I got enthused about an new security device, Yubico's YubiKey, after listening to Steve Gibson's Security Now podcast episode 141 (with a brief description) and episode 143 (with an interview and full description). Basically, this slim USB device emulates a keyboard and emits a unique password each time it is touched. Using a web service, as well as other methods, you can test to make sure the string is a valid password. Various software examples for doing so is available from their web site.

I have created a very simple DNN module to use this module and describe it (with links) in a blog post. http://www.mimh.edu/matthew.hile/Blog/tabid/111/BlogID/1/Default.aspx

It would have been interesting to get it to work as a authentication provider but for my purposes I wanted it used deeper in my system to provide an added layer of to authentication to particularly sensitive data.

After all the help I have gotten on these pages this is my first contribution to the community. I hope y'all find it interesting.

Matthew