Resources for Federal Financial Institutions Examination Council (FFIEC)

RSA puts SecurID into card form factor

www.securityinfowatch.com

The concept of RSA SecurID's system is that a user and an access authenticator (such as a financial institution controlling access to its accounts) share a seemingly randomly generated number that can be added to a password or entered as a separate field. The concept is that even if someone had access to or stolen a person's username and password, they'd still need the random number provided by RSA to access an account or access to a PC/network.

RSA has been known for delivering this random number from a synchronized token, and the number typically is set to change about every 30 seconds. Essentially the system provides two factor authentication: Something you know (the username and password) and something you have (the token).

View the Resource

Share or bookmarklet this web page at: