Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates

OASIS forms team to address idenitity in the cloud

Monday, May 24, 2010

The OASIS standards consortium has formed a new committee to look at security in the cloud. OASIS Identity in the Cloud (IDCloud) Technical Committee was formed to address the growing difficulties the cloud computing systems are facing in terms of secure identity management.

The committee will focus on finding improvements to the existing identity management standards and investigate the need for those profiles to work cohesively together under those standards.


By conducting risk and threat analysis on a collection of use case scenarios, the committee aims to put forth a set of guidelines that will work to combat identity theft vulnerabilities. These policies will then hopefully be enforced along multiple domains.

Committee members include Alfresco, CA, Capgemini, Cisco, Cognizant, Boeing, eBay, IBM, Microsoft, Novell, Ping Identity, Red Hat, SafeNet, SAP, Skyworth TTG, Symantec, Vanguard, VeriSign and others. Additionally Microsoft and Red Hat are co-chairing the effort. [end] 

Hitachi ID Systems has worked to address the trends in the identity and access management market as reported in the February 2010 report “Market Trends: Identity and Access Management Market, Worldwide 2007-2013” from Gartner. The top trends were identified as: vendor consolidation, passwords acting as primary authentication, strong interest in cloud computing and software-as-a-service, internal controls as the key driver for ID management projects, and the fact that many of these projects continue to fail or run over-budget.

read more »

Microsoft has partnered with InCommon Affiliate for a program that’s responsible for providing the education community with a way to connect with affiliate partners who are able to help build the necessary underlying online infrastructure on campus that supports federated access.

read more »

After six months of internal testing, Cloudkick Web application has chosen Yubico’s USB-key multi-factor authentication product as an option for customer login. The YubiKey aims to add another layer of security for customers managing their cloud servers.

read more »

As part of a new partnership with RSA Secured Partner Program, Ping Identity has certified that their PingFederate technology is compatible with the RSA’s SecurID two-factor authentication solution. This collaboration will result in a comprehensive user-friendly solution to authenticate to a range of Cloud identity applications.

read more »

Ceelox has announced that it has finished development of a prototype application that would use Ceelox’s fingerprint biometrics to enable biometric authentication in online environments such as corporate intranets, cloud computing networks and commercial applications like online banking and other personal account-based access.

read more »

CA Technologies announces the purchase of Arcot Systems Inc. in an all-cash transaction of $200 million. The authentication and fraud detection software company is said to prevent fraudulent transactions for close to a million online credit transactions daily.

read more »