Most security models in use today are inherently flawed either because they are inherently repudiable or so complex users unwittingly sabotage them in order to make them usable.
The trust model...
In a perfect world, people are
always who they say they are and faith
replaces proof. And then there's reality.
You need to unquestionably know "who's there" because
mobile and secure access to sensitive
data is mandatory in today's world. The
technology you use to ensure valid access
to this information must be ready for
tomorrow's world. That is why the Cleared® Security Platform™ is
resetting the rules of authentication.
Single-factor models, such as the use
of passwords, are obviously flawed and
susceptible to fraud. The addition of
time-based smartcards and other devices have formed a more secure two-factor
trust model—but not secure enough. They still do not authenticate the
user, only the user's entry code (which can easily be stolen). With
identity theft expected to exceed $37 billion in 2005*, these broken
models will not suffice.
The Cleared Security Platform is a multi-factored system that has evolved beyond old trust models. Composed of the ClearedChip™, ClearedKey™ and ClearedHost™, the platform is executed in three stages: first, the ClearedKey is authenticated by the host via blind encryptions communicated over secret maps; then, the user's identity is validated via advanced biometrics; and finally, the ClearedHost is authenticated via additional secret encryptions and challenges. With this secure system, no component can work without confirming the authenticity of the others. Completely auditable, secure, and reliable, the Cleared Security Platform knows "who's there", where they are, and what they're accessing. That's advanced authentication.
*Gartner Group, International Data Corporation & Researchers (2003)