MADE IN IBM LABS:
MEHR DATENSCHUTZ IM NETZ MIT "IDEMIX"
Neue IBM Software ermöglicht sichere und datenschutzfreundliche Internet-Transaktionen und geht so gegen Datenmissbrauch vor.
Armonk, NY und Zürich, Switzerland -- 26. Januar 2007 -- IBM (NYSE: IBM) stellt eine neue Software vor, die es Internetanwendern erlaubt, ihre persönlichen Informationen bei Online-Transaktionen besser zu schützen und so Datenmissbrauch und Identitätsdiebstahl vorzubeugen. Die neue Technologie, genannt "Identity Mixer" oder kurz "Idemix", wurde am IBM Forschungslabor in Rüschlikon entwickelt. "Idemix" verwendet komplexe Verschlüsselungsalgorithmen, die es ermöglichen, persönliche Daten so zu anonymisieren, dass der Anwender sich sicher digital zertifizieren kann ohne jedoch seine Identität preiszugeben.
IBM wird die "Idemix"-Software dem Open-Source Projekt Eclipse Higgins zuführen. Das Higgins-Projekt wurde im Februar 2006 von der Havard Law School, IBM, Novell und Parity Communications ins Leben gerufen und ist die erste Open-Source-Initiative zur Entwicklung eines benutzerfreundlichen Identitätsmanagementsystems. „Mit 'Idemix' leisten wir einen massgeblichen Beitrag zu einem besseren Daten- und Identitätsschutz im Netz,“ erklärt Dr. Jan Camenisch, Projektleiter am IBM Forschungslabor Zürich, und ergänzt: „Unser System liefert die wichtigen und notwendigen Datenschutzmechanismen und schafft damit die entscheidenden Voraussetzungen für die nächste Generation von Webanwendungen und E-Commerce.“
Ausführliche Informationen entnehmen Sie bitte der nachfolgenden englischsprachigen Medienmitteilung.
Interviews auf Anfrage bei:
Nicole Herfurth
Media Relations, IBM Forschungslabor Zürich
Telefon: +41-44 724 8445
Mobiltelefon: +41-79 81 53 667
nih@zurich.ibm.com
IBM Zurich Lab Press Room
MADE IN IBM LABS:
IBM SOFTWARE TO SAFEGUARD CONSUMER IDENTITY ON THE WEB WITH "IDEMIX"
Enables Secure Internet Transactions without Disclosing Personal Information, Protects Against Identity Theft
Armonk, NY and Zurich, Switzerland -- January 26, 2007 -- IBM (NYSE: IBM) today announced software that allows people to hide or anonymize their personal information on the Web, ensuring protection from identity theft and other misuse. Developed by researchers at IBM's laboratory in Zurich, Switzerland, the software -- code named Identity Mixer, or "Idemix" for short -- will enable consumers to purchase goods and services on the Internet without disclosing personal information.
IBM will contribute its Idemix software to Eclipse Higgins project, an open source effort dedicated to developing software for "user-centric" identity management. The current trend toward a user-centric approach means that individuals can actively and securely control who has access to their online personal information, such as bank account and credit card numbers, or medical and employment records, rather than having institutions solely manage that information as they do today.
As consumers hand over personal details in exchange for downloading music or subscribing to online newsletters, they leave a data trail behind that reveals pieces of information about the size, frequency and source of their online purchases that can be traced back to the user. IBM's Idemix software eliminates the trail by using artificial identity information, known as pseudonyms, to make online transactions anonymous. For example, the software allows people to purchase books or clothing without revealing their credit card number. It can confirm someone's spending limit without sharing their bank balance, or provide proof of age without disclosing their date of birth.
"Unlike other identity management systems that transmit parts of a user's true identity, systems built using Idemix software will help protect user privacy by sharing only pseudonyms, so real identity information can never be intercepted or exposed," explains Idemix project lead and head designer Jan Camenisch of IBM's Zurich Research Laboratory.
Idemix works by allowing a computer user who has the appropriate software to obtain an anonymous digital credential, or voucher, from a trusted third party, such as a bank, insurance company or government agency. A health insurance company, for example, could provide a credential confirming that a user has certain health insurance benefits. If the user wishes to consult their healthcare provider's online portal for medical information, the Idemix software digitally seals the credential so the user can send it to the healthcare provider and get access to the online service. By using sophisticated cryptographic algorithms, the Idemix software acts as a middleman — so the user’s real identity is never exposed to the health-care provider. The next time the user consults the service, a new encrypted credential would be used.
"When people don't have to disclose their personal information on the Web, the risk of identity theft is dramatically reduced," explains John Clippinger, senior fellow at the Berkman Center for Internet and Society at Harvard Law School. "The ability to anonymize transactions using Idemix has the potential to bolster consumer confidence, opening digital floodgates to new forms of Internet commerce."
IBM plans to incorporate the Idemix technology into its Tivoli software portfolio of federated identity management software. It brings another dimension to IBM's industry-leading technologies that protect the privacy of consumers and businesses. IBM currently offers software, in use by large governments, healthcare organizations and financial institutions, which provides a way to compare data about their passengers, patients or clients to identify relationships, while never exposing people’s sensitive information. The software irreversibly shreds personal artifacts such as names, addresses, phone numbers and social security numbers before the data is shared. The software analyzes the shredded information and alerts the company when a match is found between specific records, identifying only the record file number assigned by the software. It is then up to the organization to decide what amount of detail to share from the identified record. This protects the personal details within other records so they're not needlessly exposed during the comparison process.
Building Privacy into Eclipse Higgins Open Source Security Project
The Idemix software will provide the required added layer of privacy to the Project Higgins framework for true user centric identity management.
"The ever-growing incidents of data loss, exposure, and theft on the Internet concern me," said Dr. Ann Cavoukian, Information and Privacy Commissioner of Ontario, Canada. "It's clear that the best way to protect sensitive information is never to reveal it at all. The ability of privacy-enhancing technology to mask sensitive personal information during online transactions makes real the privacy principle of data minimization, and will bring much needed privacy to the Web. I applaud IBM's leadership and openness in this area."
Project Higgins was announced in February 2006 by the Berkman Center for Internet and Society at Harvard Law School, IBM, Novell and Parity Communications. It was the first user-centric identity management effort to follow the open source software model, whereby hundreds of thousands of developers contribute and continually drive improvements through collaborative innovation. The open source Higgins effort will support computers running any operating system, as well as any identity management system.
The Eclipse foundation is one of the industry's most influential open source communities and includes major technology vendors, start-ups, universities, research institutions and individuals.
Made in IBM Labs
IBM is dedicated to driving the development of promising new technologies. The Zurich Research Lab is part of IBM's globally integrated approach to innovation—a network of 63 major software development and research labs worldwide that develop, test and support a wide range of emerging and established technologies that span software and services. IBM believes that these technologies have the potential to transform the way people live and work. But they are not created in a vacuum by IBM alone. They are increasingly the result of collaborative innovation among IBM's R&D engagements and its customers, business partners, universities and other parties. It is IBM's goal to bring its renowned R&D resources closer to its customers worldwide.
For more information on Idemix, please visit http://www.zurich.ibm.com/security/idemix/
Hans-Juergen Rehm
IBM Deutschland GmbH/IBM Germany
Kommunikation/Communications
D-70548 Stuttgart, Pascalstr. 100
Tel: +49-711-785-4148
E-Mail: hansrehm@de.ibm.com
Fax: +49-711-785-1078
|
