It did so by offering single sign-on, knowledge-based and multi-factor authentication options, which ensure that the right person signs the right document consistently.
In the past, multi-factor authentication was used mostly by large corporations because the cost of deploying the system and managing the tokens was so high.
Wave Systems is a software company that leverages the Trusted Platform Module (TPM) that is already built into most PCs to essentially enable multi-factor authentication.
The problem with an APT-style attack is there are so many ways to get in, so organizations should look more closely at introducing Multi-Factor Authentication in the cloud, as the new PCI Virtualization Guidelines strongly recommend.
In May 2011, the court ruled in favor of the bank, claiming that the bank followed Federal Financial Institutions Examination Council guidelines set in 2005 for multi-factor authentication for online banking, leaving PATCO unable to recover the hundreds of thousands of dollars lost.