Exclusive: Epsilon locks down with grid pattern log-in

Powered by SC Magazine
 

'Strong authentication' introduced to stamp out further data breaches.

Online marketing giant Epsilon has implemented a new authentication system after disclosing a significant leak of customer data last month.

The new authentication system has been in hot demand from customers after repeated lapses in the company’s cyber security forced embarrassing apologies from the likes of Dell, Hilton Hotels, Target and Citigroup.

The system, described by Epsilon as “strong authentication”, requires users to complement existing user names and passwords with a third factor.

This additional factor appears to be a variant of pattern-based authentication, similar to the technology used by UK provider GrIDsure. iTnews has been unable to determine precisely who developed the technology.

Epsilon is sending customers a one-time username and password to set up the system.

Customers then have to choose a six to ten digit “token pattern” by choosing six cell values presented on a grid and typing them into a text field.

 

A screenshot of the new authentication tool

 

The system does not allow the user to choose a pattern of cells that are too simple (no straight vertical, horizontal or diagonal lines).

This “grid pattern token” is then required to log-in to the system at all times.

Remember to sign up to our Security bulletin for the definitive summary and analysis of Infosec threats.

Copyright © iTnews.com.au . All rights reserved.


Exclusive: Epsilon locks down with grid pattern log-in
 
 
 
Top Stories
Westpac interim CIO resigns
Group CIO yet to be appointed.
 
Five emerging technologies that will transform financial services
[Blog post] Far out ideas that aren't far off.
 
Earning the right to innovate
Breaking down the barriers to innovation is a long, but rewarding process, says Bank of Queensland Group CIO, Julie Bale.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  28%
 
Application integration concerns
  3%
 
Security and compliance concerns
  27%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  22%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  4%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 952

Vote