Signify extends two-factor authentication to Android platform

Secure authentication firm Signify has extended its range of two-factor offerings by giving Android smartphone users the ability to turn their handsets into authentication tokens.

Signify's Software Token service, which already supports Apple iOS and BlackBerry platforms, allows IT managers to improve log-in security while offering flexibility for staff who don't want to carry a separate authentication token.

Staff wanting to log in enter their PIN into the Signify token app running on their phone which will then generate a one-time passcode which can be entered into the relevant field on their PC, the firm explained.

The token is software-based, eliminating any costs of physical shipping and meaning that it can be revoked when an employee leaves, said Signify.

"With more people using smart phones for a wide range of business applications and taking greater care of them, the software token offers a flexible and reliable alternative to hardware tokens," said Signify chief executive, Dave Abraham.

"They first become popular with the introduction of the iPhone and we expect to see this trend accelerated with support for Android." 

The Cambridge-based vendor also offers a Passcode OnDemand service that sends one-time passcodes via email or SMS on request.

Smartphones are increasingly seen as the perfect enabler of two-factor authentication, given the increasing need for stronger enterprise authentication but the reluctance among many IT managers to deploy costly and easy-to-lose hardware tokens.

SecurEnvoy launched the latest version of its SecureAccess application earlier this month which offers the option of generating a one-time SMS-based passcode or a soft token downloaded as an app.