$7 million to five projects
Five companies have received more than $7 million for projects supporting the National Strategy for Trusted Identities in Cyberspace. These new pilots will join the five that were awarded a year ago.
The national strategy aims to support collaboration between the private sector, advocacy groups and public-sector agencies to create an identity ecosystem that enables secure, easy to use and privacy enhancing credentials. “These new NSTIC pilots span multiple sectors, benefitting children, parents and veterans, as well as online shoppers and social media users of all ages,” said Jeremy Grant, senior executive advisor for identity management at NIST and head of the NSTIC National Program Office.
The pilot grantees include the following:
Exponent: $1.6 million
The Exponent pilot will issue credentials to users to help secure applications and networks at a social media company, a health care organization and the U.S. Department of Defense.
Exponent, along with partners Gemalto and HID Global, will deploy two types of identity verification: the use of mobile devices that leverage “derived credentials” stored in the device’s SIM card and secure wearable devices, such as rings and bracelets. Solutions will be built upon standards, ensuring an interoperable system that can be easily adopted by a wide variety of organizations and companies.
Georgia Tech Research Corporation (GTRC): $1.7 million
The GTRC pilot will develop and demonstrate a “Trustmark Framework” that seeks to improve trust, interoperability and privacy within the Identity Ecosystem. Trustmarks are a badge, image or logo displayed on a web site to indicate that the business has been shown to be trustworthy by the issuing organization. Defining trustmarks for specific sets of policies will enable web site owners, trust framework providers and individual Internet users to more easily understand the technical, business, security and privacy requirements and policies of the websites with which they interact or do business.
Supporting consistent, machine-readable ways to express policy can enhance and simplify the user experience, raise the level of trust in online transactions and improve interoperability between service providers and trust frameworks. Building on experience developing the National Identity Exchange Federation, GTRC plans to partner with the National Association of State Chief Information Officers and one or more current National Identity Exchange Federation member agencies, such as Los Angeles County and the Regional Information Sharing Systems.
Privacy Vaults Online Inc. (PRIVO): $1.6 million
Children represent a unique challenge when it comes to online identity. Parents need better tools to ensure safe family use of the Internet, while online service providers need to comply with the requirements of the Children’s Online Privacy Protection Act when they deal with minors under the age of 13.
PRIVO will pilot a solution that provides families with COPPA-compliant, secure, privacy-enhancing credentials that will enable parents and guardians to authorize their children to interact with online services in a more privacy-enhancing and usable way. Project partners, including one of the country’s largest online content providers and one of the world’s largest toy companies, will benefit from a streamlined consent process while simplifying their legal obligations regarding the collection and storage of children’s data.
ID.me Inc.: $1.2 million
ID.me Inc.’s Troop ID will develop and pilot trusted identity solutions that will enable military families to access sensitive information online from government agencies, financial institutions and health care organizations in a more privacy-enhancing, secure and efficient manner. Troop ID lets America’s service members, veterans, and their families verify their military affiliation online across a network of organizations that provides discounts and benefits in recognition of their service. Today, more than 200,000 veterans and service members use Troop ID to access benefits online.
As part of its pilot, Troop ID will enhance its current identity solution to obtain certification at Level of Assurance 3 from the U.S. General Services Administration’s Trust Framework Providers program, enabling Troop ID credential holders to use their solution not only at private-sector sites, but also when interacting online with U.S. government agencies through the recently announced Federal Cloud Credential Exchange (FCCX). Key project partners include federal government agencies and a leading financial institution serving the nation’s military community and its families.
Transglobal Secure Collaboration Participation, Inc. (TSCP): $1.3 million
The TSCP pilot will deploy trusted credentials to conduct secure business-to-business, government-to-business and retail transactions for small and medium-sized businesses and financial services companies, including Fidelity Investments and Chicago Mercantile Exchange.
As part of this pilot, employees of participating businesses will be able to use their existing credentials to securely log into retirement accounts at brokerages, rather than having to obtain a new credential. Key to enabling these cross-sector transactions will be TSCP’s development of an open source, technology-neutral Trust Framework Development Guidance document that can provide a foundation for future cross-sector interoperability of online credentials.