Light Reading

Verizon Launches QR Code Security Solution

Carol Wilson
8/26/2014
50%
50%

Verizon is introducing a new approach to securing personal information used online that goes beyond passwords. A QR code login on participating websites will allow a user to gain access to the site or application by scanning the code without entering a user name or password.

Verizon Enterprise Solutions has created a cloud-based infrastructure behind the QR code approach and is targeting both websites and e-commerce companies that want to let consumers access their sites more securely and businesses who want to allow employees to access corporate data without the concern that their compromised personal information will, in turn, compromise corporate data.

The core problem is that hackers have been able to repeatedly breach websites and capture user data, including names and passwords, says Tracy Hulver, chief identity strategist for Verizon. Since many consumers use the same password repeatedly on multiple sites, those breaches compromise the overall system's security, and increasingly erode consumer confidence.


Learn more about mobile security on our dedicated channel here at Light Reading.


"Our data breach investigation report shows that 80% of breaches were a direct result of weakened credentials -- either lost or stolen passwords, hacked information or weak passwords," he notes. No other single factor plays as significant a role in data breaches.

It would make sense to a second step -- or second factor, as it's known in the security world -- but the issue there is consumer resistance. Online merchants know that if consumers have to wait to get a pin code via phone, email or text, there is a chance they will abandon the sales process and find a faster, if less secure site, Hulver notes. So what Verizon set out to do is to find a more secure process that is easy for consumers to use.

Here's how it works: Consumers register for a Verizon Universal Services ID, either through their workplace or a participating website, and can then download a mobile app to their smartphone that will scan the codes that appear dynamically on the appropriate website.

Verizon is hoping the approach catches on, Hulver says, and he points out it is carrier-independent and doesn't depend on connections to Verizon's network. Verizon is participating in organizations that are looking at security standards but a standards-based approach will take longer to develop, he adds.

"If you look at the companies that are in the best position to solve these problems, telcos in general are in a great position," he says. "We know how to protect critical infrastructure. Us being Verizon, and on the leading edge, we are in a good position to solve these real-life problems, which are not just about security but also about ease of use."

Verizon launched the news in its blog and explains it in this video.

— Carol Wilson, Editor-at-Large, Light Reading

(17)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View        ADD A COMMENT
Page 1 / 2   >   >>
pcharles09
50%
50%
pcharles09,
User Rank: Light Beer
8/31/2014 | 10:36:55 PM
Re: Nice use of QR codes
@brooks7,

It's popular & they're riding the wave. It'll soon get tired & get replaced by the next big thing.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/27/2014 | 9:26:28 AM
Re: Nice use of QR codes
Pcharles, Agreed. Just don't see much in the way that QR codes add to that mix. seven
pcharles09
50%
50%
pcharles09,
User Rank: Light Beer
8/27/2014 | 12:31:56 AM
Re: Nice use of QR codes
@brooks7,

There's lots of good 3rd party solutions for multi-factor authentication nowadays, including mobile apps for portability.
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/27/2014 | 12:28:37 AM
Re: Nice use of QR codes
As time moves on, smart phones will become the norm. So apps that can supply 2 factor authentication will still be really useful.
thebulk
50%
50%
thebulk,
User Rank: Light Sabre
8/26/2014 | 10:47:56 PM
Re: Nice use of QR codes
I know more than a few rather Internet savvy people who do not have a smart phone. So not sure that's a valid assumption.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/26/2014 | 6:55:33 PM
Re: Nice use of QR codes
The challenge with QR codes is suddenly you have to change your site to adapt them as an auth mechanism.

With a Digital Token, all you have to do is add a single line.

You are correct that multi-factor auth is considered clumsy no matter what.  But the user either wants it or doesn't.

The QR code scanner only seems better if one built it in to a mobile app auth process.  Which means that the mobile app would have to have a qr code scanner built in and the person would have to have the qr code on a keychain or something similar.

seven

 
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/26/2014 | 6:16:26 PM
Re: Nice use of QR codes
Ah a WOW fan huh @seven? But seriously,  interesting about the digital tokens but it is still another app.  Whether it is QR or digital tokens it is still another app.  I don't think that this is an either or situation but rather a whatever suits the application both literally and figuratively in a way that users will embrace 2nd factor authentication.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/26/2014 | 6:09:47 PM
Re: Nice use of QR codes
You know there are software apps for digital tokens right?

No need for a QR code or any funky thing.  Just load up that app and use it as your 2nd factor.  That way there is no need to have such a code linked to your website....just digital token support.

Blizzard has this available for World of Warcraft for example.

 

https://eu.battle.net/support/en/article/battlenet-authenticator

 

seven

 
Atlantis-dude
50%
50%
Atlantis-dude,
User Rank: Light Sabre
8/26/2014 | 5:55:48 PM
Re: Why VZ?
The role that telcos play in this is arguable. An app per website wouldn't help much either.
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/26/2014 | 4:57:51 PM
Re: Why VZ?
I don't think that they will @Atlantis-dude, I think (hope) that this will start a trend for others to follow to incorporate QR technology as part of identity verification.  Face it, I am unlikely to become a VZ customer for this feature.
Page 1 / 2   >   >>
Educational Resources
sponsor supplied content
Educational Resources Archive
Flash Poll
From The Founder
Network architects aiming to upgrade their networks to support agile, open, virtualized services in the 21st century need to consider new criteria when choosing between technology suppliers.
Live Streaming Video
BTE 2015 Sponsor Keynote: HP
Dr. Prodip Sen, CTO, Network Functions Virtualization, HP
LRTV Custom TV
Red Hat Demo

7|2|15   |   10:53   |   (0) comments


Red Hat's Nicolas Lemieux demonstrates how Red Hat is driving innovation through open source communities.
LRTV Custom TV
Red Hat's Approach to OpenStack Adoption

7|2|15   |   5:17   |   (0) comments


Red Hat's Radhesh Balakrishnan outlines his company's open source strategy for both enterprises and telcos.
LRTV Custom TV
The New IP Goes Mobile With vEPC

7|2|15   |   1:12   |   (0) comments


Heavy Reading's Gabriel Brown discusses results of a Light Reading survey sponsored by Brocade that shows a clear commitment by mobile operators to move quickly to virtual EPC deployment.
LRTV Custom TV
Making Business Sense of SDN

7|2|15   |   1:42   |   (0) comments


Results of a Brocade-sponsored survey show that CSPs have a clear sense of SDN use cases but are wrestling with the business case. Sterling Perrin of Heavy Reading looks behind the numbers.
LRTV Custom TV
NFV Will Be Here Sooner Than You Think

7|2|15   |   2:22   |   (0) comments


Forget the usual ten-year cycle for new technologies – NFV will be a core part of CSP networks in five years, based on results of a Brocade-sponsored survey, says Heavy Reading's Caroline Chappell.
LRTV Custom TV
The New IP Gains Traction With CSPs

7|2|15   |   1:42   |   (0) comments


Roz Roseboro of Heavy Reading analyzes results of a Light Reading survey sponsored by Brocade showing that CSPs are getting serious about making the transition to the New IP era.
LRTV Custom TV
It's (Real) Time for Analytics

7|2|15   |   1:42   |   (0) comments


Heavy Reading's Jim Hodges looks at how CSPs say they plan to use analytics to deploy new services in real time as part of The New IP, based on results of a survey sponsored by Brocade.
LRTV Documentaries
IoT in Action

6|30|15   |   1:39   |   (7) comments


Two co-workers discuss the benefits of IoT technology.
LRTV Interviews
Ericsson Opens Up on OPNFV

6|30|15   |   14:16   |   (1) comment


Martin Bäckström, VP and head of industry area Datacom at Ericsson, talks to Light Reading founder and CEO Steve Saunders about the emergence of OPNFV, the importance of standards and Ericsson's OPNFV plans.
LRTV Custom TV
NetNumber Founder Discusses NFV/SDN Impact on SP Networks

6|26|15   |   4:15   |   (0) comments


NetNumber Founder Doug Ranalli examines why SPs need a new network infrastructure for service agility. While NFV and SDN are the tools, the old ways of thinking about signaling control are inhibitors. Doug provides his recommendations.
LRTV Custom TV
Orchestrating NFV vCPE Services Across Multivendor Networks

6|26|15   |   5:46   |   (0) comments


Nirav Modi provides an overview of vCPE, the fastest-growing NFV use case, showing how Cyan's Blue Planet orchestrates vCPE services across a multivendor infrastructure to rapidly deliver new managed services for business customers.
LRTV Custom TV
ZTE at LTE Summit Amsterdam 2015

6|26|15   |     |   (0) comments


As one of the leading global telecommunications providers, ZTE presented its cutting-edge technology at LTE World Summit 2015 in Amsterdam. On display at ZTE's booth were the latest R&D achievements in wireless, 5G development, HetNet, deep convergence of FDD and TDD, and RCS/IMD/iSDN/vCN.
Upcoming Live Events
September 16-17, 2015, The Westin Galleria Dallas, Dallas, TX
September 29-30, 2015, The Westin Grand Müchen, Munich, Germany
October 6, 2015, The Westin Peachtree Plaza, Atlanta, GA
October 6, 2015, Westin Peachtree Plaza, Atlanta, GA
October 14-15, 2015, New Orleans Ernest N. Morial Convention Center, New Orleans, LA
November 5, 2015, Hilton Santa Clara, Santa Clara, CA
All Upcoming Live Events
Infographics
Hot Topics
Who's Feeding Fiber to LinkNYC Hotspots?
Mari Silbey, Senior Editor, Cable/Video, 6/29/2015
Colt to Jettison Ailing IT Business
Iain Morris, News Editor, 6/30/2015
Eurobites: Activist Investor Takes Stake in AlcaLu
Paul Rainford, Assistant Editor, Europe, 6/30/2015
What's a Gigabit Good For?
Carol Wilson, Editor-at-large, 7/1/2015
Like Us on Facebook
Twitter Feed
Webinar Archive
BETWEEN THE CEOs - Executive Interviews
Casa Systems has been going from strength to strength over the last couple of years. In 2013, it became the first vendor to ship an integrated CCAP device -- the ...
Cedrik Neike, SVP of Global Service Provider, Service Delivery, at Cisco, talks to Light Reading founder and CEO Steve Saunders about solving service provider customer problems in a virtualized, DevOps world, including multivendor support and the future of network procurement.
Cats with Phones