Press Releases

RSA Conference 2006/San Jose (California)— RSA Security Inc. (Nasdaq: RSAS) today unveiled two new authenticators - RSA SecurID(r) Toolbar Token and RSA SecurID(r) SID900 Transaction Signing Token - which provide businesses and consumers with greater flexibility and choice in deploying stronger security for online information and transactions. These solutions extend RSA Security's range of authentication options and help customers create a layered approach to security in which authentication mechanisms are deployed based on the level of risk and the value of data involved.

RSA SecurID Toolbar Token

RSA SecurID Toolbar Token is an easy-to-use strong authentication option, delivered in the familiar browser toolbar format. The solution supports RSA Security's efforts to enable strong authentication within a range of devices, software platforms and online services. After downloading the toolbar, users simply navigate to the Web site protected by RSA SecurID technology and then utilise the token code appearing in the toolbar. The solution supports Microsoft(r) Internet Explorer and Mozilla Firefox(r) browsers.

RSA SecurID Toolbar Token offers consumer-facing organisations a simple way to arm their customers with stronger protection online, while businesses may use the solution to cost-effectively protect shared resources (e.g., business-to-business portals). For enterprises, RSA SecurID Toolbar Token provides ease-of-use for organisations offering Microsoft Outlook(r) Web Access or SSL VPNs protected by stronger authentication.

Features include:

• Simple download and installation: RSA SecurID Toolbar Token was designed to deliver a quick and easy download and install experience.
• Fraud prevention: The solution enables administrator-defined "trust lists," which help ensure that users supply the RSA SecurID token code only to trusted Web sites.
• Multi-site capabilities: End-users may leverage the same RSA SecurID Toolbar Token to authenticate to up to twenty different Web sites.
• Auto-fill capabilities: With one click, end-users can supply the token code to the requesting Web site.
• Secure remote seeding: The toolbar token leverages the Cryptographic Token Key Initialisation Protocol (CT-KIP) to simultaneously generate seed records at both the client and server, ensuring the user credential is never transmitted or mistakenly stored.
• Software development kit (SDK): An SDK will enable organisations to embed the RSA SecurID Toolbar Token functionality in their own toolbar application.

RSA SecurID SID900 Transaction Signing Token

RSA SecurID SID900 Transaction Signing Token provides organisations such as financial institutions the ability to supply businesses and consumers with a secure means of digitally signing online transactions. In addition, customers may also leverage this one-time password-based technology for user authentication. Using the credit card-sized RSA SecurID device with a PIN pad, a user simply enters a transaction value and is then prompted with a unique identifying code. The user submits the code online and this "signature" is attached to the transaction, verifying authenticity.

RSA SecurID SID900 Transaction Signing Token enables financial institutions to improve business and high net worth customers'
confidence in conducting high-value transactions online, while helping to reduce online fraud. In addition, RSA SecurID SID900 authenticators provide an attractive alternative to public key infrastructure (PKI) deployments. The solution serves as a dedicated security device to perform online signatures and is ideally suited for corporate and small business banking environments, as well as high net worth individuals.

Additional features and benefits include:

• Easy-to-carry design: RSA SecurID SID900 Transaction Signing Token is thin and compact, making it easy for people to carry.
• Easy to use: The new authenticator provides an extremely simple user experience, ensuring organisations place no undue burden on their customer base.
• RSA SecurID Authentication Engine support: RSA SecurID SID900 Transaction Signing Token operates with RSA SecurID Authentication Engine software.

Karl Wirth, director of product management, authentication, at RSA Security, said: "As businesses and consumers seek to protect themselves against wide-ranging security threats, the market has begun to seek a broader range of stronger authentication options. To meet this need, RSA Security continues to deliver a continuum of authentication options for our customers, ranging from those that are invisible to the user to solutions that are more interactive. There is no one-size-fits-all approach and RSA Security's extended line of RSA SecurID authentication options provides customers the ability to deploy the solution that best meets the needs of both the organisation and its customers."

Availability

RSA SecurID Toolbar Token and RSA SecurID SID900 Transaction Signing Token will be available worldwide in Q2 2006.

More information on this and other RSA Security announcements related to RSA Conference 2006 may be found at http://www.rsasecurity.com/rsaconference/