Tokens Aren't Always the Answer: 4 Cases for Identity-Based Solutions

Tokens Aren't Always the Answer
Four Cases Where Identity-Based Solutions Enhance or Provide Alternatives to Strong Authentication Technologies
3600 Mansell Road | Suite 200 | Alpharetta, GA 30022888.KNOW1ID (888-566-9143) | www.trustednetworktech.com 4005.070706Tokens Aren't Always the Answer: Four Cases for Identity-Based Solutions
hen are tokens the wrong tool for the job? ?The need for end user interaction, which creates training Thousands of organizations have deployed and support hassle and costhardware tokens, smart cards and other strong ?No computer identityuser authentication products for millions of pWeople. But more and more organizations have requirements Identity-based audit and access control solutions (such as that extend beyond user authentication, including machine- TNT's) provide a compelling alternative or complement to based controls and comprehensive authorization. And they tokens and other authentication technologies in four cases:seek the most effective technologies at the lowest costs. 1) As a simpler, less expensive option for multifactor identity What has driven the adoption of tokens and other strong verification-with no need for end user interactionauthentication solutions? Organizations must give employees, 2) As a complement to token deployments, adding user contractors and partners appropriate access to electronic and machine authorization and visibility after the user information they need to do their jobs. This includes sensitive authenticatespersonal identity information, health records, account 3) As assurance that only known, authorized computers (not numbers, employee files and financial reports. To grant and just users) can connect to specific servers or applicationsverify appropriate access, organizations must ensure that only 4) As a secure, easy-to-distribute alternative to soft tokensidentified and authorized computers, users and groups can connect to sensitive information resources. The following sections discuss how identity-based solutions can work alongside or in place of tokens and other At the same time, it's easier than ever to gain access to a strong authentication technologies. We also look at how corporate network. Wireless networks allow users to roam organizations today are protecting critical data systems, throughout the building, across campus, and from one wing saving money and time, and managing access simply and of the hospital to another, all while staying connected to the inexpensively with TNT technologies. network. Virtual private network (VPN) technology allows remote access from anywhere with an Internet connection. A look inside . . . This easy access, however, invites many users who either should not be on the network or should not be connecting Case 1: Identity-Based Alternatives to from a public kiosk in the coffee shop. Token Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
And organizations pay dearly for lax protection of sensitive Case 2: Enhancing Strong Authentication with data. In November 2005, the Ponemon Institute estimated that Identity-Based Control & Authorization. . . . . . .3organizations spend an average of $14 million responding to a major data breach-as much as $50 million per incident. Case 3: Identity Machine Control- When Computer Identity Matters . . . . . . . . . .4Authentication technologies such as tokens and smart cards have helped meet these challenges by ensuring that users Case 4: Virtual Endpoint Identity-A Simple, Secure logging into operating systems and applications are who they Alternative to Software Tokens . . . . . . . . . . . . . . . . . . . .4claim to be. But these solutions have limitations: TNT Customer Scenarios Demonstrate ?High costs for hardware and maintenance Alternatives to Tokens . . . . . . . . . . . . . . . . . . . . . . . . . . . .5?No visibility or access control beyond the point of authentication Recommendations and Additional Information. . . . .6
© 2006 Trusted Network Technologies Inc. page Tokens Aren't Always the Answer: Four Cases for Identity-Based Solutions
Case 1: Identity-Based Alternatives to So, what options exist for organizations that cannot justify the Token Authentication costs and ongoing management challenges of token-based Most companies use tokens or smart cards to add another authentication products? In considering an alternative, let's level of veri... [download for more]