tags:

views:

32

answers:

3

I don't know what these are called, so I will explain as best I can what we want to do:

We want to implement a secure log-in system so that when logging in we want to ask for a number that is generated on a small device that is carried with the person at all times.

I understand these devices work by relying on an algorithm that generates random numbers based on the current time. The same method is used on the sever side. They both independently generate the same numbers, since their clocks are in sync, and because its the same algorithm. When the user enters this number they should match.

Where can one buy these security dongles? What is this authentication method even called?

+3  A: 

I know of RSA SecurID as a supplier of two-factor authentication solutions.

Brabster
Beat me by 7 seconds to the same URL.
Jonathan Leffler
Fastest gun in the west - this time :)
Brabster
+1  A: 

One name for one species of the gadgets you are looking for is RSA SecurID.

Jonathan Leffler
+1  A: 

Our company used to use Safeword Tokens. Google the name, and you'll have a host of places to buy them from.

http://www.google.com/search?q=safeword+token&rls=com.microsoft:en-us&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1

However, an even COOLER method of authentication is Phone Factor, which we switched to when we went away from SafeWord..

David Stratton