News

Add NewsAdd News

News lets the community share announcements, press releases, and recommended news articles relevent to IDTrust. (Educational materials that are not time-sensitive are listed at Articles and white papers.)

More about Federated Identity

...one of the biggest problems facing any implementation of an identity federation is that all of the participants need to be using the same standards and protocols to achieve federation. Unfortunately, as time has progressed a number of different standards have emerged. This is not a big issue if you’re starting out from scratch and all of the applications that are being developed are being built in-house. As long as all of the participants within the federation can agree on a standard, integration issues are unlikely to arise. However, this

Read more

OASIS Call for Participation: OASIS Cross-Enterprise Security and Privacy Authorization (XSPA) TC

A new OASIS technical committee is being formed. The OASIS Cross-Enterprise Security and Privacy Authorization (XSPA) Technical Committee has been proposed.

Statement of Purpose

Read more

GM, Boeing Faced Uphill Battle To Reach Global Identity Management

Managers from two multinational companies share their tips on connecting employees, parts suppliers, other business partners, and outsourced software developers.

 

Read more

U.S. House Pushes For National E-Health Records

The bill, called the "PRO(TECH)T Act," would increase privacy protections and set national standards to exchange health information nationally.

Read more

Oasis' open Enterprise Key Management Infrastructure initiative promises less-complex encryption. But will vendors get on board?

Information security pros do put stock in encryption--it was named the third-most-effective security practice in our most recent Strategic Security Survey, behind only firewalls and antivirus products. However, there have been obstacles along the path to ubiquitous encryption of data, including weak ciphers, deployment and integration issues, and, perhaps most notably, key management.

Public key infrastructure, or PKI, systems alone have simply failed to address the challenge of keeping encryption keys in order. Enter the

Read more