The Georgia Tech Research Institute was awarded $1.7 million to create a Trustmark Marketplace as part of the identity ecosystem for the National Strategy for Trusted Identities in Cyberspace. The institute is Georgia Tech University's applied research arm and has played a role in the design, development and implementation of the national information exchange model. John Wandelt, a research fellow and division chief at the institute, who also serves as director of the national identity exchange ...
Oct 04, 2013•9 min
PRIVO – Privacy Vaults Online Inc. – was established to enable web sites to comply with COPPA - the Children's Online Privacy Protection Act. Denise Tayloe, co-founder and CEO of PRIVO, spoke with Regarding ID’s Gina Jordan about the project. PRIVO was awarded $1.6 million for the first year of the pilot. If the company meets its milestones, it'll get about the same amount for year two. Tayloe says they'll start by establishing a Minors Trust Framework with 50 different relying parties. "It'll c...
Oct 01, 2013•7 min
Troop ID is an identity service provided by ID.me, a group that’s created digital ID cards for members of the military community, first responders, students and other groups where individuals can tie attributes about themselves and share that in a privacy enhancing and user centric way across the web, says Matthew Thompson, cofounder and COO at ID.me. Thompson and his partner, Blake Hall, are both veterans and met while attending Harvard Business School. The two connected over the challenge of a...
Sep 25, 2013•10 min
Passwords are a common attack vector for fraudsters and making them stronger – mandating alphanumeric characters and capitalizations – is a common requirement. Joseph Bonneau, now an engineer at Google, has spent a lot of time studying passwords, and a paper he wrote after analyzing 70 million passwords took top prize in the National Security Agency’s first Science of Security Competition. Regarding ID's Gina Jordan spoke with Bonneau about his paper and the future of passwords. He thinks passwo...
Aug 13, 2013•10 min
Technical issues and a lack of end user acceptance are hindering the adoption of biometric technology. Cecilia Aragon, associate professor at the University of Washington Department of Human Centered Design and Engineering, studied the matter and spoke with Regarding ID’s Gina Jordan about the report and some possible solutions, including a biometric modality that tracks and authenticates via a user’s eye movements.
Aug 06, 2013•8 min
Within two years the majority of mobile phones will come equipped with biometrics that will be used for many purposes, according to Denise Culver, a telecommunications researcher and a analyst with Heavy Reading. Regarding ID’s Gina Jordan spoke with Culver who says that smart phones already have the tools necessary to make biometrics work: best-in-market cameras, high-speed data and HD screens and other advanced technologies that are the perfect for biometric authentication applications.
Jul 16, 2013•10 min
San Jose State University wants to improve payment authentication on campus. So when it ran across Natural Security at a conference it decided to explore using the biometric and mobile security technology on campus to improve payment security. Regarding ID's Gina Jordan spoke with Brian Mitchler, the services systems manager for Spartan Shops at the school, about the pilot and how it will work.
May 20, 2013•7 min
Smart card manufacturers are changing their focus from producing cards to software and services, says Jean-Noel Georges, global program director at Frost and Sullivan. Regarding ID's Gina Jordan spoke with him about the changing market and where smart card manufacturers are focusing their energy.
May 06, 2013•7 min
Two-factor authentication will not only gain in popularity but will be the norm within two years, says Chester Wisniewski, senior security advisor at Sophos. RegardingID's Gina Jordan spoke with Wisniewski about a Forrester Research report that predicts that two-factor authentication will likely be widespread within two years. Wisniewski feels that widespread may be a bit of a stretch, but says that mainstream may be a more realistic description. "We've already seen the likes of Google, Facebook...
Apr 23, 2013•10 min
Much has been said and written about the National Strategy for Trusted Identities in Cyberspace but Phil Wolff wanted to take a different look at the initiative. Wolff, strategy director at the Personal Data Ecosystem Consortium, was admittedly being "irascible" when he first started the session at a conference but he also wanted people to look for possible pitfalls with the plan and prepare accordingly. The "Death to NSTIC" panel has been held twice and Wolff also has written a white paper that...
Mar 26, 2013•10 min
As more NFC-enabled devices are being introduced into the market it's important to make sure they all work the same way. FIME tests these devices to make sure they meet industry standards. The company has been testing systems for Isis, the NFC project underway in Austin, Texas and Salt Lake City. Stephanie El Rhomri, new services marketing manager at FIME, talks about the work the company is doing with Isis and the importance of testing and certification.
Jan 03, 2013•7 min
The Criterion Systems pilot is an attribute exchange network that will enable consumers to securely share information, enhance the user experience and reduce fraud, says David Coxe, CEO of ID Dataweb and cofounder of Criterion Systems. The concept is to simplify the transaction model and enable participants in the ecosystem to get to market and provide those services in a cost effective way for replying parties. The system will be piloted in the financial services sector and online auctions.
Oct 22, 2012•6 min
In some media reports the National Strategy for Trusted Identities in Cyberspace has been referred to as an Internet driver license so the fact that an association that represents issuers of those documents may seem like a no brainer. Regarding ID's Gina Jordan spoke with Geoff Slagle, director of identity management at the American Association of Motor Vehicle Administrators about the pilot. AAMVA will lead a group of private industry and government partners to implement and pilot the Cross Sec...
Oct 08, 2012•6 min
Internet2 has been in the online identity business for more than a decade so its involvement with the National Strategy for Trusted Identities in Cyberspace may seem like a given. Internet2 will be working on building a privacy infrastructure for the identity ecosystem, including anonymous credentials, something that has been missing thus far, many say. Regarding ID's Gina Jordan spoke with Kenneth Klingenstein, director of middleware for Internet2 about the pilot. "Our goal is to provide a cons...
Oct 04, 2012•6 min
Daon is no stranger to large-scale identity projects, being involved in national ID and border management projects spanning the globe. The company's X-Products group was chosen as a pilot award recipient for the National Strategy for Trusted Identities in Cyberspace. Regarding ID's Gina Jordan spoke with Cathy Tilton, vice president of Standards and Technology at Daon and the lead for Daon's NSTIC pilot program about the award. Daon is providing an identity platform using smart phone technologie...
Oct 01, 2012•5 min
Resilient Network Systems is one of five companies that were awarded a grant to pilot part of the National Strategy for Trusted Identities in Cyberspace. Pat Reilly, executive vice president of business development at Resilient, spoke with Regarding ID's Gina Jordan about the award and what the company will be piloting with the award. Resilient will be doing two projects, one around health care and another around child safety online. "How do I make it so that doctors, insurers and physicians kno...
Sep 26, 2012•8 min
Jeremy Grant, senior executive advisor for identity management and head of the National Program Office for the National Strategy for Trusted Identities in Cyberspace, talks about the pilots awarded and some of the common themes linking the awardees. Grant also talks about the Identity Ecosystem Steering Group and what else the national program office is working on, including plans for next year.
Sep 21, 2012•15 min
The 2012 Black Hat conference made headlines claiming iris biometrics had been hacked. But don't go sounding the warning alarms quite yet. While it's true that researchers discovered a potential vulnerability, there are countermeasures in place that make the hack impossible, or at least improbable, in the real world. Regarding ID's Gina Jordan spoke with Arun Ross, associate professor at West Virginia University, who was one of the researchers on the project. "It is good to know about these vuln...
Aug 15, 2012•10 min
The revised draft of FIPS 201-2 was released and includes quite a few changes. Additional contactless functionality, new biometrics and mobile abilities are all proposed to be included in future generations of the government credential. Neville Pattinson, senior vice president of Government Sales at Gemalto Inc., talks about these changes and some concerns he has about deploying new credentials and an infrastructure to support them.
Jul 23, 2012•12 min
Large, high profile events, like the London 2012 Olympics, need to be secure while also enabling individuals to get where they need to go without too much of a security hassle. Mark Joynes, director of Product Management at Entrust, explains how security and identity plans for these events are created. He also discusses Entrust’s involvement with the Interpol employee credentials that is used for crossing borders as well as physical and logical access to Interpol facilities and networks.
May 21, 2012•11 min
When buying a six-pack of beer it makes sense that an individual confirms that they are at least 21-years-old. But when the consumer shows a clerk the government-issued ID they are giving up address, date of birth and other information as well. In a perfect world the clerk would only see the age. Andrew Clement, a professor in the Faculty of Information at the University of Toronto, is trying to remedy this with the Prop ID research project. Prop ID means that the personal information provided i...
May 07, 2012•10 min
Payment card manufacturers have a set way of doing things. With near field communication on the horizon it could be seen as a disruption to some in the industry. The Datacard Group partnered with DeviceFidelity Inc. to offer the company's In2Pay suite of solutions that use microSD technology in smart phones for contactless payments. The end result is a mobile wallet customers can use at contactless point-of-sale terminals featuring debit, credit or prepaid accounts. Regarding ID's Gina Jordan sp...
Mar 26, 2012•10 min
There are a handful of drivers for adding biometric technology to mobile devices, says Alan Goode, founder of Goode Intelligence and author of "Mobile Phone Biometric Security Analysis and Forecasts 2011-2015." Many mobile phones are easy to break into, enterprises are enabling users to use their own mobile phones and NFC payments may require additional security. Goode predicts (http://www.thirdfactor.com/2012/02/23/report-mobile-biometrics-to-161m-by-2015) that mobile phone biometric security p...
Mar 14, 2012•12 min
EMV is the future of payments but MasterCard doesn't want to stop there, says Colin McGrath, vice president of development in U.S. Markets at the payments company. "We very much see this path and this evolution as really about enabling the next generation of payments," McGrath tells Regarding ID's Gina Jordan. "It's about providing a globally interoperable secure platform for people to be able to make the investments necessary to enable that next generation." The future isn't just about putting ...
Mar 05, 2012•10 min
Visa made waves in August when it unveiled a road map to move the U.S. to EMV and then again in January when the company said that the country's deployment wouldn't be chip and PIN. Stephanie Ericksen, head of Authentication Product Integration at Visa USA, talk to Regarding ID's Gina Jordan about the move and why the U.S. will have a different solution than what other typically associate with EMV. "One thing that we're trying to clarify is there are many countries around the world that have ado...
Jan 26, 2012•10 min
viaForensics revealed some interesting information about Google Wallet. While the system is generally viewed as secure it still does leave some personal data unencrypted. Regarding ID's Gina Jordan spoke with Andrew Hoog, chief investigative officer at viaForensics, about the analysis the company did on the system. While Google made some changes to the software after the report was released, Hoog says more needs to be done. "There was a lot of information left on the device," he says. "If somebo...
Dec 26, 2011•12 min
With near field communication on the horizon and more handsets hitting the market that include the technology, what about the mobile wallet? The software the enables the chip on the phone to perform various tasks is necessary for anything to happen in the NFC ecosystem. The Mobey Forum released a white paper that examines the mobile wallet, what it is and what it does. (Download it here: http://www.mobeyforum.org/Press-Documents/White-papers) Gerhard Romen, member of the board of directors at th...
Dec 19, 2011•16 min
There are many discussions surrounding the multiple user names and passwords individuals must remember to gain access to accounts. Countries across the globe are investigating ways to make it easier for people to securely access information. In Canada, SecureKey Technologies will be enabling individuals to use bank cards for access to government sites, says Andre Boysen, executive vice president of Digital Identity and Authentication Services at the company. "The challenge for governments in Can...
Nov 28, 2011•6 min
After three years as a pilot program, Global Entry is moving to permanent status. John Wagner, executive director of Admissibility and Passenger Programs with U.S. Customs and Border Protection, fill listeners in on the program and how it works. Wagner also talks about the program's reciprocity with other countries and how it's even translating to the domestic trusted traveler program.
Oct 19, 2011•9 min
Mobile devices are poised to become the ID credential of the future. In a recent video, Blackboard Transact president David Marr shared his views on mobile platforms in higher ed and the impacts on campus card offices. CR80News' Chris Corum discussed the topic with Marr in this podcast. He describes the mobile device as "the virtual front door of the institution," but he stresses that you can't just leave that door propped open. "The credential that is the key to opening that door will reside in...
Sep 29, 2011•8 min