Bill Gates and Craig Mundie spoke at the RSA cryptographic conference yesterday. They officially announced that Microsoft will now by all means support the OpenID distributed authentication standard, including implementing it in Cardspace.
Microsoft executives have promised that
OpenID support will be built into the Cardspace authentication system, which is integrated, among other things, into the Windows Vista operating system. “The Cardspace Alliance and OpenID 2.0 are a giant step forward,”
said Craig Mundie .
By integrating these two technologies, Microsoft hopes to eliminate phishing attacks (the appearance of a fake proxy site between the user and the site, which gains access to private data). Such attacks have recently become more common. The OpenID standard is intended for “pass-through” authentication on all sites, so that such attacks become impossible in principle.
OpenID support will appear in the Identity Manager Cardspace of the Vista operating system, and support for Cardspace
information cards will appear in the OpenID system. The project will be implemented with the help of Janrain, Sxip and VeriSign.
')
Much of his speech, Gates and Mandi devoted to how Microsoft improves the security of their products, makes the authentication process easier and more understandable for users. In the future, Bill Gates said, passwords in general
can be abandoned in favor of more reliable authentication methods, such as smart cards and certificates.
Microsoft has high hopes for smart cards and its new product, Identity Lifecycle Manager 2007, presented at RSA. This system is scheduled for release on May 1, 2007, and it will allow integrating technologies acquired by Microsoft with Alacris’s purchase in 2005 into the Identity Integration Server. Smart cards and other hardware authentication tools will now be organically perceived in Microsoft networks.
To simplify the network authentication process, Microsoft also plans to use IPsec (Internet Protocol security) and IPv6 (IP version 6) protocols more actively. One way or another, all future Microsoft authentication products will support the OpenID standard.