Product Watch: Startup Rolls Out New Approach To User Authentication

WWPass offers single device that authenticates users to many systems; secure storage technology protects data by storing it in geographically distributed fragments

Arguing that current methods of user authentication are either inconvenient or insecure, a start-up company later this month will roll out a new approach to authentication that could allow users to access many different secure technologies with a single device.
WWPass, a privately funded startup, today launched PassKey, a single, portable device that is capable of providing secure access to a variety of secure applications, services, and technologies.
“What we’re offering is a universal, single sign-on technology that has no single point of failure and isnt vulnerable at the initial point of authentication,” says Alan Taffel, chief marketing officer at WWPass.
Rather than requiring a separate password and/or token for each application, WWPass offers a secure hardware device called a PassKey that provides a single, anonymous method of accessing networks, applications, transaction systems, or even physically secure areas. Unlike current forms of authentication, the PassKey is associated with a person, rather than an application, the company says.
On the other side of an authentication session, WWPass-enabled applications, servers, or other systems are able to bilaterally authenticate with WWPass, the company states. WWPass then independently identifies to the user the website requesting credentials. Together with the elimination of username/passwords for website log-in, the new technology reduces users susceptibility to phishing, it says.
Unlike other single sign-on technologies, WWPass maintains no database of user identities. Its geographically dispersed cloud storage service encrypts and fragments data, distributes those fragments around the globe, and stores them anonymously, the company says.
While the WWPass technology offers a potentially new approach to authentication, it can work only in applications or services that have been WWPass-enabled. The startup is working to get major application providers to implement the technology, and has already enabled some open-source applications, including Apache Web servers, Magento e-commerce servers, WordPress CMS systems, and PKCS11-compliant secure applications such as Thunderbird email, Linux login, and OpenVPN.
Have a comment on this story? Please click Comment below. If youd like to contact
Dark Readings
editors directly,
send us a message
.

Last News
▸ 7 arrested, 3 more charged in StubHub cyber fraud ring. ◂ Discovered: 23/12/2024 Category: security	▸ Nigerian scammers now turning into mediocre malware pushers. ◂ Discovered: 23/12/2024 Category: security	▸ Beware EMV may not fully protect against skilled thieves. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Product Watch: Startup Rolls Out New Approach To User Authentication