Microsoft tests identity technology in schools

Scott Charney, corporate vice president of Microsoft's Trustworthy Computing Group, delivers a keynote address at RSA.

(Credit: James Martin/CNET)

SAN FRANCISCO--Microsoft is testing some of its new identity-based security technology in Washington state schools, where students and teachers will be able to securely access grades and class schedules, a Microsoft executive said in a keynote address Tuesday at the RSA 2009 security conference here.

The software company is working with the Lake Washington School District-- comprised of 50 schools and nearly 24,000 students in and around Microsoft's home town of Redmond--to deploy its Geneva claims-based identity platform, said Scott Charney, corporate vice president of Microsoft's Trustworthy Computing Group.

Students and parents will bring identification information into the school to prove children's identities, and the students will then get small notebook PCs with identity information cards on them to be used for accessing online education materials.

Microsoft announced the Geneva technology last week when it announced its first hosted security service under the Forefront brand.

A former leading federal prosecutor for computer crimes at the Justice Department, Charney left PricewaterhouseCoopers to join Microsoft as chief security strategist in 2002.

"Initially my friends laughed because I used 'Microsoft' and 'security' in the same sentence," he quipped. Microsoft has made progress since then, he added.

In addition to improving the security of Windows, Microsoft offers SmartScreen technology in Internet Explorer 8 that allows users to block malware from being downloaded onto their computers. The company also shares its Software Development Lifecycle guidelines and tools for building secure software with outside developers and firms.

Current mechanisms used by Web sites to protect consumer data by requiring people to prove they are authorized to access sites are broken, Charney said. Web sites ask for personal information, like city of birth and mother's maiden name, "but those secrets aren't secret at all," he said. "We need a different model for thinking about identity."

All of Microsoft's security news is designed to further the company's mission to provide what it calls "End to End Trust" for people using the Internet, regardless of what data they are working with, what hardware they are using, and where they are located.

Key to the End to End Trust initiative, which was launched at RSA last year, features a trusted stack of components that authenticate everything from the user to the data and applications.

In addition to software features for authentication and identity, the Windows 7 beta includes support for Trusted Platform Modules that provide encryption at the hardware level.

In discussing all the threats and risks Internet users face today, Charney revealed what he called "Charney's Theorem"--"there's always a percentage of the population up to no good."

[zmb09]

Wish I could get that at my school district that uses macs and is right next to lake washington

[tm_anon]

So instead of having to do the research on your child, all the bad guy has to do is steal the kids laptop and he's off.

Kidnappers just need to hack into the kids computer which, since I'm betting these are going to use WiFi won't be that difficult to do for multiple kids, and they don't even have to do much research, pick out half a dozen kids with fairly well-off parents and just take your pick.

It's a good idea but there are way too many security risks associated with it.

[monkeyfun14]

@tm_anon

I know cause so much damage can be done by seeing online education materials and report card grades?

[Dalkorian]

Personally I have more faith in software that doesn't feel the need to throw the word "trust" as me like a sales pitch every time I turn around. Especially when history proves that trust would be misplaced.

[tm_anon]

@monkeyfun14

"Students and parents will bring identification information into the school to prove children's identities, and the students will then get small notebook PCs with identity information cards on them to be used for accessing online education materials."

If all they're accessing is report card grades and education materials, why would they need to bring proof of identity?

And education materials depend on which class they're in which in turn tells you exactly where they are at all times.

Since they're getting a small notebook PC with identity information cards, that means a WiFi connection is all that's required before you know everything about every child in that school without setting foot inside.

Like I said, the basic idea is good but there are way too many security risks.

[Wake_Up_America]

I have a theorem for you.... "Locks only keep the good people out"

Just another fine example of the gestapo mentality of this country, what happened to american dreams and apple pie?

[bryanotis1]

Thanks for the coverage Elinor -

Intand was happy to be a part of this keynote and is looking forward to the future of Microsoft's Geneva Server.

Intand's product, Tandem for Schools, helps district admins manage the district and run the schools. Further, it helps connect the events going on at a school with the parents, students, teachers and local community by integrating directly with digital calendars, like Outlook, via ical feeds. Users can also get RSS feeds, email updates when events change and directions to the event.

Security is important to everyone, and we here at Intand are dedicated to making sure that we are providing an easy, but safe, way for a school district to connect with their community.

Also, with the help of the Geneva Server, it becomes much easier for the IT staff at a district to manage the different identities and levels of permissions across their entire staff and community. This is a HUGE win for those at a school district in the IT department.

We really enjoy CNET around the office, keep up the great work.


Best,

Bryan Otis
Intand.com
President / Co - Founder