UPDATE: Microsoft aims to link Passport with credit cards

ITworld.com |  Security, Network access control Add a new comment

Microsoft Corp. and Arcot Systems Inc. announced Tuesday an agreement to integrate Microsoft's .Net Passport online authentication system with Arcot's TransFort payment authentication software for credit cards.

The combination of TransFort with Microsoft's authentication and single sign-on service will allow banks that issue credit cards to use Passport to electronically identify card holders making purchases online.

Passport is Microsoft's service that allows subscribers to enter their name and password once and access other password-protected Web sites and online services that are Microsoft partners without having to sign on each time. More than 200 million Web users are Passport subscribers, according to Microsoft.

Arcot Systems, of Santa Clara, California, makes online payment systems for banks and merchants that issue credit cards from Visa International Inc. and MasterCard International Inc. as well as providing the software used by Visa for its own Verified by Visa program, according to Arcot's Web site.

Under the partnership announced Tuesday, Passport will be available for Visa and MasterCard issuers using Arcot's system.

Besides expanding the services available to Passport subscribers, the deal with Arcot is intended to allow participating credit card issuing banks to save money and resources when developing online credit card services, according to Microsoft.

"This keeps the cost down for the banks and merchants so they don't have to come up with their own authentication system," said Adam Sohn, product manager for .Net platform strategy at Microsoft.

Additionally, those card-issuing banks can use their own user name and password systems or smart cards to authenticate card holders online.

Since Passport's launch last year, Microsoft has come under sustained criticism regarding the level of control Passport gives the Redmond, Washington, software giant over personal information.

Last week, the European Union announced it would continue investigating Passport after European data protection authorities found that Passport does risk breaching European Union privacy laws.

Microsoft already offers a service through Passport called Express Purchase, which allows a user to store their financial information including credit card number, card expiration date and mailing address. Subscribers of Express Purchase can use the service to make electronic-commerce purchases on Web sites that support the technology without having to manually enter personal information.

The deal with Arcot is separate from Express Purchase and serves somewhat of a complementary service, Sohn said. Express Purchase is intended to allow users to quickly enter personal information into a Web site when making a purchase.

Using Passport with Arcot's system allows banks to verify that the user making the purchase is in fact the owner of the credit card. In the scenario with Arcot, a user's credit card information is stored with the credit card issuer rather than with Microsoft.

"They (the card issuing banks) still own all the customer data. Passport just does the authentication," Sohn said.

    Add a comment

    Post a comment using one of these accounts
    Or join now
    At least 6 characters

    Note: Comment will appear soon after you have activated your account.
    Obscene/spam comments will be removed and accounts suspended.
    The information you submit is subject to our Privacy Policy and Terms of Service.

    ITworld LIVE

    SecurityWhite Papers & Webcasts

    White Paper

    Overcome Top 7 Admin Challenges of Active Directory

    As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

    White Paper

    Insiders Can Ruin Your Company. Take Action.

    Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

    White Paper

    Top Solutions and Tools to Prevent Devastating Malware

    Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

    White Paper

    Streamline Compliance and Increase ROI

    Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

    White Paper

    X-Ray of the PCI Process-4 Proactive Steps

    This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

    See more White Papers | Webcasts

    Ask a question

    Ask a Question