Light Reading

Verizon Launches QR Code Security Solution

Carol Wilson
8/26/2014
50%
50%

Verizon is introducing a new approach to securing personal information used online that goes beyond passwords. A QR code login on participating websites will allow a user to gain access to the site or application by scanning the code without entering a user name or password.

Verizon Enterprise Solutions has created a cloud-based infrastructure behind the QR code approach and is targeting both websites and e-commerce companies that want to let consumers access their sites more securely and businesses who want to allow employees to access corporate data without the concern that their compromised personal information will, in turn, compromise corporate data.

The core problem is that hackers have been able to repeatedly breach websites and capture user data, including names and passwords, says Tracy Hulver, chief identity strategist for Verizon. Since many consumers use the same password repeatedly on multiple sites, those breaches compromise the overall system's security, and increasingly erode consumer confidence.


Learn more about mobile security on our dedicated channel here at Light Reading.


"Our data breach investigation report shows that 80% of breaches were a direct result of weakened credentials -- either lost or stolen passwords, hacked information or weak passwords," he notes. No other single factor plays as significant a role in data breaches.

It would make sense to a second step -- or second factor, as it's known in the security world -- but the issue there is consumer resistance. Online merchants know that if consumers have to wait to get a pin code via phone, email or text, there is a chance they will abandon the sales process and find a faster, if less secure site, Hulver notes. So what Verizon set out to do is to find a more secure process that is easy for consumers to use.

Here's how it works: Consumers register for a Verizon Universal Services ID, either through their workplace or a participating website, and can then download a mobile app to their smartphone that will scan the codes that appear dynamically on the appropriate website.

Verizon is hoping the approach catches on, Hulver says, and he points out it is carrier-independent and doesn't depend on connections to Verizon's network. Verizon is participating in organizations that are looking at security standards but a standards-based approach will take longer to develop, he adds.

"If you look at the companies that are in the best position to solve these problems, telcos in general are in a great position," he says. "We know how to protect critical infrastructure. Us being Verizon, and on the leading edge, we are in a good position to solve these real-life problems, which are not just about security but also about ease of use."

Verizon launched the news in its blog and explains it in this video.

— Carol Wilson, Editor-at-Large, Light Reading

(17)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View        ADD A COMMENT
Page 1 / 2   >   >>
pcharles09
50%
50%
pcharles09,
User Rank: Light Beer
8/31/2014 | 10:36:55 PM
Re: Nice use of QR codes
@brooks7,

It's popular & they're riding the wave. It'll soon get tired & get replaced by the next big thing.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/27/2014 | 9:26:28 AM
Re: Nice use of QR codes
Pcharles, Agreed. Just don't see much in the way that QR codes add to that mix. seven
pcharles09
50%
50%
pcharles09,
User Rank: Light Beer
8/27/2014 | 12:31:56 AM
Re: Nice use of QR codes
@brooks7,

There's lots of good 3rd party solutions for multi-factor authentication nowadays, including mobile apps for portability.
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/27/2014 | 12:28:37 AM
Re: Nice use of QR codes
As time moves on, smart phones will become the norm. So apps that can supply 2 factor authentication will still be really useful.
thebulk
50%
50%
thebulk,
User Rank: Light Sabre
8/26/2014 | 10:47:56 PM
Re: Nice use of QR codes
I know more than a few rather Internet savvy people who do not have a smart phone. So not sure that's a valid assumption.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/26/2014 | 6:55:33 PM
Re: Nice use of QR codes
The challenge with QR codes is suddenly you have to change your site to adapt them as an auth mechanism.

With a Digital Token, all you have to do is add a single line.

You are correct that multi-factor auth is considered clumsy no matter what.  But the user either wants it or doesn't.

The QR code scanner only seems better if one built it in to a mobile app auth process.  Which means that the mobile app would have to have a qr code scanner built in and the person would have to have the qr code on a keychain or something similar.

seven

 
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/26/2014 | 6:16:26 PM
Re: Nice use of QR codes
Ah a WOW fan huh @seven? But seriously,  interesting about the digital tokens but it is still another app.  Whether it is QR or digital tokens it is still another app.  I don't think that this is an either or situation but rather a whatever suits the application both literally and figuratively in a way that users will embrace 2nd factor authentication.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/26/2014 | 6:09:47 PM
Re: Nice use of QR codes
You know there are software apps for digital tokens right?

No need for a QR code or any funky thing.  Just load up that app and use it as your 2nd factor.  That way there is no need to have such a code linked to your website....just digital token support.

Blizzard has this available for World of Warcraft for example.

 

https://eu.battle.net/support/en/article/battlenet-authenticator

 

seven

 
Atlantis-dude
50%
50%
Atlantis-dude,
User Rank: Light Sabre
8/26/2014 | 5:55:48 PM
Re: Why VZ?
The role that telcos play in this is arguable. An app per website wouldn't help much either.
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/26/2014 | 4:57:51 PM
Re: Why VZ?
I don't think that they will @Atlantis-dude, I think (hope) that this will start a trend for others to follow to incorporate QR technology as part of identity verification.  Face it, I am unlikely to become a VZ customer for this feature.
Page 1 / 2   >   >>
Educational Resources
sponsor supplied content
Educational Resources Archive
Flash Poll
From The Founder
Last week I dropped in on "Hotlanta," Georgia to moderate Light Reading's inaugural DroneComm conference – a unique colloquium investigating the potential for drone communications to disrupt the world's telecom ecosystem. As you will see, it was a day of exploration and epiphany...
Between the CEOs
Affirmed Networks CEO: Digging Into NFV

5|28|15   |   40:26   |   (2) comments


Hassan Ahmed, CEO of Affirmed Networks, is making some big claims for his NFV startup. I sat down with him at the Light Reading HQ in New York City to get the skinny on what this Acton, Mass.-based startup is up to.
LRTV Documentaries
Cable Eyeing SDN for Headend, Home Uses

5|26|15   |   05:57   |   (1) comment


CableLabs is looking at virtualizing CMTS and CCAP devices in the headend, as well as in-home devices, says CableLabs' Karthik Sundaresan.
LRTV Documentaries
Verizon's Emmons: SDN Key to Cost-Effective Scaling

5|22|15   |   03:53   |   (0) comments


For Verizon and other network operators to ramp up available bandwidth cost effectively, they need to move to SDN and agree on how to do that.
LRTV Documentaries
Lack of Universal SDN a Challenge

5|21|15   |   04:51   |   (3) comments


Heavy Reading Analyst Sterling Perrin talks about how uncertainty about SDN standards and approaches may be slowing deployment.
LRTV Custom TV
Steve Vogelsang Interview: Carrier SDN

5|20|15   |   05:02   |   (0) comments


Sterling Perrin speaks to Steve Vogelsang, Alcatel-Lucent CTO for IP Routing & Transport business, about the new Carrier SDN-enabling Network Services Platform and the operator challenges it solves.
LRTV Custom TV
Carrier SDN: On-Demand Networks for an On-Demand World

5|20|15   |   20:52   |   (0) comments


Steve Vogelsang, Alcatel-Lucent CTO for IP Routing & Transport business, talks about requirements and benefits of Carrier SDN during the keynote address at the Light Reading Carrier SDN event May 2015.
LRTV Documentaries
The Security Challenge of SDN

5|19|15   |   02:52   |   (0) comments


CenturyLink VP James Feger discusses concerns that virtualization could create new vulnerabilities unless network operators build in safeguards.
LRTV Custom TV
NFV Elasticity – Highly Available VNF Scale-Out Architectures for the Mobile Edge

5|18|15   |   5:50   |   (0) comments


Peter Marek and Paul Stevens from Advantech Networks and Communications Group talk about their NFV Elasticity initiative and the company's latest platforms for deploying virtual network functions at the edge of the network. Packetarium XL and the new Versatile Server Module: 'designed to reach parts of the network that other servers cannot reach.'
LRTV Huawei Video Resource Center
Bay Area Spark Meetup 2015

5|14|15   |   3:54   |   (0) comments


Developed in 2009, Apache Spark is a powerful open source processing engine built around speed, ease of use and sophisticated analytics. This spring, Huawei hosted a meetup for Spark developers and data scientists in Santa Clara, California. Light Reading spoke with organizers and attendees about Huawei's code contributions and long-term commitment to Spark.
LRTV Custom TV
The Transport SDN Buzz

5|12|15   |   06:01   |   (1) comment


Sterling Perrin, senior analyst at Heavy Reading, speaks with Peter Ashwood-Smith of Huawei and Guru Parulkar of ON.Lab about the evolution of transport SDN and the integration of technologies.
LRTV Custom TV
Next-Generation CCAP: Cisco cBR-8 Evolved CCAP

5|5|15   |   04:49   |   (0) comments


John Chapman, Cisco's CTO of Cable Access Business Unit and Cisco Fellow, explained the innovation design of Cisco's cBR-8, the industry's first Evolved CCAP, including DOCSIS 3.1 design from ground-up, distributed CCAP with Remote PHY and path to virtualization. Cisco's cBR-8 Evolved CCAP is the platform that will last through the transitions.
LRTV Custom TV
Meeting the Demands of Bandwidth & Service Group Growth

5|1|15   |   5:35   |   (0) comments


Jorge Salinger, Comcast's Vice President of Access Architecture, explains how DOCSIS 3.1 and multi-service CCAP can meet the demands of the bandwidth and service group growth.
Upcoming Live Events
June 8, 2015, Chicago, IL
June 9, 2015, Chicago, IL
June 9-10, 2015, Chicago, IL
June 10, 2015, Chicago, IL
September 29-30, 2015, The Westin Grand Müchen, Munich, Germany
October 6, 2015, The Westin Peachtree Plaza, Atlanta, GA
October 6, 2015, Westin Peachtree Plaza, Atlanta, GA
All Upcoming Live Events
Infographics
Procera has gathered facts, stats and customer experience feedback from a survey of 540 users from across the globe.
Hot Topics
Charter Seals Deals for TWC, Bright House
Mari Silbey, Senior Editor, Cable/Video, 5/26/2015
Eurobites: Alcatel-Lucent Trials 400G in Czech Republic
Paul Rainford, Assistant Editor, Europe, 5/26/2015
Will Carriers Follow Facebook's Networking Lead?
Mitch Wagner, West Coast Bureau Chief, Light Reading, 5/28/2015
Charter Plans Business Services, Wireless Push
Alan Breznick, Cable/Video Practice Leader, 5/27/2015
Facebook Reinvents Data Center Networking
Mitch Wagner, West Coast Bureau Chief, Light Reading, 5/26/2015
Like Us on Facebook
Twitter Feed
BETWEEN THE CEOs - Executive Interviews
On May 29th 1 PM ET, Steve Saunders, founder and CEO of Light Reading, will be drilling into the "pains and gains" of NFV with Saar Gillai, SVP & GM for NFV at Hewlett-Packard Co. (NYSE: HPQ) (HP). He has defined a four-step NFV model describing a sequence of technology innovation. It's a must-read doc for any network architect looking to get to grips with their NFV migration strategy. Join us for the interview, and the chance to ask Saar your NFV questions directly!
Hassan Ahmed, CEO of Affirmed Networks, is making some big claims for his NFV startup. I sat down with him at the Light Reading HQ in New York City to get the skinny on what this Acton, Mass.-based startup is up to.
Cats with Phones