Trends in digital access and identity
'Your password must be at least eight characters in length, contain one uppercase letter, two numbers and a special character such as a full stop or a dash.' For years, this kind of message has irritated many a computer user. Fortunately there are many new ways of securing digital access on the way. Here are the trends at a glance.
'I am, therefore I get access'
Too much to remember
If we are to believe the trend watchers, the end of the old and trusted password is approaching. Systems are forcing people to choose passwords that are increasingly complicated. Most users now have so many different passwords that they can no longer remember them. This encourages people to choose the same password for every system, which is certainly not secure.
Check, double check
The current trends in digital access usually involve more than one step. This kind of double check benefits security. The systems are using three different kinds of authorisation: something you know (password or PIN), something you own (your telephone or other device) and something that you are.
Voice, face, eyes, heartbeat, fingers, breath. Computers and scanners can use any of these features to establish whether they are dealing with the right person. The first telephones that use fingerprints are already on the market and facial recognition is no longer just a cool gadget in a James Bond film.
Smell & gait
The U.S. Department of Homeland Security is currently investigating whether body odour can be used for identification. New studies should also show whether a person's gait (the way they walk) could be used for ID. According to a U.S. defence research agency, this could be the next step.
Single Sign-On account
Another trend in access security concerns what are known as 'federation services'. With this technology, the user gains access to various platforms or applications, but only has to log in once. This 'single sign-on experience' offers many benefits for consumers and businesses.
For instance, the Dutch financial sector is working on a BankID. This will allow a customer who logs in to internet banking to also arrange his insurance business directly, even though this is with a different provider.
Linking data to ID
The identity that a system links to a user is growing fast. An 'ID' used to consist of a name, a number and an address. These days, far more information can be recorded, such as purchasing behaviour, financial transactions and other data.
Of course, the question of who will manage the data and who gets access is a subject of intense debate, in which privacy protection and confidence are important considerations. Here too, Rabobank is keeping its finger on the pulse.