SentryCom Announces Release of Comprehensive Solution for Authentication in Internet Banking.HAIFA, Israel -- On October 12th, 2005 the US Federal Financial Institutions Examination Council The Federal Financial Institutions Examination Council, or FFIEC, is a formal interagency body of the United States government empowered to prescribe uniform principles, standards, and report forms for the federal examination of financial institutions by the Board of (FFIEC FFIEC Federal Financial Institutions Examination Council ) issued guidance for authentication (1) Verifying the integrity of a transmitted message. See message integrity, e-mail authentication and MAC. (2) Verifying the identity of a user logging into a network. in the Internet banking environment. Financial institutions are expected to achieve compliance by year-end 2006. Financial institutions offering Internet-based products and services should have reliable and secure methods to authenticate their customers. The level of authentication used by the financial institution should be appropriate to the risks associated with those products and services. Financial institutions should conduct a risk assessment to identify the types and levels of risk associated with their Internet banking applications. Where risk assessments indicate that the use of single-factor authentication is inadequate, financial institutions should implement multifactor authentication Using two or more forms of identification to authenticate a user. Single factor authentication, which is commonly used, employs a unique username and password combination. For more security, multifactor authentication adds at least one more form, such as a physical token or biometrics. , layered security Layered security is a new term used by information protection and online security vendors that describes the practice of leveraging several different point security solutions to protect the digital identities and information of consumer, enterprise or government environments. , or other controls reasonably calculated to mitigate those risks. The agencies consider single-factor authentication, as the only control mechanism, to be inadequate in the case of high-risk transactions involving access to customer information or the movement of funds to other parties. Following US FFIEC guidance on Authentication in an Internet Banking - we are proud to announce the availability of SentryCom's comprehensive solution for Authentication in Internet Banking. It represents Scalable, Ubiquitous, Secure and Cost-Effective Online Banking Solution. This solution complies with and exceeds the requirements as set up by this guidance. Today's customer convenience demands that the solution must be ubiquitous, namely that the user may access his/her account not only from his own PC using SentryCom's VoiceShield(R) , but from other computers as well. SentryCom's MobilVoice(TM) allows secure access from any computer using person's mobile phone. The security requirements of information-only access differ from the security requirements of 3rd party transaction. SentryCom is capable of providing scalable security solutions adequate for the job: fast and convenient login and highly secure online transaction. SentryCom's VoiceShield(R) and MobilVoice(TM) solves not only today's security problems such as phishing, pharming pharming (fär`mĭng), the use of genetically altered livestock, such as cows, goats, pigs, and chickens, to produce medically useful products. and keystroke logging Keystroke logging (often called keylogging) is a diagnostic tool used in software development that captures the user's keystrokes. It can be useful to determine sources of error in computer systems and is sometimes used to measure employee productivity on certain clerical , but the problems that will occur in the near future, such as man-in-the-middle attack See replay attack. , Trojan and "sting". And finally: VoiceShield(R) and MobilVoice(TM) are software-only solutions. This has tremendous economic advantage given the scale of the problem. For implementation of our solution - please see : http://www.sentry-com.co.il/VoiceShield_implementation.pdf For online demo of our solution - please see : http://www.sentry-com.co.il/VoiceShield_implementation.html |
|
Printer friendly
Cite/link
Email
Feedback
Reader Opinion