Archive for October, 2011

Securing your future with Out of Band Two Factor Authentication

out-of-band two-factor authenticationFor decades two-factor authentication has been lurking in the shadows. Most people never even realized they were performing the process of authenticating with two factors to access almost any secure information over the web. Although as 2012 approaches, we are starting to see this technology adopted by many businesses and it is more people understand the security behind two factor authentications and the importance of the technology. This could possibly be because there are so many attacks performed every day on every one.

It seems as though as time goes on more people and their information are being breached. Some of you may even know of friends or family that have fallen victim to identity theft attacks. Many people have had their emails and passwords to sites compromised and not even know it. There are also many instances where there are more advanced security breaches such as credit and banking fraud. As we become more accustomed to these scenarios we also become more educated and solutions against these types of attacks become more advanced.

Of course remedying the easier attacks comes down to keeping your computer cleaned of malicious software as well as changing your password regularly. However combating the latter involves utilizing security solutions such as two-factor authentication. Although this form of authentication is more secure than using only a single factor there are certain parts of the process that can be more secure based on the solution vendor.

Out-of-band two factor authentication solutions offer an added layer of security when authenticating. They require the user to receive a one-time password or pin on a separate network than the one they are trying to access. If a bank account holder were trying to access their online banking account from a different IP address than they usually do the bank may require this type of authentication by sending a pin to the client’s mobile phone through SMS text message. This would be considered an out-of-band two factor authentication.

Although during out-of-band authentication there is still a chance for attackers to steal information. Zero footprint authentication allows for a safe and secure experience while authentication through an out-of-band device. Zero footprint security refers to the information that is left behind on the device used to relay the one time password. During the authentication process the client receives their OTP but all traces of the process are hidden with no data left behind.

We will start to see changes to the most basic of two-factor authentications such as an ATM card and pin code. The future of computerized banking authentication will probably rely on an out-of-band solution since attackers are becoming so savvy to security. Scanners that can be placed within an ATM can easily steal your ATM card information as well as capture your pin code making this older two-factor authentication process less secure.

The future of two-factor authentication is promising as it can be applied to many security applications. With more secure forms of authenticating being implemented, it is becoming much safer to prevent fraudulent identity attacks. Even though we can never truly be 100% safe from identity theft and fraudulent activity we can become more secure making it harder for hackers to siphon information and steal personal records.

Could A One Time Password Already Be Securing Your Industry?

one time password informationTechnology affects every aspect of our life, especially our security. Luckily there is always new technology being created to help keep our lives more secure. As our lives become digitized it seems that more and more sensitive information is being added to databases connected to networks or accessible from the web. This raises a red flag to anyone who has been affected by identity theft or fraud. With all of our personal data being stored in so many places it would seem that we more vulnerable to malicious attacks than ever. However this is not true, as technology begins to change the way we interact and share information it is also changing the way we secure our data.

Two- factor authentication utilizing a one-time password is technology that has been around for decades although the need for such security has risen lately. With many industries going paperless and wireless it opens the gate for hackers to siphon private data. Industries such as education, financial services and healthcare are all in need of higher security since they deal with important information that must be kept confidential.

OTP in Education

The education industry has been utilizing electronic records for a long time to manage students. These records are stored on a computer that is connected to a network for administrative use, the very same network that students are accessing from their laptops, tablets and smartphones.

Even on a password secured network these records are vulnerable since you do not need to be extremely computer savvy to use a key logger. Any student could simple attach a device to their teachers computer or install malicious software that operates discreetly behind the scenes to log keystrokes. Potentially stealing their teacher’s login credentials and gaining access to confidential information.

Any agency collecting, maintaining and storing sensitive information is responsible for managing that data responsibly as stated in “The Family Educational Rights and Privacy Act” also known as FERPA. With security being their government appointed responsibility and malicious attacks becoming easier to perform, many education agencies are securing their confidential information with two-factor authentication through a one-time password.

OTP for Financial Services

Identity fraud is most apparent in the financial services industry for a good reason, it deals directly with money. Just like everything technology has affected the way we bank with online banking being offered by almost every bank. However this poses a threat to client identities. To keep account holders secure a one-time password is used to keep online banking customers safe by authenticating a user when they log in from different IP addresses. Two-factor authentication is also used to identify an account holder at almost every point of transaction through a bank card and PIN.

OTP in Healthcare

The healthcare industry is facing many changes in the future from regulations demanding increased security of patient’s confidential information. With more sensitive data being readily available over the internet for physicians the need to secure that information is extremely critical. Authorization to access a patient’s medical record is crucial and a one-time password provides that security by identifying the physician, issuing the OTP and allowing a single sign on. Even on mobile devices such as laptops and tablets, zero footprint security can allow access to records without leaving any data on the device.

Transmitting data securely is the future of security in almost every industry. Info is power and with almost every industry moving over to wireless interaction between tablets, laptops and smartphones hackers are using technology against us to gain power. Securing that information through two-factor authentication and one-time password services is the future of technology in order to protect the same users it was put in place to help.