HID Global is partnering with BehavioSec, a behavioural biometrics company, to combine BehavioSec’s Behaviometrics technology with HID Global’s 4TRESS Authentication Server. The joint offering brings a new layer of security to HID Global’s Fraud Detection System, by employing behavioural “fingerprints” as extra authentication.
Users may log into company networks or banking online. However, once users log in and cross the first layer of the authentication security perimeter, the only factor that ensures they are the same person that logged in is time-based. As long as there is continuous activity, the application assumes the user is the same person and lets the user remain logged in; a potential security risk.
The integrated 4TRESS Authentication Server, pictured, and Behaviometrics solution addresses this, by adding security at the time of login. If a user’s password or OTP token is stolen but the credentials are not entered the way the user would enter them, login would be impossible. Once logged in, user behaviour is continuously monitored to ensure that a third party has not intercepted or taken over the session.
Hilding Arrehed, director of worldwide professional services and technology partner programmes, Identity Assurance, with HID Global, said: “Recent security breaches have driven home the fact that the less layers of authentication your organisation employs, the more vulnerable you are to attacks and exploitation. By combining BehavioSec’s groundbreaking technology with our 4TRESS Authentication Server, we can provide added value and security to our customers by increasing the auditability and traceability of activity online, without making it more difficult for the end user.”
BehavioSec’s Behaviometrics solutions can create digital fingerprints of users’ ongoing keyboard pressing patterns, including speed, frequency and pressure, when interacting with computer applications and websites. With significant accuracy, the system can detect deviations from a user’s normal behaviour and whether an attacker takes control of a computer. “Compliance can be a complicated process for organisations, so we are always looking for simple ways to streamline our solutions,” said Olov Renberg, co-founder of BehavioSec, based in Sweden and the US. “By combining our Behaviometrics technology with HID Global’s 4TRESS offering, we can add a new layer of security in a transparent way to deliver a complete solution for risk-based authentication.”
