The Globe and Mail

Go to the Globe and Mail homepage

Jump to main navigationJump to main content

Press release from PR Newswire

Made in IBM Labs: Two-Factor Security for Mobile Transactions

Friday, October 18, 2013

Made in IBM Labs: Two-Factor Security for Mobile Transactions

00:01 EDT Friday, October 18, 2013

ZURICH, Oct. 18, 2013 /PRNewswire/ -- IBM (NYSE: IBM) scientists have developed a new mobile authentication security technology based on the radio standard known as near-field communication (NFC). The technology provides an extra layer of security when using an NFC-enabled device and a contactless smartcard to conduct mobile transactions, including online banking and digital signatures when accessing a corporate Intranet or private cloud.

(Logo: http://photos.prnewswire.com/prnh/20090416/IBMLOGO)

Flickr Photos: http://www.flickr.com/photos/ibm_research_zurich/sets/72157635584238585/

Video: http://www.youtube.com/watch?v=3sT6D1IdBH8

According to a recent report by ABI Research, the number of NFC devices in use will exceed 500 million in 2014. This statistic and the fact that 1 billion mobile phone users will use their devices for banking purposes by 2017* make for an increasingly opportune target for hackers.

To address these challenges, IBM scientists in Zurich, also known for inventing an operating system used to power and secure hundreds of millions of smartcards, have developed an additional layer, a so-called two-factor authentication, for securing mobile transactions.

Today many consumers use two-factor authentication from a computer, for example, when they are asked for both a password and a verification code sent by short message service (SMS). IBM scientists are applying the same concept using a personal identification number (PIN) and a contactless smartcard. The contactless smartcard could be a bank-issued ATM card or an employer-issued identity badge.

"Our two-factor authentication technology based on the Advanced Encryption Standard provides a robust security solution with no learning curve," said Diego Ortiz-Yepes, a mobile security scientist at IBM Research.

How it worksThe user simply holds the contactless smartcard next to the NFC reader of the mobile device and after keying in their PIN, a one-time code would be generated by the card and sent to the server by the mobile device.

The IBM technology is based on end-to-end encryption between the smartcard and the server using the National Institute of Standards & Technology (NIST) AES (Advanced Encryption Standard) scheme. Current technologies on the market require users to carry an additional device, such as a random password generator, which is less convenient and in some instances less secure.

The technology, which is available today for any NFC-enabled Android 4.0 device, is based on IBM Worklight, a mobile application platform that is part of the IBM MobileFirst portfolio. Future updates will include additional NFC-enabled devices based on market trends.

A new IBM Institute for Business Value study on the "Upwardly Mobile" Enterprise confirms that organizations recognize the importance of making sure their mobile capabilities are secure. According to the report, security was the second most-cited challenge facing organizations."

About IBM MobileFirstAs the first new technology platform for business to emerge since the World Wide Web, mobile computing represents one of the greatest opportunities for organizations to expand their business. Based on nearly 1,000 customer engagements, more than 10 mobile-related acquisitions in the last four years, a team of thousands of mobile experts and 270 patents in wireless innovations, IBM MobileFirst provides the key elements of an application and data platform with the management, security and analytics capabilities needed for the enterprise.

To learn more, visit the IBM MobileFirst press kit or http://www.ibm.com/mobilefirst. Follow @ibmmobile, #ibmmobile on Twitter, and see IBM MobileFirst on YouTube, Tumblr and Facebook.

*Mobile Banking, Handset & Tablet Market Strategies 2013-2017, Juniper Research

Christopher SciaccaIBM Media Relations+41 44 724 84 43cia@zurich.ibm.com

Tod FreemanIBM Media Relations+1 415 320 5893tefreema@us.ibm.com

SOURCE IBM

Products
  • Globe Unlimited

    Digital all access pass across devices. subscribe

  • The Globe and Mail Newspaper

    Newspaper delivered to your doorstep. subscribe

  • Globe2Go

    The digital replica of our newspaper. subscribe

  • Globe eBooks

    A collection of articles by the Globe. subscribe

See all Globe Products

Advertise with us

GlobeLink.ca

Your number one partner for reaching Canada's Influential Achievers. learn more

The Globe at your Workplace
Our Company
Customer Service
Globe Recognition
Mobile Apps
NEWS APP
INVESTING APP
Other Sections