Security by Your Own Device Keypasco AB, May 2015

Keypasco was founded in 2010 by the founders of the company Todos, which was acquired by Gemalto in Todos has developed hardware tokens since 1987 for the e-banking market. Todos products are today still used by a large number of banks due to its good security. By 2010, 75 banks and 20 million devices had been delivered Our Previous Success Keypasco AB 2

Keypasco offers a Global network: Headquarter in Sweden Subsidiary in China Partners in China, Taiwan, Vietnam, Brazil, Russia and Turkey Pending partners in Japan, UAE, Poland, India, Malaysia, USA Today we have two live production customers; Gamania, and Wayi (online gaming), and 4 Banks are rolling out in June/July of The end-user base is 7.6M. Live evaluations and POC are today on-going with multiple financial and gaming companies in Russia, Poland, China, Vietnam, Brazil and Taiwan Keypasco founded2012 Keypasco Solution launched at RSA Conference Gamania goes live Wayi goes live E-Sun Bank + 3 banks Keypasco – the company Keypasco AB 3

2014 Keypasco was awarded the Product Innovation Leadership Award for Secure Authentication by Frost & Sullivan, which describes Keypasco as “a true pioneer of the 21 st century for mobile security”. “Recipients of this award represents the top ten per cent of their industry: the other ninety per cent just can’t keep up”. “Frost & Sullivan's independent analysis of the Secure Authentication market clearly shows that Keypasco is a game changer by developing a realistic solution that mitigates authentication spoofing while remaining practical to the user. “ An award-winning solution Official Press release: Frost & Sullivan Pressrelease & Award (21st July 2014) Keypasco AB 4

Source: Finansiell ID-Teknik BID AB 2014 When the user has a choice, the choice is Mobile Security BYOD Keypasco AB 5

Very few have good online security today, and those who have use expensive solutions (Hardware Tokens, PKI etc.). More and more move to Mobile and Cloud, but the security is falling behind! Our vision is to offer a software-based security solution for the Cloud, affordable for everyone! Security by Your Own Device! Our Vision Keypasco AB 6

2.Credit card fraud would not exist if your credit card can only be used where your are! 1.If the only way to access a Internet service is by using your devices (PC, tablet, mobile phone etc.); then none amongst the 10+ billion other devices on this planet can be used to access your Internet service. This is what Keypasco authentication solution is all about! Your username and password only works from your devices! Some simple ideas… Keypasco AB 7

1)The user login with the same login process as before. 2)The Keypasco client sends the Device Authentication and Geolocation to the Keypasco server. 3)If the user credentials is correct (only the ICP has this information, the user is anonymous in our system), and if Keypasco matches if the attempt is done from the right device and at the right place = then the login is OK. 4)If anything is a mismatch or risky - a push is sent to the end users mobile device to verify the new geolocation and the device authentication. Internet Username Password Device FP Geo-location UserID OK Bank, eCommerce Etc. End user Keypasco Keypasco AB 8 How does it work?

Multi-factor Solution User Credentials Geographical location (geolocationID) User equipment Device Authentication (FP) Software Risk Management Proximity Devices Keypasco AB 9

1Device Authentication and two-channel authentication: Utilizes the user’s own devices as unique authentication devices through a two channel structure. Patent approved in: Taiwan, Korea, Japan Patent pending in: US, EU, India, Brazil, China 2Dynamic URL: Authentication structure supporting Dynamic and flexible URL for multiple ICP to multiple IDP (ID Provider) through same Client/app Patent approved in: Taiwan Patent pending in: China, US, Japan, Korea, EU, India, Brazil 3Proximity: User’s own devices (wearable computing) in close proximity to each other as a unique identity to enhance security Patent pending in: Taiwan, China, US, Japan, Korea, EU, India, Brazil 4Central stored PKI solution: Only decrypted private key distributed to mobile app that is protected by device authentication. Patent is under registration in: US, Taiwan, China, Japan, Korea, EU, India, Brazil. Keypasco AB 10 Our Patents

PhishingMan in the MiddleMan in the BrowserMalicious Software Username & Password Not Safe At the start of the Internet One Time Password Not Safe 2002 Challenge/Response SafeNot Safe 2005 Public Key Infrastructure Safe Not Safe* 2013 Keypasco Product Solution Safe Not yet happened Estimated Year for Security Breach Authentication Solutions Online security threats * Depending on how the infrastructure is setup – usually an expensive solution. Keypasco AB 11 Security threats

Advantages with Keypasco Keypasco AB 12 For Internet Content Providers: Secure - continuous improvement Flexible - several levels of security Cost-efficient; fixed annual fee per active user – NO extra cost, such as SMS, logistics, education, replacements, helpdesk, storage, hardware upgrades, etc. Easy for mass roll out – no additional hardware Easy to integrate User is anonymous - Keypasco don’t handle sensitive user information For the end customers/users: No change in user behaviour Proactive improvement of security Easy enrolment Excellent user experience Secure BYOD No limit of associated devices We support all major devices and platforms

Security, Usability & Cost UserID + Password OTP HW tokens Keypasco Solution Keypasco AB 13

Thank you! Please don’t hesitate to contact us with any questions. Keypasco Keypasco AB 14