Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates

Identity crisis in the U.S.?

Wednesday, May 6, 2009

Is there an identity crisis in the United States? Panelists on an identity roundtable at CTST conference in New Orleans seem to think there is an the solution is issuing high-level assurance credentials to individuals for identification online.

Peter Alterman, deputy associate administrator for technology strategy at the office of government wide policy at the General Services Administration, said that in the next five years 150 to 200 million high-assurance credentials will be issued to U.S. citizens. It won’t be the government that issues these IDs but the framework the government has created has set the groundwork for the technology that will be deployed.


Alterman wouldn’t say which agency would issue the credentials or how it would be used, but he did say there are activities in store for the next year around health care, the IRS and Social Security Administration.

Neville Pattinson, vice president of government affairs and standards at Gemalto, is the panelists who posited the “identity crisis.”

“We’re going see more of an emphasize on communities of people demanding better means of identity as they move into the digital world,” Pattinson says.

Health care is the market where the identification industry needs to focus. There’s a great deal of concern about health care,” Pattinson says. “Money is heading in that direction and this may be the coattails we live off of to create an identity infrastructure.”

Doug Simmons, vice president of consulting at the Burton Group Consulting Services, says the U.S. government’s Personal Identity Verification specification has paved the way for commercial companies to deploy smart cards. “Enough people are getting fed up with the identity theft and saying enough is enough,” he says “We’re smart people and we need to put the policies in place to take care of it.”

One of the major issues with the high-assurance credentials is who will issue them. Alterman says the government can’t do it because it will seem like a national ID program. But Simmons says the states are in a perfect situation to issue the credentials.

Brett McDowell, executive director of the Liberty Alliance, says the market needs to come up with a solution so individuals will be able to get a credential if they want one.

Pattinson has concern about this idea though. Who is liable if someone gets a fake credential and does something malicious? Private companies won’t accept the liability.” [end] 

The August meeting of the influential Government Smart Card Interagency Advisory Board (IAB) was recently held in Washington D.C. FIPS201.com was on hand to cover the event and has provided, as a service to the IAB and the smart card community, an audio recording of the presentations. Click on the link below to access a list of audio and accompanying PowerPoint slides (in pdf format).

read more »

It takes young adults–those between the ages of 18 and 24–some 132 days before they realize they’ve had their identity stolen. In that time, they’ve lost five times the amount of money compared to other age groups, according to Washington State University’s student newspaper.

read more »

Digital identity can be different things to different people. At the 2010 RSA Conference industry executives gave their definitions of what digital identity is and some of the challenges that exist when it comes to putting a digital ID system in place.

read more »

A simplified security application for organizations from Oracle is now available. The Oracle Identity Management 11g is designed for password management and strong authentication and authorization. Additionally the service works to extend the cloud computing environments which enables a single point of control for both on-premise and off-premise applications.

read more »

As part of a new partnership with RSA Secured Partner Program, Ping Identity has certified that their PingFederate technology is compatible with the RSA’s SecurID two-factor authentication solution. This collaboration will result in a comprehensive user-friendly solution to authenticate to a range of Cloud identity applications.

read more »

A partnership between idOnDemand and Directory Concepts could mean the streamlining of smart card issuance for buildings, computer login, electronic signatures, VPN and encryption management.

read more »