Jonathan Richards
Win tickets to the ATP finals
By her own admission, Anna Soames has no talent for remembering passwords.
Just to operate day-to-day, though, the London-based accountant needs no fewer than eight: three for work, another three for separate bank accounts, two for e-mail addresses she keeps, and one for her post-graduate university course. Each invariably has its own login.
“I generally go for a variation of my dog’s name,” Ms Soames, 29, said. “But sometimes that’s not long enough, so I have to add numbers after it, and then I forget which numbers, and so I end up writing them all down in the back of my diary – which kind of defeats the purpose, I guess.”
Ms Soames is one of millions of internet users for whom the difficulty of remembering numerous logins and passwords – and the likelihood of forgetting them – is a source of increasing annoyance.
The problem of "login-itis" is, however, being addressed by several organisations which are developing what are known as ‘ID management systems’ – effectively password aggregators that will allow computer users to adopt a single login and password for all internet-based activities.
“The problem with the net is it was designed without a way for users to know the true identity of a site they were connecting to, which has led to phishing and ID fraud,” Steve Plank, the head of digital identity at Microsoft, said.
Traditionally internet retailers such as Amazon have relied on their own authentication systems to make sure that a user logging on to the service is who they say they are.
What Microsoft’s new ID management system, called Cardspace, promises is to use existing services with whom a user is registered to authenticate that user to new services – removing the need for multiple logins.
When a user goes to a login page, instead of them seeing the usual boxes for name and password, a different screen would appear showing the services with which they are already registered, such as a banks, Amazon and e-mail accounts.
The site then decides whether to trust that user based on his or her existing registrations. The idea is that if the ID the user has provided is good enough for a bank, for example, then it will be good enough for whatever site they are trying to log onto, Mr Plank said.
Another system, called OpenID, which has recently been embraced by AOL, works on a similar premise. It requires fewer components of the user’s identity for authentication, which has led some to criticise it for being unsafe.
“The advantage to customers is clear – you get a single sign-on, you don't have to repeatedly give the same information like address and post code to multiple sites, and, provided the security is good, you can't get phished,” Ben Laurie, an independent cryptography expert, said.
Mr Laurie said that Cardspace, which demands a greater amount of information about the user and also uses cryptography, was currently a more secure offering than OpenID. He added that whichever system eventually succeeds, password management was “a coming thing”.
Dick Hardt, the chief executive of Sxip Identity, a Canadian company which co-wrote the OpenID protocol, said OpenID was no less safe than Microsoft's system. Its role, he said, was to provide the standard by which websites requiring authentication talked to one another, rather than to set security standards.
"The way in which you prove who you are to your OpenID provider – be that bio-metrics, voice detection, or whatever - would remain up to the user," he said, "and is not one of the goals of OpenID."
Microsoft, which has incorporated Cardspace into its new Vista operating system, said that it was in talks with all the major banks and internet retailers about introducing its software, but that none so far had signed up.
Some campaigners have expressed concern that proprietary programs for managing online identities place too much power in the hands of the companies that own them. Rufus Pollock, director of the Open Knowledge Foundation, a group which promotes open access to software, said he was more comfortable with OpenID's approach.
“The great thing about OpenID, as opposed to Microsoft Passport, the ID system which can be used by Hotmail customers, is that no-one owns the data,” he said. Microsoft said that Cardspace does not hold information centrally, and simply facilitates the transfer of data.
Industry sectors news at a glance. Interactive heatmap, video and podcast
Everything the Business Traveller needs to know to make a better trip
Get ready for the winter sports season, with our resort guides and snow reports
We are backing British business, what is the confidence of the nation and what businesses are succeeding?
Growing demand for energy, oil that is harder to reach and the rise of carbon dioxide emissions. We examine the energy challenge
Enjoy further reading from Travel to Fashion, Business to Sport, discover more
Shortcuts to help you find sections and articles
36-month car lease
on contract hire for
£359.99 plus VAT pm
12 months for the price of 11 and a 5% discount.
Offer ends 31/11/09
The UK's leading alternative to showroom finance.
Finance packages tailored to your needs.
Minimum loan of £15,000
Car Insurance
£12,578 per annum
The Independent Housing Ombudsman
London
Competitive
Barclaycard
Not Specified
The Sheppard Trust
London
£80-95,000
Clay McGuire Executive Selection
Moments from Battersea Park.
For sale with Winkworth.
See your free Experian credit report beforehand
Book now & save over £100pp.
11 cool resorts, lowest prices... Early Booking offers 15 Nov.
20% off selected Azores holidays taken in October with Sunvil Discovery
Get covered on your travels with a superb range of policies at great prices. Visit InsureandGo.com
World Class Golf, Spa and preferential Beach Club. Private estate overlooking West Coast
Villas from £275 per night inclusive of Golf
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Globrix Property Search | Milkround
Copyright 2009 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.
Your Comments
Order By: