Welcome!

SOA & WOA Authors: Pat Romanski, Liz McMillan, Maureen O'Gara, Dana Gardner, Elizabeth White

Related Topics: SOA & WOA, Virtualization

SOA & WOA: Article

RSA Announces New Knowledge-Based Authentication Tool

Provides More Accurate Verification and Stronger Assurance for Companies Working to Comply with FACTA Red Flags Guidelines

RSA, The Security Division of EMC, announced the latest release of its RSA Identity Verification knowledge-based authentication system – a system that has previously been successfully used by companies to reduce costs and to improve security and customer satisfaction.

RSA’s knowledge-based authentication (KBA) solution is designed to instantly verify customers’ identities and to provide organizations with a higher level of confidence, while simultaneously reducing the risk of fraud associated with handling critical customer information.

Customer Success
One organization that has successfully leveraged RSA’s solution is BNY Mellon Shareowner Services (“Shareowner Services”), a provider of stock transfer and related services that operates as part of The Bank of New York Mellon. Shareowner Services was seeking an identity assurance solution that would offer its customers the convenience of real-time authentication, while managing the risk associated with this type of information and still ensuring the security and privacy of shareowner data. The RSA Identity Verification solution helped Shareowner Services to achieve this goal, and also to improve its customer satisfaction levels and reduce call center operating costs.

“RSA’s KBA solution provides real-time confirmation of customer identities, enabling companies like ours to tailor the authentication layers to satisfy business and security needs, while also protecting customers’ privacy and providing a positive customer experience, with real-time secure access to our self-service Web sites,” said Marc Librizzi, CIO of BNY Mellon Shareowner Services. “After implementing the RSA Identity Verification solution, we also experienced a secondary benefit, which was a significant reduction in our Call Center volume that translated to cost savings.”

The RSA Identity Verification solution is supported by a highly-intelligent questioning technology that incorporates actual non-financial customer data in order to authenticate the customer in real-time, while simultaneously protecting the customer and enhancing the overall user experience. The ability to provide instantaneous matching – coupled with the fact that the answers to the questions are not easily found through searching the Internet – greatly reduces the possibility of online fraud through identity theft. Additionally, because data maintenance is not required, organizations are able to manage costs while still ensuring customers have an additional layer of security.

New Release of RSA Identity Verification
RSA, The Security Division of EMC, also announced the latest release of the RSA Identity Verification knowledge-based authentication service. The new version contains several enhancements that provide improved security and a more accurate verification.  These new features include:

  • New Question Engine  
  • Improved Identity EventTM Module
  • Current Address Verification
  • New Question Type
  • Improved Reports

“Traditionally identity verification systems ask questions which users have self-selected,” said Chris Young, Vice President and General Manager, Identity Access & Assurance Group at RSA, The Security Division of EMC. “The RSA Identity Verification system, on the other hand, has built a new question generation engine that employs sophisticated business rules and algorithms which require no prior selection on the part of the consumer for a secure and accurate authentication.”

RSA’s KBA system is effective for account originations, credit card activations, service transactions, password resets and a number of other scenarios – and it is designed to work across all user touch-points: call center, online, or in-person. The transaction-based architecture means customers do not need to purchase additional software or hardware and deployment is easily configured to meet business and security requirements.

FACTA Red Flags Guidelines
The FACTA Identity Theft Red Flags guidelines require U.S. financial institutions and creditors to develop and implement a written identity theft prevention program that mitigates the risk of identity theft for both new and existing accounts in an array of industries, including financial services, utilities, health care, and telecommunications. The new enhancements in RSA’s Identity Verification service are designed to provide stronger assurance for financial institutions and creditors working to comply with FACTA's Identity Theft Red Flags guidelines.

Specifically, RSA’s new KBA system is engineered to provide improved accuracy in authenticating users by measuring the level of risk associated with an identity, basing much of its strength on precisely the type of information the regulation calls out as valuable - by going beyond the information typically found in an individual's wallet or consumer report.  RSA Identity Verification is configurable to automatically adjust questions during the authentication process to meet the specific nature of the risk associated with an identity.

For more information on RSA contact Brandi Ellerbee, Brandi@outcastpr.com at OutCast Communications.

More Stories By Virtualization News

SYS-CON's Virtualization News Desk trawls the news sources of the world for the latest details of virtualization technologies, products, and market trends, and provides breaking news updates from the Virtualization Conference & Expo.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.