 |
Identity
Assurance
Protecting Identities Throughout
the Lifecycle
of a Trusted Relationship
Traditional
identity authentication solutions are expensive and highly unsuited for mass
deployment. Anti-virus
software, personal firewalls and intrusion detection systems are limited in their
ability to stop today’s sophisticated hackers and scam artists because these
utilities focus on protection of the network rather than the identity of the
end user. In addition, protecting a user’s identity requires a methodical approach
that evolves through the relationship. Protecting the identity of both an end-user
and/or a computing device therefore requires an end-to-end approach that provides
total assurance across the entire lifecycle of a trusted relationship. Such
an approach must leverage the following assurances: |
 |
Identity
Verification
The legitimacy and true identity of
an end user or applicant needs to be
verified upon signing up for a new
or existing service or accessing a
corporate network. Verification needs
to be a onetime process upon establishment
of the trusted relationship. |
| |
|
 |
Identity
Authentication
Continuing user access needs to be
authenticated to verify the real identity
of an end user. Strong Authentication
should be used to further enhance security. Authentication
remains a recurring process along the
life cycle of a trusted relationship. |
| |
|
 |
Identity
Protection
A user’s credentials require
end-to-end protection to prevent thieves
from accessing it. Protection is a
continual process throughout the relationship. |
|
|

|
 |
Verifies the identity
of unknown user which is useful in financial industry
|
 |
 |
 |
Authenticate the identity
of a known user via 'Out-of-Band' Strong Authentication
methodology |
|
|
|