Gather requirements for a cross-industry, strong authentication that is cost-effective and convenient
Liberty Alliance, Digital ID World – October 25, 2004 – The Liberty Alliance Project today announced work is underway to understand the requirements to improve the methods by which users are identified, with the intent of reducing the risks and exposure to threats, including identity theft and phishing. Liberty members, representing a cross section of global and vertical experience, are working to define simple, strong, affordable alternatives to password authentication that could be universally beneficial in the banking, telecom, government and corporate identity markets.
The initial focus is on lowering the cost and improving the convenience associated with strong authentication, such as login tokens, security chips and smart cards.
“Threats to identity continue to plague online services, and passwords are vulnerable to attack,” said Michael Barrett, VP of Security Strategy at American Express and President of the Liberty Alliance. “With phishing, identity theft and Trojan-horses that record passwords growing ever more prevalent, it is imperative that stronger forms of authentication be available to ensure user identity and to increase user confidence and web service consumption.”
Strong authentication instills confidence that assertions from trusted partners are closely tied to user identities. Liberty’s focus will be to lower the total cost of strong authentication and improve convenience by creating specifications that address interoperability and enhancement of authentication processes. In addition, Liberty intends to standardize the lifecycle management stages of strong authentication devices and the identity credentials that they hold.
“Liberty has been a catalyst in development and adoption of identity standards and has a strong track record of working with other standards efforts to deliver cost-effective and interoperable solutions,” said Donal O’Shea, executive director of the Liberty Alliance Project. “Authentication is the foundation of identity services – as the leading identity management organization, it is only natural that Liberty drives a cross-industry effort around strong authentication.”
Liberty Alliance member companies participating in this authentication work represent leaders in a diverse range of identity markets such as telecom, mobile, financial, corporate, government and consumer. Because each of these markets views authentication from a unique perspective, Liberty Alliance and its members intend to cooperate with top standards bodies from these market verticals facilitate development of strong authentication guidelines and specifications that can be universally applicable across markets.
”Authentication remains a widespread industry issue,” said Earl Perkins, a security analyst at META Group. “An organization capable of (1) leveraging support from influential companies across industries and (2) developing and model that makes strong authentication convenient, affordable, and interoperable between infrastructures and authenticators; and (3) delivering it in time to be relevant to enterprises, is well positioned to drive widespread adoption.”
About the Liberty Alliance
The Liberty Alliance (www.projectliberty.org) is an alliance of more than 150 companies, non-profit and government organizations from around the globe. The consortium is committed to developing an open standard for federated network identity that supports all current and emerging network devices. Federated identity offers businesses, governments, employees and consumers a more convenient and secure way to control identity information in today’s digital economy, and is a key component in driving the use of e-commerce, personalized data services, as well as web-based services. Membership is open to all commercial and non-commercial organizations.
If you are interested in seeing the full list of Liberty Alliance members or are interested in becoming a member, please visit us at www.projectliberty.org.