate and external Internet, is often undertaken using one of the following items related to ...

TO KNOW: Password, PIN, sequence of characters, etc.

TO KEEP: Cards, Tokens, USB keys ... TO BE: Biometrics

A new concept of security… Authenware. The solution introduces a new

concept in the paradigm of identification (to know, to keep, to be): how to do.

Build and update a personal pattern each time you enter by keyboard specific data, such as username and password.

The internal pattern is equal to: String Typing cadence Environment variables Personal behavior variables.

The pattern is compared with that which exists as a centralized reference.

No additional hardware needed in the post authorization (card readers, biometric sensors, etc.). No need to install additional software on the station authorization (JavaScript). The pattern is generated dynamically adapting to the natural evolutionary changes of the user. The generation of behavioral patterns is transparent to the user. Designed as a network service.

Advantages

Confidential // Neoris 18

Authenware - Security as a ServiceAuthenware

Keystroke Dynamics as Solution Multi-Dimensional Algorithm What do you know? E.g., User-id +

Password, Passphrase How do you type? Keystroke Dynamics What do you do? E.g., hidden

behavior, use tab or click mouse Where are you? E.g., IP, time zone What do you have? E.g., OS version,

browser version When do you use it? E.g., frequency,

day, hour

As a complement to already deployed authentication systems (both username / password as on card access PIN, tokens, etc.)..

As a solution for access to protected resources (access by context). To complement electronic signature systems (based on Common Criteria PIN, i.e. DNIe). As an authentication service for managed security services.

Applications

WHAT IS IT? Keystroke Dynamics is the manner

and rhythm by which an individual types characters on a keyboard.

WHY IS IT USEFUL? The keystroke rhythms of a user

are measured to develop a unique biometric pattern of the user typing pattern for future authentication.

Confidential // Neoris 19

Authenware - Security as a ServiceAuthenware

Confidential // Neoris 20

Authenware - Security as a ServiceAuthenware - Architecture

Confidential // Neoris 21

Authenware - Security as a ServiceAuthenware - Architecture

Client Machine Application Server AuthenTest Server

Confidential // Neoris 22

Authenware - Implementation process

Six Steps to Implement

Install Authenware Server

Modify your pages or screen where the login

data are captured

Add your rules in your software for each

Authenware response type

Quality test (on testing environment)

Quality test (on production environment)

Monitor performance and tune it

Authenware - Security as a Service

Confidential // Neoris 23

Authenware - Security as a ServiceAuthenware - Integration

Citrix Terminal. Using Authenware as identity verification platform accessed via a virtual terminal CITRIX.

Available in Q1 2010.

Oracle Identity Management. Integrated with Adaptive Access Manager allows you to incorporate safety second and

third factor in Oracle management credentials system.

Available in Q2 2010.

Confidential // Neoris 24

Authenware - Security as a ServiceAuthenware - Certifications

Assessment and certification of IBG (International Biometric Group).

Evaluation INTECO (Spanish National Institute of Communication Technology - Ministry of

Industry, Trade and Tourism).

Common Criteria Certification (CCC EAL 2 in progress).

Evaluation by Gartner Group (underway).

Confidential // Neoris 25

Authenware - Security as a ServiceAuthenware - Advantages

In the workplace

No additional hardware needed for authorization of access (card readers, biometric

sensors, etc..), And therefore does not require maintenance.

It is not necessary to install additional software on the station authorization (JavaScript).

Authenware Server

The pattern is generated dynamically adapting to the natural evolutionary changes from

the user.

The generation of behavioral patterns is transparent to the user.

Do not store any information (except on own pattern).

Host / Security System

Designed as a network service.

Confidential // Neoris 26

Authenware - Security as a ServiceAuthenware - Service Scenarios: Security

Improved security:

As a new security model for authentication, protects aspects than other models do not address

or in part do it.

Allows securing broader access to a particular system or, in concrete, specific high-risk

transactions and maximum criticality without changing any of the general security of the

application.

It incorporates a central register of actions irrespective of the degree of integration of the applications on which it operates.

Confidential // Neoris 27

Authenware - Security as a ServiceAuthenware - Service Scenarios: Usability

Improved customer service:

Reducing the complexity (custody, storing and usage) of passwords, cards, tokens sequences, etc ...

and update and distribution chain.

Easily and naturally in use: With Authenware more "natural" is the performance of each person

generates greater confidence.

Eliminating the misuse of them.

By increasing the time for changing passwords, reducing

incidences.

Incorporating greater confidence in electronic transactions.

Confidential // Neoris 28

Authenware - Security as a ServiceAuthenware - Service Scenarios: Logistics Cost Savings

In scenarios with key authentication / password, can increase the length of time of use on

password with a consequent reduction of changes and their associated cost.

In settings with authentication tokens, cards coordinates, etc., Can reduce the criticality in

logistics management of those elements and even be replaced, representing a considerable

saving.

In scenarios with biometric authentication, you can replace capture devices needed for

verification of identity and reduce the associated logistics management.

It should be noted that the cost of the solution practically does not

increase when the number of users, in contrast to what occurs with

other systems.

Confidential // Neoris 29

Authenware - Security as a ServiceIndex

About Neoris

Authenware – Security as a Service

Introduction

Authentication behavior

Process Model

Architecture

Implementation Process

Integrations & Certifications

References

Confidential // Neoris 30

Authenware References

Major financial group.

Authentication portals for "Home Banking" (400,000 users).

Public Administration of Mexico.

Authentication customs systems (100,000 internal users).

Major financial group.

Authentication credit card system (2,000,000 users).

Telefónica Ingeniería de Seguridad (TIS).

Critical systems security event correlation (District C).

Ministry of Health and Social Policy.

Telework support systems.

Confidential // Neoris 31

Thanks