Get Smart about Business Spending
Equifax offers its first I-card
Online information cards or I-cards such as this one from Equifax may one day be used instead of passwords to access Web sites.
Equifax on Thursday introduced it's first information card or I-card, Equifax Over 18 card. I-cards are envisioned to be the online equivalent of a driver's license, passport, or similar ID. The basic idea is that customers would have an electronic wallet with various information cards that would allow customers to bypass typing in user names and passwords.
In this case, the Equifax card proves--via a trusted third party--that you are over 18 when accessing specially marked Web sites. "With fraud and identity theft on the rise, companies need better, more secure ways to conduct transactions online and take their identity management practices to the next level," said Steve Ely, president of Equifax Personal Information Solutions, in a statement.
In June Equifax was among a handful of companies behind the new Information Card Foundation. Other companies include Google, Microsoft, Novell, Oracle, and PayPal. For example, Microsoft's new Geneva project relies upon ICF standards. The Equifax card is one of the first I-cards based on the ICF standard that users can sign up and use.
In the near future, the foundation hopes that I-cards will contain personal data such as profile, purchase preference, payment, or verified identity information, as well as password information. Kim Cameron, an identity and access architect for Microsoft, told CNET News in June that the cards really do improve online security. "There's this endless digital baptism of filling in forms and logging in everywhere, and it creates a wonderful environment for the criminal element through phishing attacks and what have you because on the Internet no one does know you are a dog."
To produce the card, Equifax worked with Parity, an information management company that last month announced an online card site based on open ID card standards.
Those interested in trying out the I-card can sign up with Equifax or use Parity's Azigo I-card management software to enable one-click sign-in and identity verification. One demo site for the service requires an Equifax Over 18 I-card just to watch the video (alas, no nudity here, just an explanation of the card's uses).
As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments. 
- by RUIDd November 20, 2008 8:04 AM PST
- The problem information cards are trying to solve is the privacy problem. For example, if I want to buy a cell phone online today, I need to go through a credit check. This means giving personally identifying information to the wireless provider?s site and answering challenge questions in order to get approved. I?ve now given Verizon Wireless (for example) WAY more information than they need to do business with me.
- Like this Reply to this comment
-
(7 Comments)Information cards minimize disclosure. Now, all I need to do is show Verizon my Equifax card to prove I?m legit. And because Verizon trusts what Equifax says, they get what they need to do business with me. And they don?t get my SSN or date of birth. That?s big.
The issue isn?t whether Equifax has data about me. They do and they will. The issue is that with information cards, I can use a card that says ?he?s ok? while the data stays safely inside Equifax?s databases ? not Azigo?s (information card selector or "wallet") and not Verizon?s database.