Transcript 0:00 [on-hold music] Talk to me. Information, news and entertainment on demand. WS Radio.com. 0:10 [on-hold music] Welcome to the Peggy Smedley Show, the voice of IoT in our connected world, with your host, Peggy Smedley. [on-hold music] All right, listeners. Welcome back to the Peggy Smedley Show. 0:26 Since making the transition from healthcare to cybersecurity, my next guest today has been exploring new avenues for identity protection. 0:35 For the past four years, his company has elevated his patented cognitive identification software as valuable verification tool across many sectors, including government, military, engineering, ins-insurance, and the list goes on. 0:50 So please welcome Alex Natividad, founder and CEO of Nimbus ID. Alex, welcome to the show. Thank you, Peggy, for having me here. So Alex, you know, we just had Morgan Wright. Welcome. 1:04 We had Morgan Wright just on the show, and I tell you, if he didn't set the stage for getting people to get it and understanding that they need to really get verified identification, I don't know who will. 1:15 And so you are the perfect guest to have on to really say that cognitive authentication is perfect for what we need to be talking about. So let's really set the stage for that because- Okay. 1:25 -I think, you know, when we, we think about this, you know, we're just a list of passwords. You know, we, we don't understand it. We face a problem with this. 1:33 We're being hacked all the time, and it's a real problem today. I mean, we're, we're dealing with bad guys all the time. Great. Um, so Peggy, let me, uh, first, uh, describe what Nimbus ID does. 1:48 Uh, our company implements the use of cognitive ID authentication, which is basically the science of using your thoughts, how you form your thoughts to verify your physical identity and as a person. 2:04 The goal is to create a trusted mechanism to allow any user to access any enterprise, resulting into a trusted environment. So let's, let's define authentication. 2:19 If authentication is the process of determining whether someone or something is in fact who or what it is declared to be, does it make sense to authenticate yourself relying on a device, 2:35 uh, or a key fob or anything similar mechanism? Device authentication is simply device authentication. It has nothing to do with verification of the identity of the user, which is the main problem in the internet. 2:53 So Peggy, before I can explain further, I think it is important to discuss what is the actual root problem, and understanding this problem might lead to an effective solution. 3:05 So if you might allow me, uh, from a non-technical point of view, I can discuss the password problems that we face today. And that's the key, though. 3:17 So for instance-- Well, well, let, let's, let's go with that first because I have a question with that. Right. Because we do have a lot of... 3:22 I mean, first of all, we have a lot of problems with passwords, and simply I would ask the question is because, number one, we don't make them secure enough. They're very basic. 3:32 We don't understand how easy the passwords are hacked because we don't understand what passwords are, right? I mean, the simplicity of it. Well, that is actually misunderstood. The password is actually not a problem. 3:45 The password is the result of the core problem. So for instance, Peggy, from the physical world, physical identities are established and proven by the relationships people create from one another. 3:58 Or perhaps you present your driver's ID, passport, fingerprint, DNA. This, this, this mechanism allows some form of reliability in physical verification of a person. But across the web, it's a bit challenging. 4:13 So for instance, when you create an online and/or enterprise account, you create a username and a password. Isn't that correct? Absolutely. 4:22 This information is stored at your doc-- at your server database, and this process is known as validation of matching credentials. 4:32 Simply, the server, the server compare the static credentials as in username, password to the one stored in the server, and if they match, access is provided. No, no questions asked. That's where the problem starts. 4:47 So if I can explain further, the problems in the internet in terms of authentication, there are three problems. Number one, access credentials are static, meaning each time you use the same credential. 5:02 So if it's static, it can be shared. If you can share something, it can be copied, and therefore it can be phished. Very insecure. Second, the direction or the process of authentication originate from the user. 5:18 Therefore, the hacker can initiate authentication process. So, so let me interrupt. And lastly- Alex- Yes. Wait, wait. Let me step back. 5:27 Are we, are we talking about the problem is then between verifying our physical and our digital identity? Is that what we're trying to identify the differences between the two? 5:36 Is that what we're saying is kind of the problem? Well, yeah. I just want to make sure. Um, exactly. So we are-- We need to verify the user and allow the server to have the power to challenge the user. Okay. 5:52 And the server initiates authentication. And lastly, authentication mechanism or the credentials used should be dynamic. 6:02 Therefore, if you keep on changing each authentication, it cannot be phished.So now we're discuss-- we're d-we're delivering between the static and the dynamic between what you just described- Correct. 6:14 -is between the physical and the digital world, between static and dynamic. Correct. Okay. So that's what I wanna make sure everybody's understanding and following the conversation. 6:21 So the static and dyn-dynamic has to be, uh, uh, um, effected. Number two, we have to use the server, or we have to empower the server to discriminate the end user. 6:34 Right now, the user, "Hey, I'm gonna send you a username and password." If it match the, uh, the database, no problems asked. Access provided. 6:43 Can you imagine if you have somebody coming inside your door or your house, and you ask who that person is, uh, you're, you're challenging the us-- the, that person. 6:53 But now, if they just tell you this and that, you, you, you open the door. It makes no sense. The same thing on the internet. You have to challenge the user to verify the identity, not the credentials that they possess. 7:07 That make sense? So, so are we-- Are creating then this pre-factor authentication? I'm, I'm, I guess I'm trying to understand what is the identification that you're creating then. 7:18 So, so the, the, the concept is cognitive ID authentication. So in our life experience, we have many memorable events or moments or simply experiences or that are, are easily recognized and remembered. 7:35 However, each experience that you have in life have their own contextual interpretation. So I'll give you an example. 7:44 If, for instance, I went to a medical school, my fraternity is Tau Mu Sigma Phi, and our batch name is Three Champs. There are so many contextual relationships that exist with that simple experience. 7:57 If the databa-- or I'm sorry, the server projects to the user each contextual information mixed with a noise object, and the user simply clicks what is the correct object, then you can prove it is you. 8:14 And, and if you keep on using different objects in each authentication attempt, then each be-- each of them will be dynamic. So the phisher, or whoever the attacker, cannot hack you by, by stealing your credentials. 8:29 You cannot steal something and use it next time because it keeps on changing. So the access door is protected. Make sense? So how do you constantly change... 8:42 How are you constantly changing with your co-cognitive authentication, you're constantly changing. 8:47 You're preventing the access of being breached from everything that you have, so it doesn't matter where you have your information. Correct. So how is this- So what that... I'm sorry. Go ahead. 8:59 So when you, when you, when you come into our website, you will enroll, just like in any enterprise account. You will create your own life story. And based on that, we can extract those, 9:14 what we call focused objects and attributes that will be stored in our database. All-- My job is to project that to you in a way that it will create a contextual interpretation. 9:27 You would recognize that because it's something durable, it happened in your life, and all you do is click the right object that you see in front of the, uh, web screen, and you're authenticated. 9:39 We do it several times in one session, like four or five times, to increase entropy and make it safe. So does this work no matter where you're doing it, consumer products or enterprises? Is it doesn't really matter? 9:54 It doesn't matter. In fact, uh, any, any user that has a digital account or enterprise account will benefit from cognitive ID authentication as your access credential. But there's more. 10:09 So if, if this is something that is proving who you are and it's dynamic, you can utilize this as a pre-factor authentication and also transaction authorization. So, so for instance, a pre-factor is... 10:26 Let's just give you a, a different scenario. If you have a, a rush of robbery in a subdivision seven days in a row, all the residents will be in panic. 10:36 So they would buy a, uh, security locks, double locks, cameras, dogs, et cetera. Well, guess what? What if you have a, a guard and a gate? Then nobody can come in except the residents and the ones with the gate pass. 10:53 So in this scenario, we can use Nimbus ID as a pre-factor authentication. 10:58 We have to screen out everybody before they even come in, and therefore, only the legit members of the enterprise can be accessed, can access the enterprise. Well- So everybody is out except the users. 11:13 Alex, you and I both know that there are trillions of dollars being lost every day, and I love that you're doing something to kind of stop them. Well, we're out of time. 11:21 I hope you'll come back and talk to us more about the customers that are looking at the physical identity verification space because it's changing so rapidly. But thank you for spending time with us today. Thank you. 11:32 Yeah. Again, thank you, Peggy. Bye. Where, where can our listeners go to learn more about you? Well, they can just go to nimbusid.com website, and, uh, it explains our product and our applications. 11:44 [upbeat music] All right. Thank you so much. All right, listeners, stick around. We've got more to come right here on The Peggy Smedley Show, The Voice of IoT. 11:51 And remember, as you can see, with great technology comes great responsibility. We'll be right back right after this commercial break. 11:57 [upbeat music] Signal to noise, an electronic term with new relevance on the internet. 12:10 Connected World Media cuts through the noise of data overload and finds you the signal of important information.Information that will keep you current and aware of context in the Internet of Things. 12:21 Peggy Smedley shares her insights on The Peggy Smedley Show and in Connected World magazine, all online at connectedworld.com. Stay current and competitive at connectedworld.com. 12:33 [upbeat music] Thank you for listening to WS Radio. Improve your business and your life with useful information from experts and thought leaders. WS Radio is radio with ROI. 12:49 [upbeat music] With great technology comes great responsibility. Follow Internet of Things tech expert and futurist Peggy Smedley, repeatedly ranked as a top IoT and M2M influencer. 13:03 Go to peggy_smedley on Twitter for her take on the latest tech news and lively interviews with other industry insiders on her weekly radio show. Visit twitter.com and search for peggy_smedley to follow her today. 13:18 [upbeat music] Video consumption is on the rise, so to reach this audience, Constructek Magazine created Constructek TV. 13:29 Constructek TV helps construction professionals leverage emerging solutions to better their business. Tune in to constructek.tv to catch the latest show on the first and third Tuesday of each month. 13:40 Like, view, and subscribe to constructek.tv. Bringing dynamic video to construction. 13:49 [upbeat music] Did you know the majority of radio listeners are between the ages of thirty-five and fifty-four, have a household income of more than one hundred thousand dollars, are classified as executives or professionals, and share the show they listen to? 14:02 Become part of The Peggy Smedley Show to reach listeners looking for information on connected devices through cost-effective radio commercials or segment sponsorships. 14:11 Contact us at six three zero nine three three zero eight four four for more information, or visit peggysmedleyshow.com. [upbeat music] Small businesses are the lifeblood of America's economy. 14:22 Every Thursday, SBA Radio interviews industry professionals and is dedicated to provide small businesses with timely insights and innovations. Visit www.sbaradio.us for details. 14:35 [upbeat music] Education, industry experts, back to the basics. Is your company using the Internet of Things to its fullest potential? 14:41 Enlist the Peggy Smedley Institute and its team of experts to create a customized plan for how to apply the IoT to your specific needs. 14:49 Learn everything you need to know to achieve tangible business outcomes in today's digital economy. Contact us at six three zero nine three three zero eight four four. 14:59 That's six three zero nine three three zero eight four four, or visit learnatiot.com.
