Endpoint

12/3/2018
12:40 PM
Connect Directly
Twitter
LinkedIn
Google+
RSS
E-Mail
100%
0%

Microsoft, Mastercard Aim to Change Identity Management

A new partnership wants to improve how people use and manage the virtual identities that govern their lives online.

Microsoft and Mastercard have formed a partnership to change the way people use and manage their digital identities, the duo announced this morning.

Identity management is an old issue in need of new solutions as people rely on the internet to manage every part of their lives. Online identity verification still requires physical or digital proof from a central party: proof of address, driver's license or passport number, for example. The more accounts someone has, the more usernames and passwords they have to remember.

And the burden to users doesn't stop at passwords. The identity verification process is growing in complexity as companies find new ways to ensure the person logging into an account is who they claim to be. Microsoft and Mastercard want to provide a more secure and efficient way of doing that.

Their idea is to create a service designed to let people enter, control, and share their digital identity data with others, on the devices they use every day. A universally recognized digital identity could make it easier and more seamless for people to work with businesses.

This project, which brings together Microsoft's identity technology and Mastercard's digital transaction capabilities, will serve as the foundation for new Mastercard services run on Microsoft Azure, officials explain in a blog post on the news. The two are teaming up with banks, mobile network operators, and government organizations to make the idea reality.

Microsoft has been building on this idea of identity ownership, arguing that everyone should have their own digital identity within which they can privately store personal information. For businesses, this means creating ways to interact with customers, partners, and suppliers while minimizing security risks. Earlier this summer, the company created a new bug bounty program to reward researchers who found vulnerabilities in its identity services.

The potential for this "universal identity" concept crosses industries. In financial services, a single identity could accelerate the process of creating a new account or securing a loan. Shoppers browsing e-commerce sites could benefit from more personalized experiences and faster transactions across payment types, devices, and service providers.

Aside from financial opportunities, a single identity could simplify tax filing, passport applications, support payments like Social Security, and other government processes. Email, social media, entertainment services, and other lifestyle platforms could also be simplified.

Microsoft and Mastercard think their service could solve several challenges in the identity space. For starters, there are more than one billion people who aren't officially recognized, the majority of whom are women, children, and refugees. A digital identity could prove invaluable in helping people obtain health, financial, and social services they may not otherwise access.

"Today's digital identity landscape is patchy, inconsistent and what works in one country often won't work in another," says Ajay Bhalla, president of cyber and intelligence solutions at Mastercard, in a statement. "We have an opportunity to establish a system that puts people first, giving them control of their identity data and where it is used."

Related Content:

Kelly Sheridan is the Staff Editor at Dark Reading, where she focuses on cybersecurity news and analysis. She is a business technology journalist who previously reported for InformationWeek, where she covered Microsoft, and Insurance & Technology, where she covered financial ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
tDi443
50%
50%
tDi443,
User Rank: Apprentice
12/10/2018 | 3:18:41 PM
Re: BLOCKCHAIN
https://www.ccn.com/mastercard-applies-for-new-patent-for-anonymous-blockchain-transactions-a-regulated-bitcoin-tumbler/
Jessica Rochelle
50%
50%
Jessica Rochelle,
User Rank: Apprentice
12/10/2018 | 12:16:08 AM
Re: PCI and security
I am very much pleased with the contents you have mentioned. I wanted to thank you for this great article. 
hungthaixa
50%
50%
hungthaixa,
User Rank: Apprentice
12/7/2018 | 11:18:02 PM
Good article
I like this article. Thanks to that I understand a lot
tDi443
50%
50%
tDi443,
User Rank: Apprentice
12/7/2018 | 12:55:57 PM
Re: BLOCKCHAIN
It looks like they are going with AI based sevices for this program. I would be extremely leary of the possiblity for massive privacy abuses by these stakeholders. That's even if they can manage to keep it secure from the hands of criminals and state sponserd hackers. My biggest fear is that this technology would ever fall into the hands of any government.  This identity managerment sceme seeks to create a Universal Online Identiy for everone that uses thier products and services. So basically these corporations will OWN our Cyber-DNA. Very Dangerous concept. I would feel much more  comfortable with a blockchain type solution that could at least protect some sort of anonimity and privacy. It would most likely be a much more secure soolution to the problem of identity managment. 
tDi443
50%
50%
tDi443,
User Rank: Apprentice
12/7/2018 | 12:20:49 PM
Re: BLOCKCHAIN
I'm just wondering if these companies will be utulizing blockchain technology in this project. Seems to me like it would be a no-brainer. Ah, but what do I know?
Agent Aix les Bains
50%
50%
Agent Aix les Bains,
User Rank: Apprentice
12/7/2018 | 9:45:37 AM
Re: BLOCKCHAIN
What do you mean ?
tDi443
50%
50%
tDi443,
User Rank: Apprentice
12/5/2018 | 1:45:03 AM
BLOCKCHAIN
?
ebyjeeby
100%
0%
ebyjeeby,
User Rank: Strategist
12/4/2018 | 2:05:09 PM
Re: PCI and security
Agreed. Wait for Amazon and VISA to unviel a competing product.
jenshadus
50%
50%
jenshadus,
User Rank: Strategist
12/4/2018 | 9:39:46 AM
PCI and security
I wonder how this will affect PCI and how other CC companies will adapt the new technology.  Guess it all depends on royalties and such.  Then there is iPhone versus the google phones to content with.  This looks like it might be an uphill battle.  Unless they get everyone to play the game it doesn't do the end user much good,
Higher Education: 15 Books to Help Cybersecurity Pros Be Better
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/12/2018
Worst Password Blunders of 2018 Hit Organizations East and West
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/12/2018
2019 Attacker Playbook
Ericka Chickowski, Contributing Writer, Dark Reading,  12/14/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
The Year in Security 2018
This Dark Reading Tech Digest explores the biggest news stories of 2018 that shaped the cybersecurity landscape.
Flash Poll
[Sponsored Content] The State of Encryption and How to Improve It
[Sponsored Content] The State of Encryption and How to Improve It
Encryption and access controls are considered to be the ultimate safeguards to ensure the security and confidentiality of data, which is why they're mandated in so many compliance and regulatory standards. While the cybersecurity market boasts a wide variety of encryption technologies, many data breaches reveal that sensitive and personal data has often been left unencrypted and, therefore, vulnerable.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-19790
PUBLISHED: 2018-12-18
An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restricti...
CVE-2018-19829
PUBLISHED: 2018-12-18
Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known.
CVE-2018-16884
PUBLISHED: 2018-12-18
A flaw was found in the Linux kernel in the NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel id and cause a use-after-free. Thus a malicious container user can cause a host kernel memory corruption and a system ...
CVE-2018-17777
PUBLISHED: 2018-12-18
An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices. If the PIN of the page "/ui/cbpc/login" is the default Parental Control PIN (0000), it is possible to bypass the login form by editing the path of the cookie "sid" generated by the page. The attacker will have acc...
CVE-2018-18921
PUBLISHED: 2018-12-18
PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.