Cloud Computing Journal

RSA and VeriSign, Inc. are working together to provide organizations with the mutual benefit of an expanded VeriSign Identity Protection (VIP) Authentication Service through the availability of RSA SecurID two-factor authentication technology for more choice in one-time password (OTP) authentication. VIP is a managed, shared authentication solution that provides its users with a single one-time password (OTP) authentication device to securely access multiple Web sites.

Organizations in search of strong authentication solutions will benefit from being able to use VIP in combination with RSA SecurID hardware tokens. RSA and VeriSign, both of whom were recently rated Best-in-Class for Multi-Channel Authentication Technology by Javelin Strategy & Research(1), are teaming up to address the market segment for managed, shared authentication services, offering organizations the convenience of a single platform.

The technical and sales partnership signals a new chapter in the longstanding relationship between RSA and VeriSign. Twenty-five years ago, RSA pioneered two-factor authentication and encryption and in 1995, VeriSign was founded as a separate entity leveraging RSA technology to develop and provide digital identities through a managed services model.

"RSA and VeriSign have a long history of complementary and innovative security solutions and standards, such as SSL, that enabled internet usage and growth," said Jim Bidzos, VeriSign executive chairman and founder. "We have again joined forces to benefit users by providing managed, shared authentication services on a single platform. No one is better equipped to deliver comprehensive, best-in-class authentication solutions than RSA and VeriSign."

"Inventive collaboration between key industry leaders is critical to delivering higher value to customers and responding to the ever-changing threat environment," said Art Coviello, executive vice president of EMC Corp. and president of RSA. "Together with VeriSign, we've worked hard over the decades to help ensure online transactions are safe, secure and trustworthy. With more than 40 million users of RSA SecurID worldwide, we're thrilled at the opportunity to serve customers through the VIP Network."

VeriSign plans to complete the integration of the RSA SecurID Authentication Engine into the VIP Authentication Service by the end of December 2009, which will enable VIP customers to use RSA SecurID hardware authenticators. At that time, VeriSign will also resell RSA SecurID hardware tokens to VIP prospects and customers, and RSA will likewise resell the VIP Authentication Service to its prospects and customers.

"Institutions worldwide face growing risks to their assets, legal liability and reputations as they seek to securely and conveniently authenticate their customers across multiple channels," said Robert Vamosi, Security, Risk & Fraud Analyst for Javelin Strategy & Research. "RSA and VeriSign, both of whom were selected as Best-In-Class for authentication technology, are offering an enhanced, scalable, cloud-based global authentication network that is greater than the sum of its parts. This partnership will be a significant force in the adoption of two-factor authentication worldwide."

Mary T. Monahan, managing partner and research director at Javelin Strategy & Research, added, "The alliance of two powerhouses with the integration of RSA SecurID technology into VIP will strengthen their combined market leadership and work to increase the collective clout of both VeriSign and RSA."

As part of the agreement, the companies will work to transfer all existing RSA GoID customers to the VIP Authentication Service by the end of Q2 2010. RSA will work closely with all existing RSA GoID customers for a smooth, uninterrupted transition to the VIP Authentication Service. VeriSign is committed to delivering the highest standards of customer care and technical innovation that RSA GoID customers expect today.

The VIP Authentication Service implements two-factor authentication through VeriSign's cloud-based Security as a Service (SaaS) model, which enables organizations to accelerate authentication system deployments while driving down per user costs. Currently with more than 100 members on the network worldwide, the VIP Authentication Service enables strong authentication for tens of millions of mobile users. The VIP Authentication Service is part of a portfolio of authentication products that include PKI and SSL certificates, which in total, account for more than a billion authentication look-ups each day. The RSA GoID managed, shared consumer authentication service is designed to identify users before they interact with a Web site or online application.

The RSA SecurID two-factor authentication system is used by more than 40 million people across more than 30,000 organizations worldwide to help prevent unauthorized access to corporate applications and resources. The system is comprised of a broad range of hardware and software authenticators that provide end users with a one-time password, along with its software engine -- RSA® Authentication Manager. The RSA SecurID solution is part of RSA's complete portfolio of cloud-based and on-premise authentication technologies that when combined, protect more than 300 million online identities worldwide.