Retail and Hospitality

Users safer online with CardSpace

12 December 2007

Experian and Microsoft have developed a proof of concept identity management service through Microsoft Windows CardSpace, which aims to streamline identity authentication and provide a safer and simpler way to pay online.

The identity management service will enable organisations to reduce the customer support resources needed for web-based activity, such as resetting forgotten passwords. The service also requires consumers to remember fewer verification details, thus enhancing their customer experience.

Experian's role is to verify both individuals and organisations via a straightforward registration and ID authentication process. Once this process is complete, organisations and individuals are able to communicate, with the assurance that both parties are legitimate.

Windows CardSpace runs on the consumer's computer desktop and acts as an identity selector to enable the individual to better control what information they choose to share online and with whom. For example, if an individual wants to renew their car insurance, they select their 'Experian Card', which would contain confirmation of identity details and age plus, in this instance, other facts that form part of money laundering legislation. Windows CardSpace then sends a request to Experian, the identity provider, to validate the identity of the website.

Once the requesting website is identified, Experian then forms and returns a signed and encrypted 'token', which contains a confidence level as to whether that person exists and is who they say they are to Windows CardSpace, and thence to the website.

"Consumers are becoming more concerned about who they are buying from and seeking reassurance that the organisation they are dealing with is legitimate," said Peter Brooker, director at Experian. "This service will work both ways, validating the consumer and the organisation's credentials, delivering a more secure and less stressful online experience for all.

"We believe there will be enormous demand for such a service from both organisations and consumers so we are now taking the proof of concept to the next stage and are already in discussion with a number of organisations. We will be in a position to demonstrate it to organisations, with the ultimate intention of launching an Identity Management Service in the near future."