Avatier Extends End-to-End Password Management with Three Modes for Phone Password Reset; Introduces Voice Identification Technology and Exclusive Support for RSA SecurID for Self-Service Password Reset

Business Wire, June 22, 2005

SAN RAMON, Calif. -- Avatier Corporation, a leading provider of global Identity and Access Management solutions, today announced the Avatier Phone Password Reset Suite, an additional module of the Avatier Identity Management Server (AIMS) platform. This new product suite extends AIMS' user provisioning and end-to-end password management offering to include three different methods for resetting passwords over the phone, including using an employee configured Personal Identification Number (PIN), voice identification or RSA SecurID token. The self-service solution is ideal for today's mobile and dynamic workforce, simultaneously reducing dependency on costly IT resources and increasing employee productivity. Additionally, Avatier's new phone modules enforce strong password policies and enable organizations to remain compliant with legislative regulations through user identity verification, logging and reporting of all password changes.

To avoid a breach of privacy policies and ensure compliance with government mandates, employers must control access to the numerous systems and applications within the organization. In order to prevent instances of unauthorized access, many enterprises have implemented strict rules that require employees to strengthen and update passwords frequently. As a result, users struggle to track password changes and often require IT administrators to intervene to reset their passwords.

"Our organization required a password management solution that would alleviate the number of related help desk calls and address instances where a member of the IT team is unavailable," said Kamran Khayami, senior network engineer with the Alcohol and Tobacco Tax and Trade Bureau. "With Avatier's Phone Password Reset solution in place, our employees can reset their own passwords and remain productive while freeing up our valuable IT resources."

"A tool supporting self-service password reset is critical to avoid costly calls to the help desk, especially at a time when enterprise customers are strengthening password policies to address regulatory compliance requirements," said Phil Schacter, analyst at Burton Group. "It makes sense to complement traditional Web-based password reset interfaces with alternative approaches that leverage the universally accessible nature of the Phone system."

While many organizations have policies for password creation, they generally lack the tools and resources to enforce them. Avatier's Phone Password Reset options can be accessed from anywhere at any time of day, enabling organizations to cut IT expenditures and utilize IT resources effectively. Additionally, the AIMS suite allows administrators to set criteria for strong passwords that can be enforced through any of the self-service reset options.

Avatier Phone Password Reset Suite extends AIMS' end-to-end password management offering with the following three secure methods for resetting passwords over the phone:

--PIN Phone Reset -- The administrator designates a unique numeric field in an LDAP directory, Microsoft Active Directory, or Windows NT, which is entered by the end-user using a touch-tone phone. The system locates the end-user in the primary directory, confirms their identity using their PIN and resets the forgotten password. Anti-hacker barriers and alerts are built-in to warn security administrators of too many invalid attempts.

--RSA SecurID Phone Reset -- Avatier's technology matches the serial number on the back of the RSA SecurID token to the end-user account in any LDAP or Microsoft Active Directory.

--Voice Identification -- Avatier's innovative voice identification technology matches pre-recorded unique end-user voice prints to their network logon account in any LDAP directory, Microsoft Active Directory, or Windows NT account repository.

Avatier's AIMS is based on Web services for out-of-the-box integration with enterprise applications, including legacy applications, without requiring consulting services to customize or deploy the product. Most Identity Management suites take months, even years, to roll out because each deployment is unique with extensive customized scripting and integration. These traditional approaches also require heavy IT investments made in building centralized directories, delaying ROI and the promise of Identity Management's improved operational efficiencies to be realized. By leveraging the latest programming languages, Avatier's AIMS provides optimal program stability, reduces memory leaks and enables the first multilingual interface for 26 languages. Leveraging the use of existing and legacy network log-on directories, AIMS avoids nightly reconciliation of user identities, ensuring immediate, accurate deployment and low TCO.

Pricing and Availability

The average cost of the Avatier Phone Password Reset Suite ranges from $5 per user for basic PIN support, $7 per user for RSA SecurID, to $10 per user for Voice Identification support with an initial $1,000 per port set-up fee for the Voice Identification option only.