OATH, the initiative for Open AuTHentication, is working with SafeHaus, which provides open-source software components related to directory and security infrastructure, to integrate Open Source HOTP using the OATH Reference Architecture with its Triplesec Authentication Server and HausKeys HOTP based soft token. The project targets enterprise organizations, allowing them to use OATH and Safehaus to deploy an open strong authentication solution for Windows, Macintosh, and UNIX users.

Safehaus’ endorsement of the OATH Reference Architecture and use of the HOTP algorithm specification in HausKeys represents an important milestone towards the ubiquity of strong authentication. One Time Passwords (OTPs) are one of the simplest and most versatile forms of two-factor authentication, because they don’t require special client software for access to the ports of remote machines. As a result, users can roam across multiple machines, including home computers, kiosks, and personal digital assistants.

HOTP is an open, standards-based, approach to providing strong authentication. It can be implemented through hardware manufacturers or software developers who create interoperable authentication devices and software agents used across all networks, applications, and devices. The OATH and Safehaus implementation of standards-based, freely available OTP algorithms will further accelerate the adoption of strong authentication in open source environments. 

“We’re pleased to work with OATH and its growing membership towards implementing HOTP algorithm within HausKeys,” said Alex Karasulu, a founder of Safehaus. “OATH’s reference architecture, being an open standard supported by multiple industry participants, aligns well with our open-source product philosophy”

“Safehaus will work with OATH to promote open strong authentication and to further the OATH reference architecture effort,” said Colleen Kulhanek, director of business development, SafeNet, Inc. and OATH marketing chair.” This approach provides organizations a deployment approach for including Windows clients in a Kerberos environment while allowing flexibility and choice in directory deployments. We are very enthusiastic about Safehaus’ support for HOTP within the HausKey development work. Our work together furthers the development of royalty-free open authentication.”