FAQ

  1. What is SecurPAP and why do I need it?
  2. How much does SecurPAP cost?
  3. How do I start using SecurPAP?
  4. What is the primary identifier of my ID in SecurPAP
  5. I’ve forgotten my password. What do I do?
  6. I’ve lost my CueCard and/or my token. What do I do?
  7. What is the purpose of the Securiry questions?
  8. I am trying to request a CueCard but I’ve forgotten the answer to my Security Question. What do I do?
  9. I’ve forgotten my SecurPAP ID. What do I do?
  10. Why do I need to access my email account in order to change my security questions?
  11. How are some sophisticated users using SecurPAP?

 

Question What is SecurPAP and why do I need it?
Answer SecurPAP protects your online identity from being hacked or stolen by using One-Time Password (OTP). Each time you login to a SecurPAP-enabled service, you use your token to generate an OTP as the password. The OTP is discarded upon use, making it useless to any eavesdroppers. Click here to find out more about the benefits of SecurPAP.
 

Question How much does SecurPAP cost?
Answer SecurPAP is free service for our invited users. The public can also enjoy a 3-month, free trial-use of SecurPAP and the PKI-based digital signing cloud services, SecurDS offered by iASPEC.
 

Question How do I start using SecurPAP?
Answer You can start using SecurPAP by registering an account first. Once you have registered, you will receive a CueCard which contains 40 One-Time Passwords. Optionally for more advanced user, you can also download and activate a software token on your iOS/Android/Windows Phone device.
 

Question What is the primary identifier of my ID in SecurPAP?
Answer SecurPAP relies on the email address that you supply during the registration process as your primary identifier. Through this email address, SecurPAP will send you confirmation messages for various services and the CueCard that you have requested.
 

Question I’ve forgotten my password. What do I do?
Answer SecurPAP relies on One-Time Password (OTP) to verify your identity. You do not have to remember a static password. You use the passwords provided in the CueCard or those generated from the software tokens for accessing SecurPAP and those services that are associated through the OpenID standard.
 

Question I’ve lost my CueCard and/or my token. What do I do?
Answer You can request a new CueCard or activate a new token through the Membership Services functions in this website. Once you receive your new CueCard or start using your new token, your old ones will be revoked and become unusable.

Before you download and activate your new token, you can optionally deactivate it through the “Deactivate Token” function provided in the Member Services section of this website. This way, you will have more time to download new tokens into your client device without the worry that others may illegally use the device that you have lost to generate OTP and to access your accounts. Tokens are lock-protected by a static password of your own choosing. In practice, the use of a lost device to generate OTP for a userid unknown to the illegal user is a highly unlikely scenario. Anyhow, we provide this Deactivate Token function to fully protect the security of your identity in SecurPAP.
 

Question What is the purpose of the security questions?
Answer For each user profile, there are four security questions that can be customized by the user as a secondary defense in the authentication of this user. Users can design their own questions corresponding to answers that are not obvious to others.
 

Question I am trying to request a CueCard but I’ve forgotten the answer to my Security Question. What do I do?
Answer If you still have your token with you, you can change your Security Question via your profile settings. Login to your profile, click ‘Change Security Question/Answer’ and follow the instructions. This scenario is unlikely as you have to forget the answers to all four security questions that you have previously chosen.
 

Question I’ve forgotten my SecurPAP ID. What do I do?
Answer Your SecurPAP ID (the email address you have chosen) identifies you to SecurPAP service. If you have forgotten your email, you can register again or email us for assistance.
 

Question Why do I need to access my email account in order to change my security questions?
Answer It is an additional security measure to prevent any unauthorized modification to your security questions, a notification message is therefore sent to your registered email box. Through a link embedded in this message, you can then allow to access and change your security questions.
 

Question How are some sophisticated users using SecurPAP?
Answer Some sophisticated users have chosen SecurPAP as an independent third party service to strengthen the security of your online identity. For example: a user can create a special email account that is dedicated for SecurPAP use. Based on the standards of OpenID, SecurPAP will generate an encrypted “OpenID” for this user. This OpenID can then be used by the user in establishing association with other OpenID enabled website accounts that this user owns. Consequently, these associated OpenID enabled websites have no knowledge of the true userid of this user in the SecurPAP account. They only know the encrypted form of the OpenID that is generated specifically for this SecurPAP user. At the same time, SecurPAP has no knowledge of userid that this user is using in all these associated websites. This isolation of userid secrets and use of OTP authentication technology have provided many sophisticated users unprecedented online security.