Corillian Introduces "Intelligent Authentication"
Corillian has announced the integration of a strong authentication solution into its online banking applications in direct response to the recent Federal Financial Institutions Examination Council's (FFIEC) guidance. The solution will enable Corillian customers to provide a strong, multi-layer authentication solution enterprise-wide by year-end 2006. Corillian calls its patent-pending security solution "Intelligent Authentication".
Intelligent Authentication incorporates a multi-layered approach to authenticate online banking users. Moving beyond the two-factor or multifactor authentication solutions available in the market today, the multi-layered approach provides a stronger form of authentication without compromising the online banking experience for end users. In addition to a user name and password, Intelligent Authentication leverages multiple patterns of online banking behavior and attributes of the online banking user to determine when it is necessary to block or challenge suspicious visitors. This multi-layered authentication approach is transparent to the end user and provides a user-friendly approach, while ensuring the visitor to a Web site is a legitimate user.
Used in combination with a site's existing online authentication methods, Intelligent Authentication strengthens a Web site's security measures with additional layers of protection, and provides multiple modes of authentication, including out-of-band options, complying with the FFIEC strong authentication guidance completely, as confirmed in a recent meeting with the FDIC.
Intelligent Authentication employs a behavioral approach to authentication by building a history of "access signatures" for individual users. This is accomplished by collecting and validating information about each user's computer and method of Web site access without collecting personally identifiable information or requiring participation of the end user in the data collection process. An electronic access signature is created by combining a number of key identification points, such as IP address, Internet service provider, PC and browser settings, time of day and geographic location. It is a zero footprint authentication solution that does not require client hardware or software, is not dependent on the existence of any special marker or cookie on the user's PC, and does not require interrogation of the user's PC via downloaded software.





Add your comment... (note that all comments are reviewed before they're published)