See also:

• Computers: Hardware: Systems: Smartcards  (91)
• Computers: Security: Internet  (400)
• Computers: Software: Business: E-Commerce  (353)

BioPassword  www.biopassword.com A software-based technology that learns and verifies unique typing patterns. Includes an introduction to biometrics and keyboard dynamics.

Dos and Don'ts of Client Authentication on the Web  www.pdos.lcs.mit.edu/papers/webauth:sec10.pdf Paper by Kevin Fu, Emil Sit, Kendra Smith, and Nick Feamster. In the Proceedings of the 10th USENIX Security Symposium, Washington, D.C., August 2001. [PDF]

Finally Software  www.finallysoftware.com Enterprise security solutions based on PKI and Kerberos. Also offer a secure terminal emulator for connecting to Unix servers from Windows. Product information and downloadable evaluation software.

IIS User Authentication Tutorial  www.authenticationtutorial.com Information on various methods for WWW password protection using Internet Information Server (IIS). Text-based tutorial with some screenshots.

iisPROTECT  www.iisprotect.com Functions with Internet Information Server to secure web sites. Includes live demo.

Intertrust Technologies Corporation  www.intertrust.com Develops general purpose digital rights management platform which serves as foundation for providers of digital information, technology and commerce services to participate in a global system for digital commerce. (Nasdaq: ITRU).

I/O Software  www.iosoftware.com Provider of software solutions, including biometric solutions. Product descriptions and technology licensing terms.

M-Tech Information Technology, Inc.  mtechit.com ID-Synch, identity management software for managing user administration processes. Product information, customers, press releases and contact details.

NMA, Inc.  www.nma.com ZSentry two-factor authentication solution. Product information, white papers and contact details.

Open Systems Management  www.osmcorp.com Password synchronization and role based access control across UNIX, Windows NT and resident applications. Site contains FAQs.

Password Management  seclab.cs.ucdavis.edu/papers/pdfs/mb-91.pdf Paper by M. Bishop, 1991. Discusses problems of password selection and password management, and identifies relevant techniques. [PDF]

Pluggable Authentication Modules  www.sun.com/software/solaris/pam Sun's official PAM documentation. Programmer documentation and source code.

A Proactive Password Checker  seclab.cs.ucdavis.edu/papers/mb91c.ps Paper by M. Bishop, 1991. The author describes a technique, and a mechanism, to allow users to select passwords which to them are easy to remember but to others would be very difficult to guess. [Postscript]

Proginet Enterprise Software  www.proginet.com Password synchronization, enterprise-wide access control management and managed file transfer software.

Remote User Authentication in Libraries  library.smc.edu/rpa.htm A collection of resources for libraries and universities. Includes links to software and some links of interest to non-librarians.

RSA Security  www.rsasecurity.com Products include token-based one time password systems and single sign on systems. Site contains information on security.

SAFLINK  www.saflink.com Offer a range of identity management solutions based on tokens, smartcards and biometrics. Headquarters in Bellevue, WA.

Secure Remote Passwords  srp.stanford.edu Software integrates into existing networked applications. Secure telnet and FTP available. Open source. User and technical documentation as well as source code.

SecureUser.net  www.secureuser.net Providers of tools to e-commerce developers. Technology explanation and case studies.

Theory of Identification and Authentication  www.geocities.com/SiliconValley/Garage/3323/cspage.html History and development of mechanisms and techniques.

Unisys  www.unisys.com Makers of several related products. Includes rationale as well as usage information.

Vasco  www.vasco.com Makers of both software and hardware systems. Demos, case studies and product information.