Eliminating the Need for Stored Credentials in Healthcare – Source: www.databreachtoday.com

Authentication requiring stored credentials is not only vulnerable to phishing and other compromises but using these credentials can also be cumbersome for busy clinicians, said Tina Srivastava, co-founder of Badge, a provider of deviceless, tokenless authentication technology. Badge focuses on technology that authenticates across all devices with little effort.

The company’s authentication system is being used in a variety of sectors, including healthcare. Premise Health, a direct healthcare provider with hundreds of clinics at worksites and other locations across the U.S., recently implemented Badge’s technology to streamline and strengthen its authentication processes, she said.

“A doctor can pick up an iPad, look at it, authenticate with Badge using facial recognition and access the patient’s record. When the provider enters the room with the patient, they can focus on that patient,” she said. “They can seamlessly log in to the device without being distracted from the important conversation with the patient.”

“We do authentication that does not require the storage of biometrics or other identity credentials,” Srivastava said. “You can choose any authentication factors. It can be who you are, such as face, fingerprint, voice; what you know, such as PIN code; or what you have, such as device characteristics.”

In this audio interview with Information Security Media Group (see audio link below the photo), Srivastava also discussed:

• The evolving cyberthreat landscape;
• How credential theft is at the center of major breaches, including the disruptive cyberattacks on Change Healthcare and the MGM Casino;
• Why the Office of Personnel Management breach of 2015 prompted her to launch Badge.

Srivastava holds more than 15 patents. Prior to co-founding Badge, she was the chief engineer of electronic warfare programs at Raytheon, where she led a $40 million advanced radio frequency program. She also founded a cybersecurity startup that was later acquired by a public company, a global leader in network assurance and security.