The Liberty Alliance released a new set of specifications aimed at protecting identity information transmitted by mobile devices during Web-based transactions.

The Advanced Client specifications are platform independent and could be used in devices such as cameras, laptops and TVs, the Liberty Alliance said Wednesday. The alliance is a consortium that defines protocols used for federated identity and Web services.

Liberty sees the specifications as a crucial step in protecting the privacy and security of Internet transactions, such as single sign-on authentication and client-based Web services, all of which underpin e-commerce transactions. The organization has also developed a legal framework for how businesses can approach sharing user identity information.

The Advanced Client specifications draw on ID-WSF 2.0 (Identity Web Services Framework), a Web services framework for identity-based transactions, and allow for identity information to be safely stored and managed whether a device is online or offline, Liberty said.

The advantage is that users will be able to act as their own ID provider, or a "trusted module," if they can't connect to the ID provider for some reason, said Roger Sullivan, president of the Liberty Alliance Management Board and a vice president in the identity management section at Oracle Corp. The user would also be able to access other Web services that trust the identity information.

"You want to be able to continue working if you are no longer connected to the identity provider," Sullivan said. "The whole foundation of this is to provide that kind of trust and security for these credentials."

BT Group, Intel and HP -- all members of Liberty -- recently showed a proof-of-concept application using the Advanced Client specifications, said Conor Cahill, an identity architect with Intel's Corporate Technology Group. It involved provisioning identity credentials over a wireless network to a laptop using the Extensible Authentication Protocol Method for GSM Subscriber Identity protocol, he said.

Other vendors may bring forward products that use the Advanced Client specifications for Liberty's next round of interoperability testing, scheduled for May or June, Sullivan said.

The Advanced Client specifications are available for download.

Liberty will update the specifications later this year, expanding the ID provisioning functions and adding new reporting capabilities, Sullivan said. The changes will improve how devices are managed and create a framework for compliance and regulatory requirements, it said.

The IDG News Service is a Network World affiliate.

Whitepapers

• Selecting Effective Virtual Directories
• A Modern Approach to On-Demand Email and Data Security
• Best Practices for HP Servers and HP Enterprise Virtual Array in a Microsoft Exchange
• Compliance, Protection, Recovery: A Layered Approach to Laptop Security
• Endpoint Security: Data Protection for IT, Freedom for Laptop Users
• IT Departments on Data Security: A Research Concepts Survey

View more SECURITY whitepapers

Webcasts

• Key Considerations for a Successful 802.11n Deployment
• Solutions to the Toughest IT Challenges in Remote Offices
• Lowering the Cost of Email Archives
• High Availability for SQL Server 2005 Using Array-Based Replication and Host-Based Mirroring Technologies
• Technical Overview of Exchange Server 2007 with HP Servers and Storage
• Bringing Order and Security to your Mobile Workforce: Corporate Mobility Policy and Device Management On-Demand

View more SECURITY webcasts

Special Reports

• The Evolution of Network Security
• Taking Virtualization Up a Notch
• Learn how to Keep your Mobile Workforce Connected
• The self-managed network

View more SECURITY special reports