Story image

Sydney authentication provider to work with US National Cybersecurity Center of Excellence

23 Aug 17

Sydney-based cybersecurity firm TokenOne is now the first Australian company to be selected for a consortium project for the US National Cybersecurity Center of Excellence (NCCoE), alongside enterprise heavyweights such as RSA and CA Technologies.

The Multifactor Authentication (MFA) for e-Commerce project will put transaction security in the spotlight, particularly for those in retail and e-commerce industries in the US. The aim is to steer discussion away from passwords and to alternatives such as multifactor authentication.

Callsign, CA Technologies, Rivetz, RSA, Splunk, TokenOne, and Yubico are all collaborators in the project. The consortium will also produce standards-based solutions and recommendations for those in retail and ecommerce as to how to conduct secure business.

“Consumers, retailers, payment processors, banks, and card issuers are all impacted by fraud. Part of e-commerce fraud reduction includes an increased level of assurance in purchaser or user identity,” comments NCCoE’s Sarah Kinling.

“Retailers recognize that customers could be put off by the complexity that multifactor authentication mechanisms may add to the purchasing checkout and post transaction processes,” Kinling continues.

The project will consider multifactor authentication in terms of risk calculations, transaction details, web session monitoring and device identification, which can all determine that fraud may be happening.

“Multiple forms of multifactor authenticators, such as FIDO, out-of-band, and one-time-password devices will be considered to provide retailers and their customers a diverse set of implementation options. All products incorporated into the reference design will be standards-based commercially available and open source products,” Kinling explains.

TokenOne’s technology allows businesses, customers and individuals to access services through a unique PIN that is visible to nobody else, including the service that is being accessed. No algorithms are involved.

Users can verify their real-world credentials and identity, use their device as a token and then create a secret PIN. This authentication method works with more than 2500 supported sires and services, including Google Apps, Zendesk, Cisco, AWS, Adobe Document Cloud, Salesforce and Marketo.

 “TokenOne is a 'Zero Knowledge Password Proof'. The TokenOne user knows their PIN but never enters it, or reveals it to anyone, not even to the service the user is accessing,” a statement says on the company’s website.

TokenOne plans to expand worldwide and says the NCCoE project is a huge milestone.

The company also offers a partner program for value added resellers, referral partners, system integrators and ISVs and distributors.

The program provides dedicated channel support, accelerated time to market training and certification, increased ongoing revenues and a dedicated partner portal.

TokenOne is backed by investors such as Singtel Innov8. Retired FBI assistant director Charles Archer sits on the company’s advisory board.

JASK prepares for global rollout of their AI-powered ASOC platform
The JASK ASOC platform automates alert investigations, supposedly freeing the SOC analyst to do what machines can’t. 
Pitfalls to avoid when configuring cloud firewalls
Flexibility and granularity of security controls is good but can still represent a risk for new cloud adopters that don’t recognise some of the configuration pitfalls.
Securing hotel technology to protect customer information
Network security risks increase exponentially as hotels look to incorporate newer technologies to support a range of IoT devices, including smart door locks.
Why total visibility is the key to zero trust
Over time, the basic zero trust model has evolved and matured into what Forrester calls the Zero Trust eXtended (ZTX) Ecosystem.
Gartner names Proofpoint Leader in enterprise information archiving
The report provides a detailed overview of the enterprise information archiving market and evaluates vendors based on completeness of vision and ability to execute.
WatchGuard appoints new channel distributors in A/NZ
The appointments will enable WatchGuard to expand its regional channel reseller footprint.
Tensions on the rise after Huawei CFO arrest
“Recently our corporate CFO, Meng Wanzhou, was provisionally detained by the Canadian authorities on behalf of the United States of America."
Palo Alto Networks integrates RedLock and VM-Series with AWS Security Hub
AWS Security Hub is designed to provide users with a comprehensive view of their high-priority security alerts and compliance status.