In an interesting move by Sony that will be closely watched by the security industry, the Japanese technology giant recently filed a patent application that combines multifactor authentication with the blockchain’s extra-secure digital ledger. The concept, as outlined in the filing, is to use two different blockchain platforms in coordination with a potential user login system.

Using the blockchain in combination with MFA is a key element of where the security industry needs to be headed in the view of Bill Mann (pictured), chief product officer at Centrify Corp.

“I usually describe it as MFA everywhere,” Mann said. “It should be for all users. We need to get to a place where we trust the known things in our environment very, very well.”

Mann visited the set of theCUBE, SiliconANGLE’s mobile livestreaming studio, and spoke with co-hosts John Furrier (@furrier) and Dave Vellante (@dvellante) at CyberConnect 2017 in New York City. They discussed the pros and cons of MFA, potential uses for the blockchain, and cybersecurity as a competitive advantage. (* Disclosure below.)

Enterprises balk at the extra steps

Multifactor authentication, which requires at least two different credentials (password and unique tokenized codes), has not become widely adopted in the enterprise because users often rebel at the extra vetting. But in requiring its use by all users for every access need, an organization can significantly reduce the risk of a major breach.

“Trying to reduce the risk down to zero is almost impossible, that’s what we need to be clear about in this market,” Mann explained. “It’s about getting the risk down to a level that’s acceptable for the kind of business you are trying to work on.”

Because the blockchain operates on a decentralized model, credentials aren’t stored in any one single location where hackers can access the keys to the kingdom. And in the blockchain, it becomes far more difficult for a device to hack a network because it would have to be verified through an entire distributed ledger. “I’m a big fan of blockchain, mainly because it’s going to be a trusted end party,” Mann said.

As Centrify works with its customers on trusted identity management solutions, the company is seeing a move towards leveraging security as a competitive differentiator. One unnamed Centrify customer recently replaced its IT security staff because the group resisted changes to legacy systems that would have strengthened protection of the firm’s networks.

“I’m a believer that security is a competitive advantage for an organization,” Mann said. “If you stick with the past, you’re not going to be able to compete in the future.”

Watch the complete video interview below, and be sure to check out more of SiliconANGLE’s and theCUBE’s coverage of the CyberConnect 2017 event. (* Disclosure: TheCUBE is a paid media partner for the CyberConnect 2017 conference. Neither Centrify Corp., the event sponsor, nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE