PassWear enhances mobile app security by simply taking a photo of your watch
It uses strong crypto and a wearable smartwatch to replace passwords or add a second security factor.
Currently running on iPhones and the Pebble smartwatch.
Strong Simple Wearable Authentication
Simple
It's easy! Simply take a photo of the code on the smartwatch and in seconds you're authenticated. No typing required.
View more
Strong
It's government-grade security: The combination of Bluetooth and the Visual comms channel is stronger than a Bluetooth only (SCR/Keyfob) solution.
View more
Multi-Factor
This can be used on its own as a replacement for passwords or alongside passwords and biometrics as an additional authentication factor.
View moreWho is this for?
Government workers
Use PassWear to replace complex passwords with a 64-character password they don't need to remember. This enhances both mobile security, usability and protects the organisation from external attacks that result from passwords being written down and left about.
FTSE 500 Companies
General councils and C-level executives use PassWear to protect access and authentication to sensitive documents - enabling them to work remotely, while ensuring paper copies do not fall into the wrong hands.
Banking
Shop front staff use PassWear to replace complex passwords on their iPads. Log-in is quick, easy and demonstrates our security and innovation drive when talking to customers.
Oil & Gas workers
Field workers who need to wear protective face gear and gloves, where fingerprint and eye/facial recognition is not suitable. Use PassWear to deliver simple, strong authentication, that doesn't require typing in complex passwords.
It's Wearable
Device level authentication has never looked so good.
No single purpose custom hardware required. Say goodbye to your fobs and smartcard readers. PassWear works on off the shelf wearables that your users own or would love to have.
Multifactor authentication devices require you to carry around a single purpose device that is normally only used for authentication to a single platform or portal. Users do not like carry these devices and see them as a burden.
PassWear is embodied into smartwatch and wearable technology, making it a desired and wanted accessory for your users. The added benefit that it provides simple strong authentication is transparent.
It's Simple
As easy as taking a photo
PassWear's unique provisioning and authentication model make it really easy to setup, use and maintain. Just point and click.
Initial keys are generated on the wearable itself, and only shown to the mobile across the optical medium. Bypassing electronic communications that could otherwise be intercepted, sniffed, or mimicked.
The unique method of establishing secure communications across the Bluetooth channel is as simple as taking a photo for the user. The rest of the complexity is taken care of by PassWear.
It's Strong
You can't touch this
Using the optical medium as one channel of passing information between the devices makes PassWear electronically untraceable by an attacker.
When the user brings the two devices together they are establishing an unbreakable level of trust. Want to show User, Watch, Phone -> Certificate Authority, Party A, Party B. The photograph can not be mimicked, therefore the user is assured that the device is the one they intend to authenticate with.
PassWear out the box is a 64 complex character password that rotates itself at configurable periods of time. What we refer to as the Authentication token.
PassWear uses secure open source cryptography libraries for all of its encryption, both on the watch and the mobile.
It's Configurable
Too strong for you? Dial it down a little
Apart from initial provisioning, PassWear does not need you to take a photo each time you authenticate. It can be configured on a timely or event basis as well.
Does taking a photograph of your watch seem like too much of a burden? You can configure PassWear to be a little more trusting with the Bluetooth communications and only require a photo for certain actions or at certain points during the day.
With this flexibility, security managers can tailor balanced mobile security policies to best serve their users and organisations specific needs.
It's not Bio
More secure than your fingers
PassWear can be recovered and reprovisioned when loss or theft occurs. It works if you're swimming, drinking or you've accidentally cut your thumb.
PassWear is not compromised. With only your wearable having known your base secret, you can be assured of forward secrecy.
Your bio data is already stored in multiple databases across multiple geographical governments and regions. Every time you enter most countries you are required to give away a piece of your bio signature.
With PassWear, if you are ever feeling nervous about having been compromised, simply reprovision yourself.
It'll grow on you
Future thinking
Using off the shelf wearable technology as its base, PassWear can grow with the times. Capabilities and features that do not exist now are simply and upgrade away tomorrow.
If you feel like your watch is no longer trendy enough for 2015, buy the latest model.
PassWear for Good
Mobbu designs and delivers effective and easy to use mobile solutions, used by governments and enterprises to accelerate communications and enhance security. Mobbu has over 10 years experience providing product, consulting and operational support services to UK government security and policing.
PassWear is simple, strong authentication. PassWear enhances mobile app security by simply taking a photo of your watch. It uses strong crypto and a wearable smartwatch to replace passwords or add a second security factor. It runs on iPhones and the Pebble smartwatch.