& cplSiteName &

Verizon Launches QR Code Security Solution

Carol Wilson
8/26/2014
50%
50%

Verizon is introducing a new approach to securing personal information used online that goes beyond passwords. A QR code login on participating websites will allow a user to gain access to the site or application by scanning the code without entering a user name or password.

Verizon Enterprise Solutions has created a cloud-based infrastructure behind the QR code approach and is targeting both websites and e-commerce companies that want to let consumers access their sites more securely and businesses who want to allow employees to access corporate data without the concern that their compromised personal information will, in turn, compromise corporate data.

The core problem is that hackers have been able to repeatedly breach websites and capture user data, including names and passwords, says Tracy Hulver, chief identity strategist for Verizon. Since many consumers use the same password repeatedly on multiple sites, those breaches compromise the overall system's security, and increasingly erode consumer confidence.


Learn more about mobile security on our dedicated channel here at Light Reading.


"Our data breach investigation report shows that 80% of breaches were a direct result of weakened credentials -- either lost or stolen passwords, hacked information or weak passwords," he notes. No other single factor plays as significant a role in data breaches.

It would make sense to a second step -- or second factor, as it's known in the security world -- but the issue there is consumer resistance. Online merchants know that if consumers have to wait to get a pin code via phone, email or text, there is a chance they will abandon the sales process and find a faster, if less secure site, Hulver notes. So what Verizon set out to do is to find a more secure process that is easy for consumers to use.

Here's how it works: Consumers register for a Verizon Universal Services ID, either through their workplace or a participating website, and can then download a mobile app to their smartphone that will scan the codes that appear dynamically on the appropriate website.

Verizon is hoping the approach catches on, Hulver says, and he points out it is carrier-independent and doesn't depend on connections to Verizon's network. Verizon is participating in organizations that are looking at security standards but a standards-based approach will take longer to develop, he adds.

"If you look at the companies that are in the best position to solve these problems, telcos in general are in a great position," he says. "We know how to protect critical infrastructure. Us being Verizon, and on the leading edge, we are in a good position to solve these real-life problems, which are not just about security but also about ease of use."

Verizon launched the news in its blog and explains it in this video.

— Carol Wilson, Editor-at-Large, Light Reading

(17)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View        ADD A COMMENT
Page 1 / 2   >   >>
pcharles09
50%
50%
pcharles09,
User Rank: Light Beer
8/31/2014 | 10:36:55 PM
Re: Nice use of QR codes
@brooks7,

It's popular & they're riding the wave. It'll soon get tired & get replaced by the next big thing.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/27/2014 | 9:26:28 AM
Re: Nice use of QR codes
Pcharles, Agreed. Just don't see much in the way that QR codes add to that mix. seven
pcharles09
50%
50%
pcharles09,
User Rank: Light Beer
8/27/2014 | 12:31:56 AM
Re: Nice use of QR codes
@brooks7,

There's lots of good 3rd party solutions for multi-factor authentication nowadays, including mobile apps for portability.
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/27/2014 | 12:28:37 AM
Re: Nice use of QR codes
As time moves on, smart phones will become the norm. So apps that can supply 2 factor authentication will still be really useful.
thebulk
50%
50%
thebulk,
User Rank: Light Sabre
8/26/2014 | 10:47:56 PM
Re: Nice use of QR codes
I know more than a few rather Internet savvy people who do not have a smart phone. So not sure that's a valid assumption.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/26/2014 | 6:55:33 PM
Re: Nice use of QR codes
The challenge with QR codes is suddenly you have to change your site to adapt them as an auth mechanism.

With a Digital Token, all you have to do is add a single line.

You are correct that multi-factor auth is considered clumsy no matter what.  But the user either wants it or doesn't.

The QR code scanner only seems better if one built it in to a mobile app auth process.  Which means that the mobile app would have to have a qr code scanner built in and the person would have to have the qr code on a keychain or something similar.

seven

 
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/26/2014 | 6:16:26 PM
Re: Nice use of QR codes
Ah a WOW fan huh @seven? But seriously,  interesting about the digital tokens but it is still another app.  Whether it is QR or digital tokens it is still another app.  I don't think that this is an either or situation but rather a whatever suits the application both literally and figuratively in a way that users will embrace 2nd factor authentication.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/26/2014 | 6:09:47 PM
Re: Nice use of QR codes
You know there are software apps for digital tokens right?

No need for a QR code or any funky thing.  Just load up that app and use it as your 2nd factor.  That way there is no need to have such a code linked to your website....just digital token support.

Blizzard has this available for World of Warcraft for example.

 

https://eu.battle.net/support/en/article/battlenet-authenticator

 

seven

 
Atlantis-dude
50%
50%
Atlantis-dude,
User Rank: Light Sabre
8/26/2014 | 5:55:48 PM
Re: Why VZ?
The role that telcos play in this is arguable. An app per website wouldn't help much either.
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/26/2014 | 4:57:51 PM
Re: Why VZ?
I don't think that they will @Atlantis-dude, I think (hope) that this will start a trend for others to follow to incorporate QR technology as part of identity verification.  Face it, I am unlikely to become a VZ customer for this feature.
Page 1 / 2   >   >>
From The Founder
Download our complete guide to de-risking NFV deployment in 2016, including:
  • An eight-step strategy to deploying NFV safely, based on input from the companies that have already started virtualizing their production networks.
  • Interviews with leading executives at Colt, AT&T, Deutsche Telekom, Cisco, Nokia, ZTE, Ericsson and Heavy Reading.
  • Flash Poll
    Live Streaming Video
    Prepping for the Future: Upskill U Explained
    During this short kick-off video, Doug Webster, Vice President of Service Provider Marketing, Cisco, and Light Reading’s CEO & Founder Steve Saunders give an overview of Upskill U.
    LRTV Interviews
    Demand Surges for On-Demand Ads

    5|5|16   |     |   (0) comments


    Ed Knudson, VP, Product and Strategy at Canoe Ventures, discusses the rising appeal of VoD ads and the challenges on inserting ads dynamically in live TV programming.
    LRTV Custom TV
    Exclusive: Video Interview With Sckipio CEO David Baum

    5|5|16   |     |   (0) comments


    At his headquarters in Tel Aviv, G.fast visionary David Baum, CEO of Sckipio, provided an exclusive interview to Light Reading and showed how innovations in rate and reach, vector densities, fast reconnecting times and SFP-based residential gateways are expanding the potential of G.fast.
    Telecom Innovators Video Showcase
    Atrinet's NetACE – Migration to NFV & SDN With NetOps-Driven LSO

    5|4|16   |     |   (0) comments


    At Atrinet's headquarters, Ray Le Maistre sits down with Roy Silon to get an in-depth look into the company's focus and the secret recipe for their success.
    LRTV Huawei Video Resource Center
    Amsterdam ArenA, Powered by Huawei

    5|4|16   |     |   (0) comments


    Huawei's ICT solutions power the state-of-the-art Amsterdam ArenA, turning it into a smart stadium.
    LRTV Interviews
    Testing When There's No 'There' There

    5|4|16   |     |   (1) comment


    The benefits of SDN/NFV are well known, but the transition comes with some challenges, prominent among them is: how do you test a network that has been abstracted and has the potential to be endlessly reconfigurable? Light Reading was at NFV World Congress in Santa Clara, Calif., where we bumped into Mats Nordlund, CEO and co-founder of Netrounds, a Swedish ...
    LRTV Interviews
    Ditching the Slash & the Orchestration Wars

    5|3|16   |     |   (2) comments


    SDN and NFV have been inextricably bound with each other for so long that on a conceptual level, smooshing them together into one catch-all phrase – SDNFV – is now justifiable, according to Dan Pitt, executive director of the Open Networking Foundation (ONF). Light Reading spoke to Pitt at the NFV World Congress, where he explained that the next ...
    LRTV Custom TV
    ZTE TV Connect Highlights

    5|3|16   |     |   (0) comments


    ZTE gives us a tour of its booth and new products at TV Connect in London.
    LRTV Custom TV
    Deluxe's Unified Delivery Solution

    5|3|16   |     |   (0) comments


    Join Alan Breznick of Light Reading and visit the Deluxe booth at NAB! Here you'll find Deluxe's Unified Delivery Solution, OTT video, virtual reality, HDR, 4K and much more!
    LRTV Interviews
    Verizon Puts Gray Boxes in the Shade

    5|2|16   |   04:33   |   (1) comment


    When it comes to the white box trend, "gray" boxes, which have a slight proprietary twist, don't give service providers and end users the advantages they're seeking, according to Verizon's Vice President of Product and New Business Innovation Shawn Hakl.
    LRTV Custom TV
    Dealing With a Disrupted Video Market

    5|2|16   |     |   (0) comments


    Ericsson's Simon Frost discusses how traditional pay-TV providers can cope with the big changes wrought by the rise of OTT video and IP technology.
    LRTV Custom TV
    The VNF Responsibility of Red Hat

    5|2|16   |     |   (0) comments


    At MWC, Caroline Chappell of Heavy Reading visits the Red Hat booth and sits down with Chris Wright to talk about the responsibility the VNF needs to take on in order to ensure the operators get the carrier-grade performance they expect for their network.
    LRTV Interviews
    AT&T Expert on the Key Pillars of UC

    4|29|16   |   03:58   |   (0) comments


    Vishy Gopalakrishnan, AVP of product marketing at AT&T, talks about the three developments that are making unified communications and collaboration secure and reliable for enterprise users.
    Upcoming Live Events
    May 23, 2016, Austin, TX
    May 23, 2016, Austin Convention Center
    May 24-25, 2016, Austin Convention Center, Austin, TX
    September 13-14, 2016, The Curtis Hotel, Denver, CO
    December 6-8, 2016,
    June 16-18, 2017, Austin Convention Center, Austin, TX
    All Upcoming Live Events
    Infographics
    A new survey conducted by Heavy Reading and TM Forum shows that CSPs around the world see the move to digital operations as a necessary part of their overall virtualization strategies.
    Hot Topics
    WiCipedia: Woman Cards & Bitch Switches
    Sarah Thomas, Director, Women in Comms, 4/29/2016
    Sprint CEO: Our Spectrum Is for 5G
    Dan Jones, Mobile Editor, 5/3/2016
    Amazon & Other 'Big 4' Cloud Providers Crushing Competitors
    Mitch Wagner, West Coast Bureau Chief, Light Reading, 4/29/2016
    Rovi Reels in TiVo for $1.1B
    Mari Silbey, Senior Editor, Cable/Video, 4/29/2016
    Showdown at the OpenStack Corral
    Carol Wilson, Editor-at-large, 5/3/2016
    Like Us on Facebook
    Twitter Feed
    BETWEEN THE CEOs - Executive Interviews
    In this latest installment of the CEO Chat series, Craig Labovitz, co-founder and CEO of Deepfield, sits down with Light Reading's Steve Saunders in Light Reading's New York City office to discuss how Deepfield fits in with the big data trend and more.
    Grant van Rooyen, president and CEO of Cologix, sits down with Steve Saunders, founder and CEO of Light Reading, in the vendor's New Jersey facility to offer an inside look at the company's success story and discuss the importance of security in the telecom industry.
    Animals with Phones
    Sloth Mail Click Here
    Sloth mail -- somehow even slower than snail mail.
    Live Digital Audio

    Of all the tech companies in the Valley, Intel has made the most aggressive commitment to building a diverse and inclusive workplace culture. It's doing so by taking concrete, measurable steps, making a large financial investment and through a commitment to complete transparency about its progress. In this radio show, WiC Director Sarah Thomas will be joined by Shlomit Weiss, Intel's Vice President, Data Center Group, and General Manager of Networking Engineering, who will share with us why Intel is tackling this huge challenge, how and to what effect. She will also discuss her unique experiences leading development of Client SOC development in the past and today leading development of all of the chipmaker's silicon hardware for networking IPs and discrete devices and managing a team of 600 engineers across Israel, Europe and the US.