Oracle is bulking up its system security capabilities through the acquisition of privately held Bharosa for an undisclosed sum. Bharosa software will control and secure access to systems built with Oracle applications and middleware.

Set up in 2003, Santa Clara, Calif. based Barosa claims 25 million end-users (http://www.theregister.co.uk/2007/07/17/rescue_nuke_scientist/) for its fraud detection and identity management software.

Bharosa combines real-time fraud detection with multi-factor online authentication through the Bharosa Tracker and Authenticator. Bharosa's capabilities will be folded into Oracle Identity Management.

The goal seems to be to help Oracle customers comply with security conditions mandated under US regulation such as HIPAA (http://www.hhs.gov/ocr/hipaa/) (Health Insurance Portability and Accountability Act) while cutting the cost and complexity of implementing systems, and avoiding the cost associated with loss of data. Oracle said Bharosa will provide enterprises with "a comprehensive identity management solution that integrates pro-active, real-time fraud prevention".

This latest deal fits a pattern from Oracle of buying expertise rather than go to the expense and delay of building its own technology. Bharosa is Oracle's 32nd acquisition since 2005. Identity-management related purchases during that time include Oblix for web-services based single sign on, Thor Technologies for user provisioning and identity and access management, and OctetString for virtual directory. ®

Related stories

Oracle takes open source love to virtualization (13 November 2007)
http://www.theregister.co.uk/2007/11/13/oracle_virtualization_middleware/
Oracle readies mega-update patching 51 security holes (13 October 2007)
http://www.theregister.co.uk/2007/10/13/oracle_readies_security_updates/
Oracle buys Netsure Telecom (4 September 2007)
http://www.theregister.co.uk/2007/09/04/oracle_buys_netsure_telecom/
The difficulty of validating systems and users (21 August 2007)
http://www.theregister.co.uk/2007/08/21/validating_systems_and_users/
DWP loses £2.5bn to fraud and errors (26 July 2007)
http://www.theregister.co.uk/2007/07/26/dwp_fraud_loss/
Security conferences versus practical knowledge (19 July 2007)
http://www.theregister.co.uk/2007/07/19/security_conferences_practical_knowledge/
Ellison rules out M&A breather (27 June 2007)
http://www.channelregister.co.uk/2007/06/27/oracle_fourth_quarter_f2007/
Business Objects gobbles Inxight (24 May 2007)
http://www.theregister.co.uk/2007/05/24/business_objects_acquires_inxight/
Former Oracle VP pays $200K to settle insider dealing rap (15 May 2007)
http://www.channelregister.co.uk/2007/05/15/insider_dealing_settlement/
Larry Ellison becomes Chief Monk Officer (1 April 2007)
http://www.theregister.co.uk/2007/04/01/larry_ellison_monk/
Oracle and Hyperion: is it really a strategic fit? (12 March 2007)
http://www.theregister.co.uk/2007/03/12/oracle_hyperion_fit/
Oracle pays $3.3bn for Hyperion (7 March 2007)
http://www.theregister.co.uk/2007/03/07/oracle_hyperion_acquisition/
Oracle buys Hyperion, turns heat on SAP (1 March 2007)
http://www.theregister.co.uk/2007/03/01/oracle_hyperion_acquisition/
Oracle's Q2 leaves Wall Street wanting more (19 December 2006)
http://www.theregister.co.uk/2006/12/19/oracle_q2_more/