Tokenless Two Factor Authentication Ensures Secure Remote Access

By: Sam A. Brown
Submitted: 2008-03-26 11:18:57
Print this article | Tell a friend | For publisher | Social Bookmarking
Rating:
 

Network security requires a solid offensive and defensive strategy that addresses the volatile and dynamic state of internet threats, man-in-the-middle attacks and the ever evolving list of vulnerabilities facing organizations today. The old notion of 'you are only as strong as your weakest link', rings true now more than ever.

As such, two factor authentication has become not just a method of security, but truly a requirement for a multi-layered approach to security. Secure remote access that is legitimate without being cumbersome to network users or administrators is a necessity among viable and mobile workforces.

Tokenless two factor authentication solutions are an improvement on the traditional choices, which eliminate the vulnerability associated with lost or stolen tokens or other PKI authentication issues subject to attack by viruses and other malicious programs. In addition, tokenless solutions greatly eliminates any cost barriers that previously existed, especially among large enterprises.

Ensuring that the tokenless two factor authentication solution selected is reliable and easy to deploy is also essential. Many security products claim that they are easy and effective, but often times the infrastructure is so awkward and unmanageable in large networks. It's one thing if a security product is easy for a network admin to navigate and operate, but it should also be one that requires very little end-user education in order to truly work and be used as its intended. As security can be extremely expensive, especially for large organizations, tokenless solutions not only address the usability issue, but the cost factor as well. Tokens are very costly and are still subject to be lost, damaged, stolen or loaned to outsiders.

With tokenless two factor authentication solutions, an end-user logs in to a secure authentication server to register a password. At that point they are then given a one time password through an alternative medium, such as text message, email or phone, where they are required to answer a series of security questions. Once the user has successfully completed this process, they are authenticated with a certificate granting them VPN access.

Typically the components involve something you know, questions that only you know the answer to and something you have. When leveraging out-of-band registration another layer is added, requiring that the user have access to the outside medium, (their cell phone, email, etc).

Tokenless two factor authentication is just that, a security solution that requires more than one thing to authenticate a user and grant network and web-application access without an expensive and vulnerable token hindering the security process. The beauty of tokenless two factor authentication is the reduced expense. The sheer cost of supplying and replacing users with tokens can deter even the most security minded organizations, it just simply isn't feasible on a large scale. The biggest problem associated with tokens is you have to have the physical token in order to be granted access. Many users are so paranoid about losing or not being able to find their token when they need it that they carry the token with their laptop, some even adhere it directly to the pc. Now, not only is the individual laptop subject to unwanted access is found in the wrong hands, but the entire organization's network is at risk too.

With tokenless two factor authentication, these risks and extensive costs are removed, while the level of security an organization experiences benefits from out-of-band registration authentication.

As an avid technology lover, Sam Brown follows tech movements within network security solutions, including two factor authentication, tokenless and strong SSL VPN authentication solutions.

Article source: Expert Articles

Most Recent Articles in Security category

  • CyberSecurity: One Rogue Program That May Not Increase Your Security - By: Wayne Davis
    What is a rogue antivirus program? What does it do? There are a lot of questions surrounding these programs, and it is essential you have the answers you need. How do you know if you have a rogue program, like CyberSecurity, installed in your system? Find your answers here so you can better protect your computer.
  • Malware Defender 2009: Discover What's Hidden In Your System - By: Wayne Davis
    Everyone wants to protect their computer and data, but no one needs the aggravation of dealing with a rogue antivirus program. These use tactics such as flooding your system with pop-ups and false scan results in order to encourage you to buy their full software. Unfortunately, this software is ineffective and expensive. Learn how to recognize these programs so you can keep your computer in top running shape.
  • Doctor, Doctor, What's Ailing Me? It Might Be Malware Doctor! - By: Wayne Davis
    Lots of people are worried about computer security today, but there are several programs out there that suggest they can provide the security you need, yet aren't able to live up to their claims. Malware Doctor is one of those programs, and if you find it is installed on your computer, your best bet is delete it as soon as possible.
  • How to protect your PC against Malware - By: Wayne Davis
    Almost as long as people have been using the internet, they've encountered malware problems. Malware is the combination of the words 'malicious' and 'software,' and in most cases, it is able to enter a user's computer even without their knowledge or consent. Unfortunately, it can have quite a few consequences on your computer, so there are several things you may want to do to protect your PC against Malware.
  • How To Protect Your PC Against Rogue Antispyware - By: Wayne Davis
    An increasingly common problem, rogue antispyware programs use a computer user's vulnerabilities and fear of hackers gaining access to their computer to sell their products. They claim to offer protection when in reality their software has entered your computer at the very moment you thought you were being protected. The word "spyware" automatically brings visions of espionage and intrigue to mind, so it strikes a measure of fear with good reason. There are always those unscrupulous types of people who are forever trying to dig their way into your informational database to "spy" on your activities and steal your valuable data. It would only be reasonable to assume that "anti" spyware often completely necessary. Unfortunately, because of rogue antispyware programs, this isn't always true.
  • How to Protect your PC against Hackers - By: Wayne Davis
    Within the world of computing, there are those who study systems, networks, and programming extensively to further the field of computer science. Unfortunately, there are those who study those same areas to take advantage of other computer users. Dubbed 'hackers,' these individuals can create problem programs, take control of networks, and cause all sorts of difficulties for users. Fortunately, there are a number of things you can do to protect you PC against hackers.
  • Who Can Be Trusted with Your Internet Privacy? - By: Tino Bruno
    Most Internet users know that protecting their Internet privacy is the most important key to safe browsing. While most users can agree on the subject, they still find it difficult to judge which companies or products are genuinely there to protect them and which are in it for themselves. It is easy for an average surfer to be tricked into thinking that a company is trying to protect them, but instead has ulterior motives.
  • What to Know About ISPs - By: Tino Bruno
    ISPs offer advanced security and data storage features to give users more features than just a gateway to the Internet. While Internet Service Providers try to go above and beyond the bare minimum, potential customers must do their homework before picking an ISP.
  • The Privacy Risks of Social Networking - By: Tino Bruno
    Social networking sites made a distant world become an intimate community. It is easier than ever to rekindle an old friendship or find a friend from work via their MySpace page, but most people fail to see just how many dangers lurk behind a public profile.
  • 3 Reasons Why Corporate Messenger Software is Safer than Free Messenger - By: Nikolai Fokin
    What's the best solution in working environments, free messengers or corporate messenger software? This article argues in favor of corporate messengers, with an emphasis on security aspects.