What Are Digipass Secrets?
The security of OneSpan’s Digipass products relies on so-called Digipass secrets. These are cryptographic keys that are used to generate and verify one-time passwords and electronic signatures. The Digipass secrets are usually embedded in the client-side products when OneSpan delivers them to the customer. They are provided to the server-side via file formats, such as DPX and PSKC.
You can ensure that Digipass secrets of a certain order are retained by closing a Digipass Secrets Retention Contract for the defined order. You can choose between different storage and retention periods ranging from 2 to 5 years. If you do not order the Digipass Secret Retention service, OneSpan will by default destroy the Digipass secrets of an order 6 months after generation of the DPX or PSKC files.
Digipass Secret Retention Service
OneSpan offers a Secrets Retention Service for each order placed. This paid service entails that OneSpan will destroy the Digipass secrets of its customers after delivery of the order. Only if explicitly asked, will OneSpan store Digipass secrets. Once Digipass secrets of a certain order have been destroyed, they cannot be redelivered. The service currently applies to all Digipass hardware devices (excluding card readers, Digipass KEY PKI devices and Digipass Nano). The storage and retention service for OneSpan’s software devices will become available in 2013. The Digipass Secrets Retention Service is currently only offered to financial institutions. The service will be extended to all OneSpan customers in the future.
Renewal of the Retention Service Contract
When the Digipass Secrets Retention contract is about to expire, OneSpan will inform you 3 months and 1 month prior to the expiration of the contract. You then have the option to renew the contract should you wish to do so. Possible retention periods from which you can choose are the same as for a new contract. The new contract becomes effective upon termination of the previous contract.
To sign up for this service or to get pricing, please contact your OneSpan Sales Manager.