No More Passwords, Finally a Solution
Take control of your passwords

No More Passwords, Finally a Solution

After working in the IT industry in a variety of roles over the past 20 years including records management, imaging, programme logic control, software development and consulting, I continued to encounter the same challenge of end-user passwords and access privileges.

Many people up and down the IT management chain called this a significant business problem and a lot of companies have tried different methods to try and solve the password issue over the years.

With the evolution of technology, the expansion of the digital footprint and the internet consuming our lives, it was time for a simple to use mass authentication solution to address the password challenge.

Finally, I have found a solution to the password challenge.

An Australian company, Token One tackles the password problem head-on when it comes to password control and management, using a one-time-pad (perfect cipher) as the cornerstone of its user is present assurance platform.

Token One is simple to use, easy to deploy, has a cost effective licensing model and is able to integrate with any mainstream applications including Office365, Salesforce, Amazon Web Services, Cisco and many, many more.

Something certainly for IT colleagues to further explore.





Steve Molnar

Delivering integrated IT systems and secure document management solutions to businesses – large and small.

7 年

Thanks Paul, keen to investigate

回复
Paul Waite

Technologist | Director | FIDO Alliance Member

7 年

Ramsay Smith, I have given you some time to respond to my questions, to support your claim about Token One and you have failed. This is what disturbs me most about sales people, that make unfounded claims against competitors, are unable to support their claims with evidence, and then profess to all, that the product they sell is better than the one suggested, or we are the only the company that can do this. Make a case with facts and stop the spin and BS.

回复
Ramsay Smith

Decouple Release from Deploy - Move Faster, and De-Risk Software

7 年

Ok, Token One is not immune to the mobile keylogger. If a keylogger records one successful login interaction then this is enough to derive the user's password. Only Cipherise from Forticode has solved this problem https://www.forticode.com

Paul Waite

Technologist | Director | FIDO Alliance Member

7 年

I agree Yaniv, that there is always a level of doubt, when claims are made. After reviewing the Token One solution in detail and using other factors like a biometric password, location as geo-identifier, and Token One (person is present) we are of the opinion that the total solution, has solid grounding. Token One has also recently been included in the NIST Cyber Security of Excellence (first Australian cyber company to do so) - with other notables like RSA and Splunk. https://nccoe.nist.gov/news/nccoe-selects-technology-vendors-collaborate-multifactor-authentication-e-commerce-project

回复
Yaniv Simsolo, CISSP

Enterprise Security Architect, KPMG NL

7 年

"Real ships rock..." [Frank Herbert]. Similarly, just using one-time pad does not guarantee that a "password solution" that is using a perfect cipher will be fully secured. With most security solutions the concept of "Real ships rock" is accurate enough. That said, many security vendors boast full security while reality is not exactly like that. Just based on experience, I employ extra caution whenever I am presented with a solution that uses terms such as: full, perfect, complete, unbreakable and hacker-proof.

要查看或添加评论,请登录

Paul Waite的更多文章

社区洞察

其他会员也浏览了