Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Endpoint

12/3/2018
12:40 PM
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
100%
0%

Microsoft, Mastercard Aim to Change Identity Management

A new partnership wants to improve how people use and manage the virtual identities that govern their lives online.

Microsoft and Mastercard have formed a partnership to change the way people use and manage their digital identities, the duo announced this morning.

Identity management is an old issue in need of new solutions as people rely on the internet to manage every part of their lives. Online identity verification still requires physical or digital proof from a central party: proof of address, driver's license or passport number, for example. The more accounts someone has, the more usernames and passwords they have to remember.

And the burden to users doesn't stop at passwords. The identity verification process is growing in complexity as companies find new ways to ensure the person logging into an account is who they claim to be. Microsoft and Mastercard want to provide a more secure and efficient way of doing that.

Their idea is to create a service designed to let people enter, control, and share their digital identity data with others, on the devices they use every day. A universally recognized digital identity could make it easier and more seamless for people to work with businesses.

This project, which brings together Microsoft's identity technology and Mastercard's digital transaction capabilities, will serve as the foundation for new Mastercard services run on Microsoft Azure, officials explain in a blog post on the news. The two are teaming up with banks, mobile network operators, and government organizations to make the idea reality.

Microsoft has been building on this idea of identity ownership, arguing that everyone should have their own digital identity within which they can privately store personal information. For businesses, this means creating ways to interact with customers, partners, and suppliers while minimizing security risks. Earlier this summer, the company created a new bug bounty program to reward researchers who found vulnerabilities in its identity services.

The potential for this "universal identity" concept crosses industries. In financial services, a single identity could accelerate the process of creating a new account or securing a loan. Shoppers browsing e-commerce sites could benefit from more personalized experiences and faster transactions across payment types, devices, and service providers.

Aside from financial opportunities, a single identity could simplify tax filing, passport applications, support payments like Social Security, and other government processes. Email, social media, entertainment services, and other lifestyle platforms could also be simplified.

Microsoft and Mastercard think their service could solve several challenges in the identity space. For starters, there are more than one billion people who aren't officially recognized, the majority of whom are women, children, and refugees. A digital identity could prove invaluable in helping people obtain health, financial, and social services they may not otherwise access.

"Today's digital identity landscape is patchy, inconsistent and what works in one country often won't work in another," says Ajay Bhalla, president of cyber and intelligence solutions at Mastercard, in a statement. "We have an opportunity to establish a system that puts people first, giving them control of their identity data and where it is used."

Related Content:

Kelly Sheridan is the Staff Editor at Dark Reading, where she focuses on cybersecurity news and analysis. She is a business technology journalist who previously reported for InformationWeek, where she covered Microsoft, and Insurance & Technology, where she covered financial ... View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
jenshadus
100%
0%
jenshadus,
User Rank: Strategist
12/4/2018 | 9:39:46 AM
PCI and security
I wonder how this will affect PCI and how other CC companies will adapt the new technology.  Guess it all depends on royalties and such.  Then there is iPhone versus the google phones to content with.  This looks like it might be an uphill battle.  Unless they get everyone to play the game it doesn't do the end user much good,
ebyjeeby
100%
0%
ebyjeeby,
User Rank: Strategist
12/4/2018 | 2:05:09 PM
Re: PCI and security
Agreed. Wait for Amazon and VISA to unviel a competing product.
Jessica Rochelle
50%
50%
Jessica Rochelle,
User Rank: Apprentice
12/10/2018 | 12:16:08 AM
Re: PCI and security
I am very much pleased with the contents you have mentioned. I wanted to thank you for this great article. 
tDi443
50%
50%
tDi443,
User Rank: Strategist
12/5/2018 | 1:45:03 AM
BLOCKCHAIN
?
Agent Aix les Bains
50%
50%
Agent Aix les Bains,
User Rank: Apprentice
12/7/2018 | 9:45:37 AM
Re: BLOCKCHAIN
What do you mean ?
tDi443
100%
0%
tDi443,
User Rank: Strategist
12/7/2018 | 12:20:49 PM
Re: BLOCKCHAIN
I'm just wondering if these companies will be utulizing blockchain technology in this project. Seems to me like it would be a no-brainer. Ah, but what do I know?
tDi443
100%
0%
tDi443,
User Rank: Strategist
12/7/2018 | 12:55:57 PM
Re: BLOCKCHAIN
It looks like they are going with AI based sevices for this program. I would be extremely leary of the possiblity for massive privacy abuses by these stakeholders. That's even if they can manage to keep it secure from the hands of criminals and state sponserd hackers. My biggest fear is that this technology would ever fall into the hands of any government.  This identity managerment sceme seeks to create a Universal Online Identiy for everone that uses thier products and services. So basically these corporations will OWN our Cyber-DNA. Very Dangerous concept. I would feel much more  comfortable with a blockchain type solution that could at least protect some sort of anonimity and privacy. It would most likely be a much more secure soolution to the problem of identity managment. 
tDi443
50%
50%
tDi443,
User Rank: Strategist
12/10/2018 | 3:18:41 PM
Re: BLOCKCHAIN
https://www.ccn.com/mastercard-applies-for-new-patent-for-anonymous-blockchain-transactions-a-regulated-bitcoin-tumbler/
hungthaixa
50%
50%
hungthaixa,
User Rank: Apprentice
12/7/2018 | 11:18:02 PM
Good article
I like this article. Thanks to that I understand a lot
COVID-19: Latest Security News & Commentary
Dark Reading Staff 11/19/2020
New Proposed DNS Security Features Released
Kelly Jackson Higgins, Executive Editor at Dark Reading,  11/19/2020
How to Identify Cobalt Strike on Your Network
Zohar Buber, Security Analyst,  11/18/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: A GONG is as good as a cyber attack.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-5641
PUBLISHED: 2020-11-24
Cross-site request forgery (CSRF) vulnerability in GS108Ev3 firmware version 2.06.10 and earlier allows remote attackers to hijack the authentication of administrators and the product's settings may be changed without the user's intention or consent via unspecified vectors.
CVE-2020-5674
PUBLISHED: 2020-11-24
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2020-29002
PUBLISHED: 2020-11-24
includes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS via a qbfind message supplied by an administrator.
CVE-2020-29003
PUBLISHED: 2020-11-24
The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Special:CreatePoll or Special:UpdatePoll.
CVE-2020-26890
PUBLISHED: 2020-11-24
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into the r...