Microsoft Beefs Up App Security With PhoneFactor Purchase

Microsoft has snapped up mobile security provider PhoneFactor in a deal that will furnish Redmond with its two-factor authentication technology.

This will allow Microsoft to better protect business applications that enterprises deploy on smartphones for employees and customers.

Mobile Security

PhoneFactor, founded in 2001, already works with many Microsoft products and services, including Outlook Web Access, Internet Information Services and Active Directory. Over time, it could also interoperate with Office 365, the cloud-delivered version of Microsoft’s Office productivity software suite, the companies said.

Terms of the acquisition were not disclosed.

“With Microsoft’s product breadth and distribution reach, it will be possible to bring the benefits of PhoneFactor to a broader set of customers, partners and developers than we could as a stand-alone company,” wrote Timothy Sutton, PhoneFactor’s CEO, in a blog post. “And as part of Microsoft, we will work to improve the interoperability and ease of use of our solutions.”

Two-factor authentication is an IT security feature that gives a user access to a company application or Web site if they are successfully authenticated using two of three factors. The three authentication methods are based on what you know, what you have or who you are.

What you know refers to a common security measure in which a person enters a username and password onto their device, such as a PC, smartphone or tablet. What you have refers to devices like a smartcard, a USB thumb drive or an encryption token that the device can recognise as a valid ID. Who you are refers to a method of identifying a person by fingerprints, a retina scan or voice recognition.

The idea behind two-factor authentication is that while it may be possible for a hacker to guess or steal someone’s username and password, it would be more difficult for them to obtain either of the other two authentication factors.

Microsoft Partner

PhoneFactor has been a Microsoft partner since at least early 2011, when Microsoft identified PhoneFactor technology as an element of its HealthVault platform for securing applications used in the health care and health insurance industries. Health care companies are bound by the US Health Insurance Portability and Accountability Act (HIPAA), which requires strict security and privacy protection of patient health and insurance information.

“The acquisition of PhoneFactor will help Microsoft bring effective and easy-to-use multifactor authentication to our cloud services and on-premise applications,” said Bharat Shah, corporate vice president for the Server and Tools Division at Microsoft, in a statement. “In addition, PhoneFactor’s solutions will help Microsoft customers, partners and developers enhance the security of almost any authentication scenario.”

For now, PhoneFactor will continue to operate separately from Microsoft, including providing PhoneFactor support for non-Microsoft products, PhoneFactor noted in a Q&A page on its Web site.

However, in the future, it’s likely PhoneFactor will be sold using Microsoft’s Volume Licensing contracts, but PhoneFactor was not specific on when that might happen.

PhoneFactor will continue to provide support for its products and services but customers who have an existing support contract with Microsoft cannot extend that support to include its PhoneFactor solutions.

Are you a security guru? Try our quiz!

Robert J Mullins, eWeek USA 2013. Ziff Davis Enterprise Inc. All Rights Reserved

Recent Posts

Apple Sales Rise 6 Percent After Early iPhone 16 Demand

Fourth quarter results beat Wall Street expectations, as overall sales rise 6 percent, but EU…

20 hours ago

X’s Community Notes Fails To Stem US Election Misinformation – Report

Hate speech non-profit that defeated Elon Musk's lawsuit, warns X's Community Notes is failing to…

21 hours ago

Google Fined More Than World’s GDP By Russia

Good luck. Russia demands Google pay a fine worth more than the world's total GDP,…

22 hours ago

Spotify, Paramount Sign Up To Use Google Cloud ARM Chips

Google Cloud signs up Spotify, Paramount Global as early customers of its first ARM-based cloud…

2 days ago

Meta Warns Of Accelerating AI Infrastructure Costs

Facebook parent Meta warns of 'significant acceleration' in expenditures on AI infrastructure as revenue, profits…

2 days ago

AI Helps Boost Microsoft Cloud Revenues By 33 Percent

Microsoft says Azure cloud revenues up 33 percent for September quarter as capital expenditures surge…

2 days ago