PhoneFactor

PhoneFactor is a multi-factor authentication system which utilizes phone calls to verify identity.^[1][2] With multiple out-of-band methods (phone call, text message, and push) and an OAUTH passcode option, PhoneFactor provides flexibility for users and a single multi-factor platform for IT to manage.^[3]

On October 4, 2012, it was announced that Microsoft had acquired PhoneFactor.^[4] The PhoneFactor service is now available as Windows Azure Multi-Factor Authentication. In addition to securing on-premises applications and identities, the service now also works with cloud applications like Office 365 that use Windows Azure Active Directory.

Background

Founded in 2001,^[5] PhoneFactor helps organizations address user demand for a simple sign-in process while also meeting security and compliance standards. By leveraging a device every user already has – a phone – PhoneFactor enables scalable, user-friendly, secure^[6] multi-factor authentication.

References

1. Haiyang Qian, Chandra S. Surapaneni, Steve Dispensa, Deep Medhi (June 2009). Service Management Architecture and System Capacity Design for PhoneFactor--A Two-Factor Authentication Service (PDF). IFIP/IEEE International Symposium on Integrated Network Management (IM'2009).
2. Haiyang Qian, Chandra S. Surapaneni, Marsh Ray, Steve Dispensa, Deep Medhi (April 2010). DReaM-Cache: Distributed Real-Time Transaction Memory Cache to Support Two-Factor Authentication Services and its Reliability (PDF). IEEE/IFIP Network Operations and Management Symposium (NOMS'2010).
3. "PhoneFactor Product Review". SC Magazine.
4. "Microsoft buys security vendor PhoneFactor". Computerworld. 4 Oct 2012.
5. "Company Overview of PhoneFactor, Inc.". Bloomberg Businessweek. 9 Sep 2013.
6. Quain, John R. (8 Oct 2008). "Logging on Securely, and Confirmed via a Cellphone Call as a Sentinel Against Intruders". New York Times / NYT.com.