mixing authentication and identification?

[Anne & Lynn Wheeler]

FFIEC Guidance; Authentication in an Internet Banking Environment
http://www.fdic.gov/news/news/financial/2005/fil10305.html

The Federal Financial Institutions Examination Council (FFIEC) has
issued the attached guidance, “Authentication in an Internet Banking
Environment.” For banks offering Internet-based financial services, the
guidance describes enhanced authentication methods that regulators
expect banks to use when authenticating the identity of customers using
the on-line products and services. Examiners will review this area to
determine a financial institution’s progress in complying with this
guidance during upcoming examinations. Financial Institutions will be
expected to achieve compliance with the guidance no later than year-end
2006.

... snip ..

and some comments from some other thread:
http://www.garlic.com/~lynn/2005r.html#54 NEW USA FFIES Guidance

and ...

Uncle Sam Comes Knocking
http://www.banktechnews.com/article.html?id=20051003PV1B6000

The U.S. government's interest in having banks help it form networks of
federated identity, thus allowing vetted, shared user-credentials
between government and private industry, is obvious. So far, only four
banks-Wells Fargo, Wachovia, National City and an unidentified bank-have
signed on, though more are expected to join Uncle Sam's E-Authentication
Federation. The looming question: What's in it for banks?

... snip ...

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com