Security

Today, Ericsson Labs is launching the Identity Management Framework API.

It can:
• Provide easy sign-in and sign-up functionalities on websites for mobile phone users
• Increase registration and conversion rates
• Access rich user profile data
• Reduce customer care costs

Using the OpenID protocol and GBA-based authentication, the framework provides a secure and simple way to enable user registration and sign-in for your website. All that is needed is to define the identity attributes you wish to receive, the authentication method and the framework does the rest.

Why the Identity Management Framework?
In a recent Social Identity study conducted by Blue Research and released by Janrain in February 2011, 75% of consumers surveyed said that they are bothered by website registrations. The majority of them said they are likely to leave/avoid a website or give false information when required to register. In addition, when login information is forgotten, 45% admit leaving the website instead of recovering their passwords. On the other hand, 66% of respondents considered the ability to sign-in to a website using an existing online identity to be attractive.

The Identity Management Framework tackles this issue, providing sign-up and sign-in functionalities on websites. Using the Identity Management Framework API, developers can enable OpenID on their websites with a few simple steps and can increase registration and conversion rates, access rich user profile data, and reduce customer care costs. In short, the website developer selects the identity attributes the site wishes to receive (such as full name, email and phone), as well as the authentication method (username/password or GBA-based card) for the users, and leaves everything else to the framework.

Technology behind the Identity Management Framework
The framework functionalities are based on two main technologies: OpenID and Generic Bootstrapping Architecture (GBA). OpenID is a standardized protocol for identity management and single sign-on, adopted widely all over the Internet. The GBA standard is the upcoming technology for mutual authentication using Mobile Network Operators' infrastructure, thus allowing mobile users to access secured services in a much easier manner, simply by using their mobile phones.

Click here to learn more about the Identity Management Framework. Feedback welcome!