I'm long SFOR and it would be great if RSA was using SFOR patents, but from what I've read, I'm not seeing a connection between SFOR and RSA, other than SFOR was showcased at an RSA Conference.
Strikeforce can also couple ProtectID with RSA's tech. but they each sound unique to me. More of a synergistic relationship - not that RSA is using SFOR's IP (but I'm no expert and wouldn't know if the relationship has strengthened to the point of RSA using SFOR IP).
Risk Mitigation - ProtectID's Out-Of-Band technology coupled with Oracle OAAM or RSA Adaptive Authentication Risk based authentication address this requirement