OATH Announces Token Identifier Specification

OATH to host Face to Face Meeting and OATH Pavilion at RSA Conference

San Francisco, CA April 15th, 2009 – OATH, the Initiative for Open AuTHentication, today announced that the organization has completed a new specification for OATH Token Identifiers as part of 2009 technology roadmap. The organization made the announcement at the RSA Conference 2009 in San Francisco, the data security industry’s largest tradeshow.

The OATH Token Identifier is one of the key deliverable items on the OATH technology roadmap and was developed through the collaboration of several OATH members. The OATH Token Identifier Specification enables every OATH-compatible token to be uniquely identified globally across manufacturers. The full specification is available at - http://www.openauthentication.org/oath-id

As part of this work OATH will assign unique prefixes to token manufacturers (including OATH non-member companies) and maintain a registry of prefixes.

“This specification complements the prior standards work done by OATH in specifying authentication algorithms such as HOTP, TOTP and OCRA” said Siddharth Bajaj, OATH Joint Coordination Committee (JCC) Chair and Principal in the Innovation Group of VeriSign, Inc. “Globally unique token identification will enable co-existence of tokens from multiple vendors within the same infrastructure, both on the client and server, an important goal for OATH.”

This specification has been adopted by several OATH members including ActivIdentity, Giesecke & Devrient, Infoserver, IronKey, Nagra ID Security and VeriSign. To view the complete list of companies who have currently adopted the Token Identifier Specification, visit: http://www.openauthentication.org/oath-id/prefixes

“I am pleased to see the recent developments from OATH, especially on the Token ID Specification, it offers a usable naming scheme that specifically enhances the uniqueness of each token while providing for exceptional ease of use on the implementation side,” said Philippe Guillaud, CTO of Nagra ID Security.”

The Token Identifier Specification will be part of the OATH Certification Program to be announced later this year.

OATH to host its spring Face to Face Meeting:
The meeting will be held at the San Francisco Marriott on Monday April 20th from 9:00 AM to 5:00 PM. The agenda includes updates from the Joint Coordinating Committee, the Marketing Working Group and the Technical Focus Group. There will be a discussion of the OATH Certification Program and the Validation Protocol currently under development.

OATH Pavilion at the RSA Conference:
Conference attendees can view OATH technology in action at the OATH Pavilion (Booth #2037) at the RSA Conference 2008. The following companies will be showcasing their technologies: Aradiom, AN X business, Bio-Key, HID Global, Mega AS Consulting, Nordic Edge, Portwise, and VeriSign.

About the Initiative for Open AuTHentication

The Initiative for Open AuTHentication (OATH) is the industry’s leading collaboration of device, platform and application companies, and end user customers of authentication technologies. OATH participants foster use of strong authentication across networks, devices and applications. OATH participants work collectively to facilitate standards and build a reference architecture for open authentication while evangelizing the benefits of strong interoperable authentication in a networked world. As OATH grows, the organization actively incorporates feedback and technology contributions from end-user participants who share a common vision for open authentication technology and the products that provide this important measure of security.

OATH is dedicated to assisting customers with the reduction of cost and complexity of deploying strong authentication within enterprises and across the Internet. Since its formation in 2004, OATH’s membership includes security industry leaders from token manufacturers, platform vendors, smartcard providers, and security services companies. End user companies join OATH to add their voice and ideas towards the goal of open authentication.

To join OATH and to see a list of its current membership, go to: http://www.openauthentication.org/membership.asp. To learn more about OATH, e-mail i...@openauthentication.org or visit http://www.openauthentication.org. Visit OATH at the RSA Conference in Booth #2037