2factor(R) Software Defeats New and Emerging Security Threats and Sophisticated Hacker Attacks

Real Privacy Management(TM) (RPM) Is up to 100 Times Faster Than Public Key Infrastructure; Integrates With Any Software Application, Device or Chip; RPM-Based SecureWeb(R) Ensures Complete Privacy for Web-Based Applications

2factor, a provider of leading-edge security solutions, today introduced two high-performance security solutions that overcome the inherent weaknesses and known vulnerabilities of public key infrastructure (PKI) and other common security products. Based on patented technology for performing "secure electronic transactions, messaging and digital steaming," and on a patent pending for "perfectly secure key exchange and authenticated messaging," 2factor's security software automatically negates the techniques used by hackers to commit intra-session fraud.

PKI security products such as SSL, and systems using cards, tokens, or "one-time" passwords, only authenticate the user a single time, "at-the-gate," during the initialization of a session. This leaves users wide open during the entire session to well-known hacker attacks like phishing, pharming, spoofing, piggyback, man-in-the-middle, hijacking, Trojan horse and key-logging, all of which result in the perpetration of online fraud.

2factors's Real Privacy Management(TM) (RPM) software addresses the shortcomings of today's security products. RPM is an ultra-fast, extremely lightweight, and easily customizable two-factor private-key security system that can be quickly deployed inside any software application, device or chip. RPM defeats hacker attacks by continuously generating fresh, short-lived 256-bit secret keys that are used to mutually authenticate each party and to encrypt/decrypt every data transmission in real time.

"Banks and other organizations that conduct online commerce have deployed many types of security products with varying levels of success," said Eric Ogren, founder of the Ogren Group, a security consulting firm. "Many companies are still experiencing significant levels of online fraud from phishing and man-in-the-middle attacks designed to steal sensitive data after the initial user authentication. Technologies such as RPM can enhance the security of SSL to transparently give end-users more confidence when conducting Web-based transactions. By providing cost-effective yet highly secure communications, 2factor is poised to help businesses safely move more customer applications to the Web."

RPM's key generation algorithm is published, and its security strength has been mathematically proven. RPM can function as a complete stand-alone security system or be quickly integrated into existing systems to stop hacker attacks and reduce fraud. With its extreme speed (up to 100 times faster than PKI in generating new secret keys) and miniature size (six function calls in 10Kb) RPM brings security beyond desktop Web-based applications to the exploding world of low-latency wireless phones and devices, chips and applications where small code size and computational efficiency are critical.

SecureWeb for Secure Communication

2factor also announced today its SecureWeb® solution, a complete shrink-wrapped product targeted at any organization that requires secure communication between Web browser clients and back-end servers. SecureWeb is a small auto-loading applet that invokes a fully secure instance of the user's default browser. SecureWeb transparently runs RPM to deliver continuous transaction protection for the most critical applications.

To invoke a secure Web connection, users simply click on a desktop icon supplied by the SecureWeb distribution partner and type in their familiar user name and password. SecureWeb opens the default browser to a partner-determined page so that users can perform their customary transactions. During the entire session on partner pages, RPM provides continuous transaction protection by performing real-time mutual authentication and encryption of every transmission between client and server to defend against fraud.

"Today's security products are simply not working. If they were, you wouldn't constantly be hearing about one major company after another that was getting hacked," said David M. Burns, CEO of 2factor. "The one-time authentication in today's security products is not going to stop this new generation of hackers. 2factor is the only company with technology fast enough and small enough to authenticate and encrypt every transaction and every data transmission on any platform. RPM and SecureWeb will stop today's hackers in their tracks, reduce fraud and increase the number of users that sign up for online services."

Pricing and Availability

RPM is available immediately as a portable code library written in C, C++ or Java(TM).

SecureWeb is available immediately on Windows® 2000, NT and XP.

Pricing for RPM or SecureWeb starts at $1.00 per user per month with significant volume discounts available for resellers and large end users.

About 2factor

2factor represents "The Future of Security." To combat the increasing number and complexity of hacker attacks, security will need to be continuous, and deployed everywhere throughout the organization. With their unique ability to provide continuous mutual authentication and encryption of every transmission and transaction, 2factor's RPM and SecureWeb solutions provide the highest level of protection against intra-session security breaches, threats and attacks. Companies in markets as diverse as financial services, telecommunications, healthcare, retail, government, legal, media and ecommerce will find that 2factor's products will reduce fraud and increase online customer sign-up and retention. Additional information is available at www.2factor.com

©2007 2factor, Inc.

Real Privacy Management is a trademark, and 2factor and SecureWeb are registered trademarks of 2factor, Inc.

Other company and product names are trademarks or registered trademarks of their respective holders.