Secure Connections 24/7...Keeping Me Connected For Three Years

What Is A SecurID Token?
Aside from being my lifeline to staying connected...it is a small hard plastic key fob type device with a numeric display for secure remote access to data systems.

How Does It Work?
The SecurID Token system works with a VPN Account to allow remote access to secure systems. The display window has a timer, which resets every sixty seconds. The timer is represented by a series of black bars on the left side of the display window. Each time the system resets, five black tick bars will appear and slowly tick down, indicating how long you have to enter the passcode. The passcode is a six digit number displayed in the window. This number which changes every sixty seconds is combined with a PIN Number that the user picks and remains constant. These two numbers are entered when the VPN account is launched. After verification of both the password and SecurID number, access to the secured systems is permitted remotely.

Seed Computation
Each fob is encoded with a seed file, which is a 128 bit seed. The seed records for a given security system are kept within the server being accessed, along with being timed to correspond with the changing numbers. The server will calculate the number that should be displayed on the SecurID token and verify the PIN Number associated with the account, prior to allowing access to the server.

How Accurate Is The Timer?
There have been cases where the clock in the server gets out of sync with the key fob. When this happens, there can be problems accessing the server. There is an authentication program on the RSA Manager which allows for manual recalibration of the token and server. These tokens generally expire after three years. Mine is due to be replaced shortly, which is a good thing, because it is worse for wear and tear.

Durability
The SecurID Token is made of hard plastic with a clear plastic window that displays both the timer and the access number. This window is not susceptible to scratching. I had this token attached to my key ring for most of the last three years, and my keys have not obliterated my ability to read the numbers in the display window. However, there is a hole at the end of the key fob to allow it to be attached to a key ring. My key ring rubbed against that plastic ring and eventually broke through. I have not been able to attach this fob to my key ring for a couple of months. So the key ring hole lasted about two and a half years before my key ring worked it's way through.

Replacement
The expiration date of the SecurID Token is located on the back of the fob below the serial number. Because this token provides access to secure systems, replacement is done through my IT Department. I have already notified my IT representative that my fob is about to expire to ensure I have uninterrupted service. There is also an internet link inscribed on the back of the fob that provides directions for returning a lost key fob.

How Secure Are They?
These tokens provide dual authentication for access to a server. It requires the entry of a secret PIN (which you obviously should not share with anyone, and definitely not inscribe or tape to the fob...you may laugh, but it's been done.) It also requires the entry of the six-digit code which changes every sixty seconds. This provides a dual layer of security that is difficult but not impossible to compromise.

Overall Impression
The SecurID Token is a small key fob that is very easy to carry around. You can attach it to a key ring and have it handy...especially while traveling. With the amount of time I spend traveling each year, this device allows me to stay connected using my Verizon Aircard and laptop computer. The system is fairly secure, although it is certainly not tamper proof. I have not had any problems with my token staying in sync, but the key ring attachment broke, meaning I have to carry it loose in my pocket now. I have been very pleased with this token because it allows me to stay connected whenever I need to be connected. I would highly recommend this product for secure access to sensitive databases, giving it five stars out of a possible five.