National ID? How about a global ID?

Maggie Biggs   Today’s Top Stories   or  Other Security Stories  

Winning Enterprise Authentication: 5 Key Steps for Success Dynamic Data Center and Virtualization Drives Operational Excellence at Emory Healthcare Bringing Order and Security to your Mobile Workforce: Corporate Mobility Policy and Device Management File Integrity Monitoring: Secure Your Virtual and Physical IT Environments Effective Security with a Continuous Approach to ISO 27001 Compliance Optimizing Infrastructure Control Computerworld Technology Briefing: Intelligent Users Use Business Intelligence Virtual Reality SaaS Solutions for Remote Systems Management Sign up to receive Security Resource Alerts

August 10, 2007 (InfoWorld) -- The Federation for Identity and Cross-Credentialing Systems (FiXs) -- a little-known group of nonprofits, government contractors, commercial entities, and government agencies -- has just unveiled a first-of-its-kind global infrastructure to support distributed, integrated identity management and cross-credentialing across organizations. The implementation combines several existing security technologies along with a set of trusted models, policies, and operating rules to insure the accurate identity of personnel accessing physical sites or logical systems.

Already in a pilot mode at a handful of government agencies and defense contractors, the FiXs identity management initiative does not have a hard date for broad deployment, although the impediments do not appear to be technical. "The cultural gap with the public in general is still too wide," said Dr. Mike Mestrovich, president of FiXs. "I think there would have to be a public consensus to move us in that direction and I don't see that happening until at least 2009 or beyond."

Founded in 2004 and based in Fairfax, Va., FiXs counts among its members the Department of Defense, Wells Fargo, Lockheed Martin, EDS, and several others. Modeled after secure electronic payment systems and initially implemented by the DOD's Defense Manpower Data Center (DMDC), the FiXs initiative meets the objectives set forth in the October 2006 Homeland Security Presidential Directive (HSPD-12).

"Until now, cross-bordering policies between government and industry had not been established," said Mary Dixon, director at the DMDC. The FiXs implementation does not assign roles, grant or deny access, or otherwise act as a gatekeeper. Rather, the mission of FiXs is simply to authenticate the identity of participants within its member organizations. Once verified by FiXs, individual site managers and systems administrators assign or designate access controls based on the role of the individual and the policies of a given organization.

FiXs' capabilities allow it to cross between both public and private sector organizations using a federated trust model. The implementation is available worldwide in local or remote settings via both wireless and wired environments. Access is available in real time. An individual's specific identity data remains within their vetted source organization.

"By its very nature, the federated solution aids in privacy because there is no central database and individual data can be stored in only one [vetted] place," Dr. Mestrovich said. Yet the distributed design and cross-organizational model found in the FiXs implementation does offer the possibility of a future national or international identity management system that might cross borders and organizational boundaries. "The federated approach can actually take the place of a mandated National ID system," Dr. Mestrovich stated.

Still, the head of FiXs does not see a national or international identity management implementation as a near-term reality for a couple of reasons. First, no schedule has been defined to implement such a system on the federal, state, or local level, let alone among the broader private sector. "We are speaking to a couple of States about using FiXs, but no timetable has been set," Dr. Mestrovich said.

Continued...
1 | 2 | NEXT  

Reprinted with permission from

For more enterprise computing news, visit Infoworld.com
Story copyright 2006 InfoWorld Media Group, Inc. All rights reserved.

Print this Story

Send Us Feedback

E-mail this Story

Digg this Story

Slashdot this Story

"So first there is the Twitter phishing attack, and now an 18-year-old hacker gets into their admin tools and does..." Read more... "The official website of major league baseball, mlb.com, is pushing malicious software according to Alex Eckelberry of Sunbelt Software...." Read more... Read more Security posts or See all Blogs

Report: Microsoft to do free Windows 7 upgrades Intel to cut Q4 forecast, cites weak demand CES: Consumer electronics to stay ahead of other sectors in recession More top stories...

CheckFree warns 5 million customers after hack Asus debuts S121 netbook with Windows 7 and 512GB SSD Apple unveils new MacBook Pro, iLife/iWork suites at Macworld

The 9 hottest skills for '09 The downturn has softened the IT talent market but done little to weaken demand for SAP, .Net and other technical skills. Fast fixes for common PC problems Every computer user hits a speed bump now and then. Here are some speedy, simple solutions to hardware, software, network, Internet and mobile-device crises. Apple's 5 biggest moments in 2008 From the iPhone 3G to 'unibody' MacBooks, 2008 was a standout year for Apple. Hands-on Linux: New distro versions push the envelope We've got reviews and videos of the new Ubuntu 8.10, Fedora 10 and openSUSE 11.1. Windows 7 Get the latest news, reviews and more about Microsoft's newest desktop operating system More Continuing Coverage Windows 7 Voting Technology Google's Chrome browser Economy in turmoil: Latest news and tips iPhone 3G Bill Gates moves on Windows Vista A to Z Mac A to Z 2008 Salary Survey Find wage data for 50 IT job titles. More Special Reports 2009 Premier 100 IT Leaders 2008 Premier 100 IT Leaders 2007 Premier 100 IT Leaders 2008 Best Places to Work in IT 2007 Best Places to Work in IT 2008 Salary Survey 2007 Salary Survey 2006 Salary Survey 2008 IT Forecast 2007 IT Forecast 40 Years of Computerworld Top 12 Green-IT Users The FAQs About Going Green IT Schools to Watch iPhone: One Year Later Global Mobile Your Next Data Center Management: Reinventing IT Stop Data Leaks Web 2.0 Security Surviving Disasters Managing Storage Virtualization The Lean Storage Machine Storage on Trial Can Web 2.0 Save BI? Bypass These BI Potholes All Zones Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone The Enterprise Search Zone Software as a Service Zone The Security Zone See your link here

Process Automation with Symantec Process Automation with Symantec View this new webcast today! Go to the webcast  Computerworld Executive Bulletin: Building a Robust Antivirus Defense Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing  Creating a green data center to help reduce energy costs and gain a competitive advantage Download this new white paper today! (Source: VMware) With today's rapid IT growth, companies are looking to consolidate datacenter operations to achieve space and cost savings. And as energy costs continue to rise, datacenter efficiency becomes even more important. This IBM report details how companies are reducing energy usage and costs to gain a completive advantage. Download this white paper  White Papers Read up on the latest ideas and technologies from companies that sell hardware, software and services. NetApp and VMware Virtual Infrastructure 3 Storage Best Practices Go Green with IBM System x Servers and Intel Xeon Processors Total Cost Comparison: IT Decision-Maker Perspective on EMC, HP and Network Appliance Storage Solutions in Enterprise VMware Environments View more whitepapers

• Report: Microsoft to do free Windows 7 upgrades
• CheckFree warns 5 million customers after hack
• Intel to cut Q4 forecast, cites weak demand
• More top stories 

The Security Zone With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. Having the right policies, procedures and server configurations is critical... Learn more in The Security Zone See All Zones

Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day. New baits

"Turning information into a Competitive Advantage" Companies today are realizing that competitive advantage is harder to sustain when based solely on gains in productivity and cost efficiency. The focus is shifting to invest more in business optimization initiatives which rely on trusted information to develop new insights that deliver better business results. But how can this be done efficiently in a business environment across multiple applications and processes. The answer is an Information Agenda - an innovative approach to transforming business information into a strategic asset for competitive advantage. View this webcast now!  See more Webcasts

Dan Tynan: CES preview: The wireless revolution is finally here Two themes are clearly emerging: gadgets are going wireless in a big way, and everything is finally getting connected. ... [more]