Tokenless Two-Factor Authentication: It Finally Adds Up

Demand for protecting data and employee confidentiality is only continuing to grow, especially in industries that require a regulatory-compliant environment. However, applying usernames and passwords for authentication is insufficient. While two-factor authentication is an effective security solution, traditional token-based systems have been difficult to implement and administer, leading to limited adoption.

PhoneFactor uses any phone (landline or mobile) as the second authentication factor. Users do not need to carry an additional device, and there are no expensive tokens to manage. This paper discusses the technical architecture of PhoneFactor, along with related security, deployment and integration issues.