Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates

Episode 79: Taking two-factor ID to the next level

Wednesday, July 13, 2011

Some may consider Kenneth Weiss the godfather of two-factor identification. The founder of Universal Secure Registry and developer of token-based authentication technology has since moved on to other security technology that uses voice biometrics and the mobile phone. The new system would identify a user by their voice, a PIN and a randomly generated number that would be attributed to him for specific uses upon the initial two-factor authentication. Weiss also calls out RSA for the SecurID data breach and resulting problems. Regarding ID’s Gina Jordan spoke with Weiss about his latest venture and the RSA SecurID breach.



iTunes

Aggregator

m4a

mp3

Older podcasts. [end] 

FFIEC supplementary recommendations not strong enough

Tuesday, July 12, 2011

Software security provider VASCO Data Security International says that the Federal Financial Institutions Examinations Council’s (FFIEC) 2011 supplement to the 2005 Internet Banking Environment Guidance doesn’t go far enough in Internet banking security requirements.

VASCO has felt this way since the original guidance, which it believes led banks to opt for cheap but unsafe security measures. “For VASCO, the FFIEC’s guidelines are a step in the right direction, but we believe that more is needed,” says Ken Hunt, Chairman & CEO of VASCO Data Security. 

UN Credit Union’s EMV program a success

Tuesday, July 12, 2011

Gemalto marked the first year since the launch of United Nations Federal Credit Union’s EMV credit cards with newly released results of the financial cooperative’s effectiveness study.

The credit union’s analyses demonstrated an increase in member demand, satisfaction and spend achieved during the period October 2010 to February 2011, compared to the previous year: 

Audio from June 29 IAB meeting online now

Monday, July 11, 2011

IAB AudioThe June meeting of the influential Government Smart Card Interagency Advisory Board (IAB) was recently held in Washington D.C. FIPS201.com was on hand to cover the event and has provided, as a service to the IAB and the smart card community, an audio recording of the presentations. Click on the link below to access a list of audio and accompanying PowerPoint slides (in pdf format).

Visit FIPS201.com to hear the presentations and view the slides. [end] 

BT launches stronger authentication services

Friday, July 8, 2011

To help UK businesses fight fraud and identity theft in high value or high risk transactions, BT has launched a new authentication service.

Called BT Managed Authentication, this service will supplement BT’s Managed Security Solutions product line. The service is designed for companies that have a large number of customers who log in to specific company applications through the Internet. 

Singapore stockbroker adds stronger authentication

Thursday, July 7, 2011

Singapore stockbroker DBS Vickers Securities has upgraded the security for its online trading platform to two-factor authentication.

The system uses a device that generates a time-sensitive PIN. Users must entire their IDs, login password and the 2FA PIN in order to gain access to the trading system. 

RSA develops FFIEC information portal

Wednesday, July 6, 2011

To help U.S. banks prepare for compliance with the Federal Financial Institutions Examination Council’s (FFIEC) June 28 release of “Supplemental Guidance on Internet Banking Authentication,” RSA has developed programs and an online resource portal.

The RSA FFIEC Resource Center contains information, industry expert opinions and case studies. It will be updated as the FFIEC makes more information available.