New Type of Authentication

Cyber Secure, Inc. recently announced NRUAS, a new type of remote-user authentication that it says does not rely on traditional passwords, tokens or biometrics for remote access to a computer system. The company refers to it as a "two-factor plus strong authentication," because it uses two types of authentication tied into existing telephone networks and a company's server.

To use the system, companies must either have the NRUAS technology on its server or share a NRUAS server with other companies. To use the system, a caller dials a number from any phone. If the phone is a pre-registered cell phone, an automated voice prompts for keypad entry of a new type of PIN called DTMF, which is communicated as a tone, rather than as data. If the caller's phone is not a registered cell phone, the NRUAS system prompts for entry of a telephone number as an identification code and a 4 digit PIN. The caller then hangs up and the system calls them back on that telephone number, asks for the PIN, and gives them a new temporary, one-time password and a time limit for that password.

The whole transaction takes about 10 to 15 seconds.

Copyright © 2005 Bankers' Hotline. Originally appeared in Bankers' Hotline, Vol. 15, No. 8, 8/05