|
contents | business | |||||||
| Fronde Anywhere Sees Uptake of Its TwoSecure Platform Fronde Anywhere has reported significant uptake of its mobile two-factor authentication platform, TwoSecure. Since the product's launch in April 2007, TwoSecure has been deployed by organisations in a range of sectors. Customers include a tier one French bank; a major Australasian telecoms provider; a German financial Institution; m35 in the UK; and an electronic payments switch for verification of online debit payments. It is also currently being piloted by a district health board for verifying doctor identities when accessing patient records. The product line is available through Fronde Anywhere global partners Logica and CSC, and regional partner RSSS in South Africa. Many of the TwoSecure user organisations have implemented this solution as a more user-friendly and cost-effective replacement for hardware tokens for their identity authentication requirements. The TwoSecure product line generates one time passwords (OTPs) via a Java application stored on the mobile phone. It also includes an SMS module to enable delivery of OTPs to the phone via a text message. TwoSecure secures Internet banking transactions and login by eliminating the risk of third parties assuming the user's identity, while TwoSecure Enterprise gives employees a second level of authentication when they remotely access business networks and systems. By also preventing man-in-the-middle attacks, the platform mitigates against threats such as Trojan.Silentbanker, a Trojan horse that has the ability to steal confidential financial information by defeating traditional two-factor authentication measures. TwoSecure's transaction signing capability adds an additional layer of security to a transaction, and prohibits any third party to hijack a transaction, as the OTP used by the customer is useless for any other transaction other than the one intended. The solution, which can be configured to support incremental levels of security, has passed independent security audits, performance testing by IBM, and device testing by SQS. It can be offered on hosted software as a service basis or implemented direct. write your comments about the article :: © 2008 Computing News :: home page |