mixing authentication and identification?

Anne & Lynn Wheeler lynn at garlic.com
Fri Oct 14 01:32:01 EDT 2005

FFIEC Guidance; Authentication in an Internet Banking Environment

The Federal Financial Institutions Examination Council (FFIEC) has
issued the attached guidance, “Authentication in an Internet Banking
Environment.” For banks offering Internet-based financial services, the
guidance describes enhanced authentication methods that regulators
expect banks to use when authenticating the identity of customers using
the on-line products and services. Examiners will review this area to
determine a financial institution’s progress in complying with this
guidance during upcoming examinations. Financial Institutions will be
expected to achieve compliance with the guidance no later than year-end

... snip ..

and some comments from some other thread:
http://www.garlic.com/~lynn/2005r.html#54 NEW USA FFIES Guidance

and ...

Uncle Sam Comes Knocking

The U.S. government's interest in having banks help it form networks of
federated identity, thus allowing vetted, shared user-credentials
between government and private industry, is obvious. So far, only four
banks-Wells Fargo, Wachovia, National City and an unidentified bank-have
signed on, though more are expected to join Uncle Sam's E-Authentication
Federation. The looming question: What's in it for banks?

... snip ...

The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com

More information about the cryptography mailing list