RSA Introduces New Password-Protection Service

RSA is offering technology that segments and stores data in multiple places to safeguard passwords and other secrets from cyber criminals.

The company, the security division of storage and cloud computing company EMC (EMC), introduced a service Tuesday that scrambles and stores user names and passwords in two separate locations.

Dubbed RSA Distributed Credential Protection, the service lowers the likelihood of hackers being able to obtain passwords and other credentials, according to the company.

With the defense in place, attackers face the prospect of hacking into separate servers or data centers nearly simultaneously, without detection, to gain information. If someone attacks one server successfully and that intrusion is detected, the company could scramble data on the second server at the push of a button, so that an attack on the second server would yield information without value, RSA says.

According to RSA, the system can compare log in credentials stored separately without having to reassemble the data, a review that diminishes significantly an attacker's ability to steal it.

"This technology offers a unique way to truly protect bulk data stores of passwords, secrets and other credentials from even highly sophisticated attacks," Dan Schiappa, senior vice president of identity and data protection at RSA, said in a news release. "This new approach to credential protection will be a game-changer for organizations responsible for the security of very large numbers of end user access credentials."

RSA says the service runs alongside systems to protect passwords that companies have installed already.

For reprint and licensing requests for this article, click here.
Bank technology
MORE FROM AMERICAN BANKER