Daon led team to provide solution for US Cyber Security Initiative
27 September 2012 10:58 GMT

Daon has been selected to jumpstart the “Identity Ecosystem” envisioned by the United States National Strategy for Trusted Identities in Cyberspace (NSTIC) initiative. Daon will work with a team which includes Purdue University, AARP, PayPal and the American Association of Airport Executives (AAAE).

The NSTIC project focuses on improving the privacy, security, and convenience of sensitive online transactions. Under a cooperative agreement with the National Institute of Standards and Technology (NIST), the Daon-helmed team will implement multiple NSTIC pilot projects enabling subscribers to securely conduct online transactions.

In parallel with the NSTIC Identity Ecosystem pilots, Purdue University will conduct research into privacy, security, performance, usability, accessibility, and user acceptance aspects of Daon’s real-world implementation of the system, including the use of privacy-enhancing technologies to better manage users’ disclosure of information while still providing identity assurance. The Daon Team will share results with the NSTIC Program Office and the NSTIC Steering Group to help inform the evolving Identity Ecosystem based on actual usage of this unique cyber security solution.

The Daon Team pilots will utilize IdentityX, a solution which uses the end user's mobile phone or tablet and different combinations of security options to provide identity assurance. Identity can be verified using multiple authentication methods including proof of possession of the phone, digital certificate, PIN/Password, geolocation, and voice and facial recognition. The selection of methods used can vary depending on the sensitivity and risk of the transaction.  For example, a simple transaction with low risk such as transferring a small sum between bank accounts could require just phone possession plus the entry of a PIN; whereas a transaction with higher risk, such as transferring a large sum, could require PIN and face and voice matching along with GPS to confirm the user’s location.

The Purdue team combines expertise from four areas: the Biometric Standards, Performance and Assurance Laboratory (BSPA), the Cyber Center in the university's Discovery Park, the Center for Education and Research in Information Assurance and Security (CERIAS), and Information Technology at Purdue (ITaP).