California-based Confident Technologies has released a new two-factor authentication platform for mobile phone out-of band authentication.
The patent-pending product called Confident Multifactor Authentication offers a smart phone-based secure image-based second factor in the authentication process that is not connected to or stored on the device.
When users register with Web sites or online services, the application asks them to choose different categories of everyday objects they can easily remember, such as types of plants and animals.
Anytime the user needs to authenticate a transaction, the application generates a grid of random categories, some of which are the user’s chosen images. The user then taps on their chosen categories, enabling the authentication.
Because the process authenticates via an application, the secure images aren’t accessible to identity thieves. The grid of authentication images also changes with each use, preventing the risk of shoulder-surfing or theft through keystroke logging malware. Requiring users to memorize the second-factor authentication rather than storing it on the devices means that losing a mobile device doesn’t create vulnerabilities in the user’s identity.
Confident Multifactor Authentication is currently being trialled. Organizations that wish to take part in the trial may contact Confident Technologies for more information.




I suspect that we will see more and more cognitive authentication strategies emerge for several reasons:
But if we look beyond the authentication/security of the client-side session transaction, the randomness of images and grid location helps ensure that the server-side authentication repository is relatively secure…even if hacked. If done properly, there should not be username/password lists available.
Ric Hughey