Quantcast
PCWorld.com is upgrading some back-end systems. Some site features, such as user registration, may be temporarily unavailable.

Microsoft Makes Passport More Secure

Details on updated Web sign-on service expected this summer.

Paul Krill, InfoWorld.com

  • 0 Yes
  • 0 No

Microsoft this summer plans to reveal further details about the next version of its Passport e-business authentication service, although the company is not yet committing to a release date.

One improvement planned for Passport is fitting it with Web services protocols such as WS-Security as a mechanism for federating with other authentication service providers, said Microsoft's Adam Sohn, product manager in the platform strategy group at the company, in Redmond, Washington.

The next version will use Web services protocols for automation instead of the current use of cookies, HTTP Redirect, and JavaScript. Other protocols to be used include SOAP and WSDL, he said.

Passport Plans

"We've been talking about the general road map for Passport for a while and that the way you'll interoperate with the system will be based on WS-Security and the associated protocols that we've been working [on] with IBM," Sohn said.

Standard protocols are needed to federate with other providers, enabling identities not generated by Passport to be accepted within Passport-compliant systems.

Passport, formally called .Net Passport, is a service in which authentication information, such as user names and passwords, are maintained at Microsoft datacenters. Microsoft's maintenance of this information has drawn criticism from vendors supporting the rival Liberty Alliance specification, but Sohn insisted the amount of information maintained by Microsoft about each user is minimal. There are in excess of 200 million Passport accounts and approximately 300 Web sites that use it, including Microsoft's own sites, Sohn said.

Sohn added that Web services technology in general is being added throughout Microsoft's entire software platform.

For more IT analysis and commentary on emerging technologies, visit InfoWorld.com. Story copyright © 2007 InfoWorld Media Group. All rights reserved.

  • Recommend this story?
  • 0 Yes
    0 No
 

Featured APC Accessories

  • APC Back-UPS ES Safeguards your equipment from damaging surges and spikes that travel along your utility & data lines.
  • APC SurgeArrest Performance Highest level of protection for your professional computers, electronics and connected devices, as well as provides surge protection.

People who read this also read:

  • 15 Minutes to a Secure Business Get the Secure in 15 toolkit starting with the "15 Minutes Month-at-a-Glance" calendar. McAfee will send you additional tools and tricks to stay protected around the clock.
  • A Buyer's Guide to Data Protection Implementing data protection products and processes can be daunting. Make the right decisions by exploring what is available and what makes sense for your organization. Use this simple guide to evaluate different vendor offerings.

Sponsored Links