Newsletters Welcome, Guest Log In | Register

Data and Telecom

Companies’ communications strategies must be agile in a rapidly evolving market

About this Blogger RSS

Subscribe

Sign up now and get the best business technology insights direct to your inbox.

  • Daily Edge
  • CTO Edge Update
  • Business Tools & Templates
  • Aligning IT & Business Goals
  • Maximizing IT Investments

0

The Web Confronts Its Identity Crisis

Posted by Carl Weinschenk Jun 30, 2008 2:07:05 PM

The rapid adoption of the Internet as a conduit of vital information -- for e-commerce and in business-to-business uses -- has created a big problem that the industry has been grappling with for a few years: People have too many passwords. The corollary problem is that the more passwords that are floating around, the more ways online scoundrels have to trick and defraud people.

 

The good news is that there are several efforts to address the situation. The bad news is that these efforts, while not necessarily directly competitive -- indeed, there seems to be a good deal of cooperation -- have created a confusing and fragmented landscape.

 

Last week, Microsoft, Oracle, PayPal, Novell, Equifax and 15 lesser-known companies announced the formation of the Information Card Forum. The goal is to create cards that people can use instead of passwords to enter sites. Dark Reading reports that the ICF is willing to work with organizations and consortia in the field such as OpenID and the Liberty Alliance.

 

OpenID, which offers a method by which a person can use one password to log onto all participating sites, is perhaps the highest-profile effort aimed at this problem. Last week, Clickpass said that it introduced a method by which people can use Google, Facebook, Yahoo or Hotmail passwords to enter any site within the Clickpass universe. This Washington Post story describes Clickpass' approach. The writer adds that the companies whose passwords Clickpass is using probably will come up with their own version of the system. This, he says, will pose a big problem for the firm.

 

The issue of secure cross-company single sign-on is being addressed by some of the heaviest hitters in the industry. This, of course, is a good thing. As the recognition of the problem grows, the pressure toward working through the technology and financial thickets and developing one solution also grows. Earlier this year, Google, IBM, Microsoft, VeriSign and Yahoo joined the board of OpenID. The presence of Microsoft both on the board and in ICF is a good sign. Redmond also has its own internal project, code-named Info Card.

 

Making life easier for consumers is a big part of the effort. A related and just as vital initiative is aimed at enabling companies that are working together or have some other deep relationship to allow employees the ability to perform tasks on each other's sites without going through repetitious log-on procedures.This is generally referred to as federated identity.

 

One of the groups working to improve federated identity procedures is The Liberty Alliance. Last week, the Alliance released two specifications. The Identity Assurance Framework is a four-level set of criteria that each company in a federated identity arrangement must follow. The Identity Governance Framework helps participating companies meet regulatory requirements for using, managing and protecting identity information, the story says.

 

It is an understatement to say that this general area is confusing. The complexity of the effort to create a single framework for federated identities and single sign-on access for Web users is evident in this interview that I did in March with Brett McDowell, executive director of the Liberty Alliance. The best chance for quickly aligning all the efforts seems to be the Concordia Project, a consortia aimed at harmonizing the various initiatives into a single framework.

Add a comment Leave a comment on this blog post.

There are no comments on this post

Lowering Your IT Costs with Oracle Database 11g Release 2

This white paper identifies the key capabilities a database management solution needs to successfully deliver more information with higher quality of service, make more efficient use of IT budgets, and reduce the risk of change in data centers.

Software Forum: Information On Demand Virtual Experience

This interactive virtual forum presents leading IT experts providing the insights you need to turn your information into a strategic driver for innovation, business optimization and competitive differentiation.

Mobile Computing Optimization

Mobile computing solutions, tips, and expert commentary that increases the usability and bottom-line benefits of your mobile computing assets.

Tape Storage

Disaster recovery and business continuation that includes encryption, all at a manageable TCO.

Data Management Solutions

Data management and storage solutions, tips and best practices to improve the scalability, reliability, and accessability of your data.

Data Warehousing for Business Intelligence

Comprehensive storage solutions for better data access and retrieval, leading to better-informed business decisions.

ITIL V3 Foundation - Complete Certification Kit

Enhance your IT career by getting your ITIL Foundation Certificate. It's fast and easy with this complete resource. The 186-page eBook and companion online training course is guaranteed to help you pass the ITIL exam.

Learn more >

Windows 7 Upgrade Project Kit

Moving to Windows 7? The Windows 7 Upgrade Project Kit is the ideal support tool for managing all phases of an organizational upgrade to Windows 7. The tools and templates in this kit will help you develop a strategy and map out the implementation tactics which link your Windows 7 deployment to your company's bottom line.

Learn more >