Light Reading
New approach lets consumers register and then download QR code app that will more securely connect them to e-commerce and business sites.

Verizon Launches QR Code Security Solution

Carol Wilson
8/26/2014
50%
50%

Verizon is introducing a new approach to securing personal information used online that goes beyond passwords. A QR code login on participating websites will allow a user to gain access to the site or application by scanning the code without entering a user name or password.

Verizon Enterprise Solutions has created a cloud-based infrastructure behind the QR code approach and is targeting both websites and e-commerce companies that want to let consumers access their sites more securely and businesses who want to allow employees to access corporate data without the concern that their compromised personal information will, in turn, compromise corporate data.

The core problem is that hackers have been able to repeatedly breach websites and capture user data, including names and passwords, says Tracy Hulver, chief identity strategist for Verizon. Since many consumers use the same password repeatedly on multiple sites, those breaches compromise the overall system's security, and increasingly erode consumer confidence.


Learn more about mobile security on our dedicated channel here at Light Reading.


"Our data breach investigation report shows that 80% of breaches were a direct result of weakened credentials -- either lost or stolen passwords, hacked information or weak passwords," he notes. No other single factor plays as significant a role in data breaches.

It would make sense to a second step -- or second factor, as it's known in the security world -- but the issue there is consumer resistance. Online merchants know that if consumers have to wait to get a pin code via phone, email or text, there is a chance they will abandon the sales process and find a faster, if less secure site, Hulver notes. So what Verizon set out to do is to find a more secure process that is easy for consumers to use.

Here's how it works: Consumers register for a Verizon Universal Services ID, either through their workplace or a participating website, and can then download a mobile app to their smartphone that will scan the codes that appear dynamically on the appropriate website.

Verizon is hoping the approach catches on, Hulver says, and he points out it is carrier-independent and doesn't depend on connections to Verizon's network. Verizon is participating in organizations that are looking at security standards but a standards-based approach will take longer to develop, he adds.

"If you look at the companies that are in the best position to solve these problems, telcos in general are in a great position," he says. "We know how to protect critical infrastructure. Us being Verizon, and on the leading edge, we are in a good position to solve these real-life problems, which are not just about security but also about ease of use."

Verizon launched the news in its blog and explains it in this video.

— Carol Wilson, Editor-at-Large, Light Reading

(17)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
pcharles09
50%
50%
pcharles09,
User Rank: Light Beer
8/31/2014 | 10:36:55 PM
Re: Nice use of QR codes
@brooks7,

It's popular & they're riding the wave. It'll soon get tired & get replaced by the next big thing.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/27/2014 | 9:26:28 AM
Re: Nice use of QR codes
Pcharles, Agreed. Just don't see much in the way that QR codes add to that mix. seven
pcharles09
50%
50%
pcharles09,
User Rank: Light Beer
8/27/2014 | 12:31:56 AM
Re: Nice use of QR codes
@brooks7,

There's lots of good 3rd party solutions for multi-factor authentication nowadays, including mobile apps for portability.
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/27/2014 | 12:28:37 AM
Re: Nice use of QR codes
As time moves on, smart phones will become the norm. So apps that can supply 2 factor authentication will still be really useful.
thebulk
50%
50%
thebulk,
User Rank: Light Sabre
8/26/2014 | 10:47:56 PM
Re: Nice use of QR codes
I know more than a few rather Internet savvy people who do not have a smart phone. So not sure that's a valid assumption.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/26/2014 | 6:55:33 PM
Re: Nice use of QR codes
The challenge with QR codes is suddenly you have to change your site to adapt them as an auth mechanism.

With a Digital Token, all you have to do is add a single line.

You are correct that multi-factor auth is considered clumsy no matter what.  But the user either wants it or doesn't.

The QR code scanner only seems better if one built it in to a mobile app auth process.  Which means that the mobile app would have to have a qr code scanner built in and the person would have to have the qr code on a keychain or something similar.

seven

 
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/26/2014 | 6:16:26 PM
Re: Nice use of QR codes
Ah a WOW fan huh @seven? But seriously,  interesting about the digital tokens but it is still another app.  Whether it is QR or digital tokens it is still another app.  I don't think that this is an either or situation but rather a whatever suits the application both literally and figuratively in a way that users will embrace 2nd factor authentication.
brooks7
50%
50%
brooks7,
User Rank: Light Sabre
8/26/2014 | 6:09:47 PM
Re: Nice use of QR codes
You know there are software apps for digital tokens right?

No need for a QR code or any funky thing.  Just load up that app and use it as your 2nd factor.  That way there is no need to have such a code linked to your website....just digital token support.

Blizzard has this available for World of Warcraft for example.

 

https://eu.battle.net/support/en/article/battlenet-authenticator

 

seven

 
Atlantis-dude
50%
50%
Atlantis-dude,
User Rank: Light Sabre
8/26/2014 | 5:55:48 PM
Re: Why VZ?
The role that telcos play in this is arguable. An app per website wouldn't help much either.
Liz Greenberg
50%
50%
Liz Greenberg,
User Rank: Light Sabre
8/26/2014 | 4:57:51 PM
Re: Why VZ?
I don't think that they will @Atlantis-dude, I think (hope) that this will start a trend for others to follow to incorporate QR technology as part of identity verification.  Face it, I am unlikely to become a VZ customer for this feature.
Page 1 / 2   >   >>
Educational Resources
sponsor supplied content
Educational Resources Archive
Flash Poll
From The Founder
It's clear to me that the communications industry is divided into two types of people, and only one is living in the real world.
LRTV Interviews
The New Wave of IP + Optical Integration

11|21|14   |   04:29   |   (7) comments


At the Alcatel-Lucent Technology Symposium, Heavy Reading senior analyst Sterling Perrin talks about how SDN has reshaped the discussion around packet and optical integration.
LRTV Huawei Video Resource Center
Huawei Highlights at BBWF 2014

11|20|14   |   3:40   |   (1) comment


Broadband World Forum is one of the world's largest telecoms, media and technology events with over 7,800 senior executives from across the globe converging on Amsterdam every year to identify the Next Big Thing. BBWF is an exciting place to meet the entire industry under one roof and identify the latest in network innovation, service optimization and customer ...
LRTV Huawei Video Resource Center
How Will BCMS Stimulate Margin for Broadband Operators?

11|19|14   |   6:52   |   (0) comments


In BBWF 2014, Liu Shuqing emphasizes the value of FMC 2.0 based full service experience by throwing light on the BCMS solution. The underlying principle of this innovative technique is to create network robustness and driving network from connection oriented to ACE – BAND oriented infrastructure, in which applications, cloud, and user experiences will be an asset ...
LRTV Huawei Video Resource Center
SingleFAN3.0: Better Connected Experience

11|19|14   |   3:06   |   (1) comment


At the BBWF 2014, David Hu, the VP of Huawei Access Network Product Line, talked about the future of access networks – SingleFAN3.0: faster broadband, wider coverage, and smarter connection.
LRTV Interviews
Basil Alwan Interview: The Road to Cloud

11|19|14   |   09:09   |   (0) comments


Alcatel-Lucent's head of IP and Transport talks about the migration towards a web-like networking environment, the impact of the cloud, SDN and NFV, and the yet-to-be-announced FP4 chip.
LRTV Documentaries
FairPoint Makes a Fair Point About Analytics

11|19|14   |   1:56   |   (1) comment


The US-based communication service provider gets to grips with advanced analytics, tackling data and breaking down the silos within its own business.
LRTV Documentaries
Analytics Lets C Spire Get to Know Subs

11|19|14   |   3:01   |   (2) comments


It's all about the data for US operator C Spire as it uses analytics to personalize its customer service down to individual subscribers.
LRTV Interviews
Nuage Branches Out With SDN: CEO Interview

11|17|14   |   9:32   |   (0) comments


Sunil Khandekar, CEO of Alcatel-Lucent's SDN-focused unit Nuage Networks, talks about the opportunities and challenges of breaking out of the data center into wide-area networks.
Light Reedy
Telecom Analytics Grows Up

11|14|14   |   1:15   |   (4) comments


The big data analytics debate has moved on from a year ago, with some experts suggesting it's no longer a technology challenge.
LRTV Huawei Video Resource Center
Huawei Compass

11|14|14   |   3:17   |   (1) comment


At OpenStack Summit 2014, Shuo Yang, Huawei Principal Cloud Infrastructure Architect introduced Huawei Compass, the software tool for solving customers' problems on the journey of OpenStack Cloud.
LRTV Huawei Video Resource Center
Huawei's Cloud Strategy in European Region

11|14|14   |   2:56   |   (1) comment


At OpenStack Summit 2014, Dr. Gotz, CTO of Huawei IT in European Region introduced Huawei's cloud strategy in European region.
LRTV Huawei Video Resource Center
Huawei's Contribution on OpenStack

11|14|14   |   5:58   |   (0) comments


At OpenStack Summit 2014, Dennis Gu, Huawei Chief Architect of Cloud Computing introduced the relationship between OpenStack and cloud computing, and Huawei's contribution on OpenStack.
Upcoming Live Events
December 2, 2014, New York City
December 3, 2014, New York City
December 8-10, 2014, Reykjavik, Iceland
February 12, 2015, Atlanta, GA
April 14, 2015, New York City, NY
May 6, 2015, McCormick Convention Center, Chicago, IL
May 13-14, 2015, The Westin Peachtree, Atlanta, GA
June 9-10, 2015, Chicago, IL
Infographics
Irish Telecom outlines the rise of VoIP technology, including its adoption within businesses and their perception of its quality.
Hot Topics
Bell Labs Chief Slams 'Toy' Networks
Robert Clark, 11/19/2014
$38.3M: Ain't That a Kik in the SMS
Sarah Reedy, Senior Editor, 11/20/2014
Do You Have a 2020 Vision?
Dennis Mendyk, Vice President of Research, Heavy Reading, 11/21/2014
Google, AT&T, BT Unite on Network Data Models
Carol Wilson, Editor-at-large, 11/20/2014
The New Wave of IP + Optical Integration
Ray Le Maistre, Editor-in-chief, 11/21/2014
Like Us on Facebook
Twitter Feed