Token2 fourni différentes solutions de sécurité, telles que les jetons matériels, une application mobile, un serveur TOTPRadius et une interface de programmation applicative en nuage (Cloud API) Token2, un service d’authentification hébergé à deux facteurs conçu pour protéger principalement les applications web (exemple : l’espace membre d’un site internet de support CMS).
Token2 est le fournisseur privilégié de jetons matériels pour un certain nombre de compagnies, telles que Microsoft , Gouvernement fédéral des États-Unis, l’Université LeTourneau (Texas) , Citrix et autres.
Le projet en lui-même est issu de nombreux projets universitaires et les idées principales derrière le projet sont de sources académiques et sont publiés dans différentes revues académiques réputées telles qu’ITU, IEEE, l’Université de Derby, l’Université de Genève et autres.
TOKEN2 Multifactor authentication products and services (short name TOKEN2 MFA) is a group of companies providing various security solutions, such as hardware tokens, security keys, mobile applications, TOTPRadius server and other solutions in the area of multifactor authentication. Token2 is headquartered in Geneva, Switzerland
Token2 used to be a part of a multifactor authentication research project at the University of Geneva, which has led to a spin-off startup company back in 2013.
TOKEN2 is a registered trademark of the TOKEN2 Multifactor authentication company (registered by Geneva Cantonal Trade Register as CHE-218.895.438 ) at the Swiss Federal Institute of Intellectual Property. Registration number № 743850.
Token2 is listed by Microsoft as a recommended TOTP hardware token supplier for Azure MFA.
RFC6238 compliance confirmed by CertX, the first swiss accredited certification body for product certification in the scope of industrial cybersecurity and functional safety.
Token2 TOTPRadius provides the RADIUS RFC-2865 for TOTP RFC-6238 based authentication. With TOTPRadius you can integrate a large variety of third-party products and systems with multi-factor authentication. A number of enterprise products and services like VPNs (including Meraki CVPN and Fortinet VPN), Citrix XenApp/XenDesktop, VMWare View, and many others provide support for RADIUS servers to validate the second factor of user authentications.
TOTPRadius features many innovative approaches to multifactor authentication, such as self-service enrollment and FIDO security keys-based L2TP VPN access using VPN Portal. To ensure the security of the VPN Portal is at the highest level, we have contracted an independent security company, SySS GmbH , which has conducted the penetration testing and produced a security certificate available below. The TOTPRadius VPN Portal component is currently labeled as "Certified Website - Approved Security" by SySS Gmbh.
TOKEN2 Switzerland operates its own online shop to sell the whole range of TOKEN2 products globally. For clients located in the member states of the European Union, we recommend placing orders via our partner company in France.
Our order workflow is described in full details here
For some of our products, we are considered a systems integrator rather than a manufacturer, as our products may contain different components, such as batteries, NFC chips or plastic/metallic cases, from various countries. According to Article 60(2) UCC, when two or more countries are involved in the manufacture of the product, it shall be deemed to originate in the country or territory where they underwent their last, substantial, economically justified processing or working. In this context, we declare the country of the origin as Switzerland where allowed (i.e. in customs declaration). This is not, however, enough to declare the product as Swiss-made yet as Switzerland has a stricter rule on this: at least 60% of the components must be produced in Switzerland. Currently, having more than 60% of the components produced in Switzerland would make the final price of the product several times higher. We are still working on moving the production to Switzerland while keeping the costs at an affordable level. Nevertheless, be assured that all the production phases are under the thorough control of our specialists, and the components supplied by our partners undergo regular quality checks. The software, firmware, and sensitive data (such as seeds) handling operations are done in Switzerland. Furthermore, our business model is based not just on selling or reselling (in some cases) hardware, but more on providing full high quality technical support at all stages, starting from choosing the most suitable and cost-effective device model to its activation and configuration with any compatible authentication system used by the client.
Detailed information about the security surrounding the shared secret key hashes (seeds) of our hardware tokens and about how this data is stored and operated is available here
In addition to generic standards-based devices such as classic TOTP tokens and FIDO security keys that are not unique, of course, many devices we produce are unique and innovative and never existed before. Devices such as tokens for EVV systems, TOTP tokens with time sync and multiprofile TOTP hardware tokens are unique and fully based on our inventions and research papers - there are proofs and evidences showing that they appeared first in our publications. Due to the limitations of the Swiss legislation, these inventions are not patentable (Article 1 of the Swiss Patent Act), therefore we do not have any mechanism of protecting from replicas of our inventions, nor we have resources or willingness to do so. However, it is clear that the suppliers of such replicas are obviously not in a position to provide the same level of support for these devices.