Tweet

E-commerce authentication is a bugaboo. Users typically log in with just a user ID and password, and these are easily compromised with phishing attacks and password guessers. The result is the current flood of e-commerce fraud and identity theft, which dampens users' enthusiasm for e-commerce and represents a huge liability for e-vendors. One fix to the problem is to use two-factor authentication -- a second credential that a user must supply in order to log into his or her e-commerce account. The second factor could be biometric or some sort of token, such as a smartcard or one-time-password generator. Alas, biometric readers are not commonplace, and distributing tokens is too cumbersome and expensive. Anakam LLC has a clever solution to the problem in its Whisper product: Employ a token nearly everyone has already, the ordinary cell phone.