When a user logs into a company's system, Verifia's software captures a detailed physical login profile of the user and validates this information using extensive behavioral profiling and patented IP-tracking intelligence. Verifia's technology analyzes and grades each electronic transaction with a confidence level based upon prior user behavior and known fraudulent logins. It then integrates this information into a constantly evolving behavioral database. Companies use this intelligence to make informed decisions regarding individual transactions as well as longer-term issues such as the development of fraud prevention user profiles. Significantly, Verifia's software is flexible, quickly deployed, and invisible to the user, increasing an organization's overall level of data security with minimal inconvenience.

The fundamental premise behind TiP is that the product can benefit and strengthen the existing username and password based authentication mechanism for online banking and related services, by providing a strong second factor of authentication without the deployment, management, and user installation burden imposed by other solutions, such as PKI and hardware-based solutions (tokens, smart cards, etc.). The TiP product will plug into the existing authentication mechanism by assessing existing “passing” authentication sessions for their determined confidence indexes. The TiP system will then, based on the configured threshold levels, either challenge the end-user for additional information, do nothing (if their confidence index is sufficiently high), or reject the user login, tying into an institution’s existing account lock-out logic.

Verifia’s TiP system achieves scalability both vertically (by adding processors) and horizontally (by adding additional servers). TiP is built to utilize existing resources efficiently by employing sophisticated caching mechanisms for both thread and database connection pool management.

Reliability is achieved by the provision of a server failover mechanism whereby if a given server becomes inaccessible (e.g. by a hardware or network failure) a hot standby server will take over with no loss of transactional state.

Extensibility is provided for by two mechanisms:

• A straightforward API with both Java and language-independent bindings
• A configurable interface to existing database systems for challenge question and answer data

The TiP system runs on standard TCP/IP networks. It is deployed on industry standard platforms including: J2EE-compliant application severs and servlet containers coupled with industry-leading relational databases. Specifically, release 1.0 will run on the following platforms:

• Web Servers: Apache 1.3, 2.0, MSFT IIS 5.0
• Application Servers (and Servlet containers): BEA Web Logic 6.0, Apache Tomcat 4.x
• Databases: Oracle 8.1.x, 9.x, mySQL 3.2