View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
October 25, 2004

VeriSign submits OATH to IETF, wins partner support

VeriSign Inc will announce that it has submitted part of its Open Authentication Reference Architecture, which it calls OATH, to the Internet Engineering Task Force for discussion as a possible one-time password standard.

By CBR Staff Writer

VP and general manager of security services Judy Lin said that OATH submitted the one-time password generation algorithm, currently only supported in the authentication tokens VeriSign sells via its OEM deal with Aladdin Knowledge Systems Inc.

OATH was introduced in February to coincide with VeriSign’s entry into the token market. The company is hoping pushing a standards based offering will help it take market share from RSA Security Inc, the market leader.

RSA’s SecurID tokens use a proprietary time-based algorithm, whereas VeriSign’s use a sequence-based algorithm. Tokens increase logon security because they require you to be in possession of the token as well as a remembered password.

Additionally, VeriSign will announce today, that America Online Inc and US Bank are to use VeriSign token systems in some of their services, and that IBM Corp is to support them in its Tivoli access control systems, Lin said.

US Bank is the first major reference customer for Unified Authentication, a service it announced a month ago, which enables companies to run various kinds of authentication, including two-factor tokens and digital certificates, on the same platform.

Lin said that US Bank is using the hosted version of UA, rather than the premises-based offering that many large enterprises were expected to take. The service will be deployed to authenticate corporate banking customers, she said.

VeriSign has also signed a deal to work with AOL that initially means AOL will support a VeriSign child-safety initiative that allows children to sign into chat rooms using a token that identifies them as a kid.

Content from our partners
Unlocking growth through hybrid cloud: 5 key takeaways
How businesses can safeguard themselves on the cyber frontline
How hackers’ tactics are evolving in an increasingly complex landscape

AOL announced a month ago that RSA will provide the optional strong authentication for the AOL service proper, with an optional feature AOL calls PassCode, but Lin said AOL has agreed to investigate also using VeriSign tokens in that part of the service.

IBM Tivoli software will also now be bundled with some VeriSign modules that enable UA, if purchased separately, to be deployed alongside Tivoli out of the box, Lin said.

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how New Statesman Media Group may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.
THANK YOU