Booth No. A131-06
Company Introduction
SSenStone is an authentication security company that developed OTAC (One-Time Authentication Code), the world’s first one-way dynamic authentication technology. Powered by its proprietary technology that enables user and device identification and authentication without network connectivity, SSenStone provides a wide range of security solutions, including PLC authentication for OT and ICS environments, endpoint security, access control, and financial authentication. Backed by more than 300 global patents, SSenStone is building secure and convenient next-generation authentication systems for industrial and digital environments.
Main Products & Services
OTAC Trusted Access Gateway (TAG) is an OT security solution that delivers robust user authentication and access control at industrial endpoints without requiring modifications to existing PLCs or control systems.
TAG verifies user identities using OTAC, a one-time, unidirectional dynamic authentication code generated through a smartphone app or smart card. Access to critical control equipment—including PLCs, HMIs, RTUs, and DCSs—is granted only to authorized users. Because authentication works without an internet connection, TAG is ideally suited for air-gapped and network-segmented environments in industries such as energy, manufacturing, power generation, and water treatment.
Deployed as a gateway without replacing PLCs or modifying their firmware, TAG provides user-specific access permissions, real-time access control, centralized security policy management, and audit logging. By reducing the security risks associated with static passwords, it helps prevent unauthorized access and operational errors while enabling an endpoint-centric Zero Trust security architecture.
Key Features
- Seamless deployment without modifying existing PLCs or OT infrastructure
- Authentication in air-gapped and network-isolated environments
- Multi-factor authentication using one-time dynamic authentication codes
- Centralized management of user privileges and security policies
- Protection for critical OT assets, including PLCs, HMIs, RTUs, and DCSs
- User-identified access and authentication audit logs
- Support for compliance with IEC 62443, NERC CIP, NIS2, and the Cyber Resilience Act
TAG verifies user identities using OTAC, a one-time, unidirectional dynamic authentication code generated through a smartphone app or smart card. Access to critical control equipment—including PLCs, HMIs, RTUs, and DCSs—is granted only to authorized users. Because authentication works without an internet connection, TAG is ideally suited for air-gapped and network-segmented environments in industries such as energy, manufacturing, power generation, and water treatment.
Deployed as a gateway without replacing PLCs or modifying their firmware, TAG provides user-specific access permissions, real-time access control, centralized security policy management, and audit logging. By reducing the security risks associated with static passwords, it helps prevent unauthorized access and operational errors while enabling an endpoint-centric Zero Trust security architecture.
Key Features
- Seamless deployment without modifying existing PLCs or OT infrastructure
- Authentication in air-gapped and network-isolated environments
- Multi-factor authentication using one-time dynamic authentication codes
- Centralized management of user privileges and security policies
- Protection for critical OT assets, including PLCs, HMIs, RTUs, and DCSs
- User-identified access and authentication audit logs
- Support for compliance with IEC 62443, NERC CIP, NIS2, and the Cyber Resilience Act
Attachment
- SSenStone_ENG.pdf ( 653,120 bytes )
