Strong Authentication: Compliance to Competitive Advantage

Table of Contents

• Overview
• Primary Questions
• Major Findings
• Executive Summary
• Strong Authentication Defined: Three Factors Now, Potentially Four in the Future
• Primary Reasons to Implement Strong Authentication Online
• Implementation Goals and Paths: Comply, Protect, and Expand
• The Javelin A.C.E. Model for Assessing Online Authentication Solutions
• Methodology and Evaluation Criteria
• Criteria Weighting by Category
• Most Promising Authentication Solutions per Javelin Analysis
• Javelin Online Authentication Solution Analysis
  • Cryptographic USB Token
  • OTP-Generating Token
  • Device Recognition
  • Fingerprint Biometrics
  • PIN Scratch-off
  • Cryptographic or Encryption Software Tokens
  • Picture or Phrase Recognition
  • Grid/Pattern Recognition
  • PIN Translation
• Conclusions
• Glossary
• Appendix

Table of Figures

• Prevention, Detection and Resolution of New and Existing Account Identity Fraud
• Factors of Online Strong Authentication
• Implementation Goals and Paths: Comply, Protect, or Expand
• The Javelin A.C.E Model for Assessing Online Authentication Solution
• Overall Rankings, and Rankings by Category
• Composite Score of Strong Online Authentication Solutions
• Scores for USB Token
• Scores for OTP Generating Token
• Scores for Devices Recognition
• Scores for Fingerprint Biometrics
• Scores for PIN Scratch-off
• Scores for Cryptographic Software Tokens
• Scores for Picture or Phrase Recognition
• Scores for Grid Pattern Recognition
• Scores for Pin Translation
• Scores for Phone/SMS
• Conclusions: Comply, Protect and Expand
• Comply, Protect and Expand: Defensive and Offensive Strategies
• Total Scores: Affordability, Consumer Utility, and Effectiveness
• Continued: Total Scores: Affordability, Consumer Utility, and Effectiveness