Introducing...

The overall goal of the IdentiPHY suite of products is to...

• Reduce the mean-time-to-detection of unauthorized device introduction to seconds, or less;
• Be resilient to Medium Access Control (MAC) address spoofing attacks;
• Require no credentials (username/password, digital certificate);
• Operate 100% transparently to monitored devices; and
• Remain non-intrusive, i.e. no software agents or network performance impact.

To that end, we've been working on the first IdentiPHY prototype for a while now and are finally ready to do a bit more of an introduction to the world.  So, here is IdentiPHY:Wired.  This initial prototype device is intended to be bolted onto an existing network to demonstrate the IdentiPHY physical layer device authentication concept.  The prototype can passively protect 12 ports (12 in / 12 out) and provide authentication information to other network security components, e.g. Network Access Control (NAC), Software Defined Network (SDN) control plane, port security, etc.

The figure above shows an IdentiPHY:Wired sensor connected to 12 edge devices (left) passing through to a network switch (right).  The sensor passively taps the TX pins coming from the edge devices and passes that data through a patent pending sampling, processing, fingerprinting, and authentication process shown in the green "Authentication" block.  Authentication decisions can then be made part of the overall decision making process as to the authenticity of a connected device.

Where are we going with this?  We want to integrate directly into network infrastructure to make IdentiPHY:Wired deployment as simple as possible for the end user.

Any questions?  Want to see a demo?  Email us at [email protected].