The White House’s new plan for strengthening authentication and identity verification on the web is a good first step for securing identities in online transactions and creating a trusted digital environment. In the draft strategy, entitled the “National Strategy for Trusted Identities in Cyberspace” (NSTIC), the government calls for an Identity Ecosystem, an online environment where individuals, organizations and devices trust each other because authoritative sources establish and authenticate their digital identities.
The government’s voluntary Identity Ecosystem is an ambitious, but evolutionary step in securing online transactions and activities. However, it manages to fall short in circumventing fraudsters and raises the ire of privacy advocates. In contrast, device reputation and risk assessment, which uses device fingerprints to identify known fraud device reputations, focuses on recognizing and blocking the devices fraudsters use rather than the people themselves. This is an important point for the nefarious that don’t want to be identified, the paranoid that don’t want an online identity, and the rest of us whose personally identifiable information has been too easily compromised in the past.
With over 10 million Americans becoming victims of identity theft each year, solutions such as device reputation preserve the privacy for end users while still offering the fraud and abuse fighting benefits that strong systems require to protect their business and online users. As a result, devices can play a critical role in raising trust associated with online IDs and in the government’s plan for securing identities in online transactions and creating a trusted online environment. In order for the plan to be put into action, it will take time, but today there are many technologies already available that the government should consider for the underlying infrastructure that supports this national strategy.

iovation’s Device Reputation Authority (DRA) contains a plethora of information around devices, accounts, transactions, reports of fraud and abuse and more, all used to detect and prevent online fraud and abuse for businesses and their customers. It leverages customizable business rules, risk profiles, direct experiences with scammers as well as the experiences from the world’s leading online brands, all for the highest level of online fraud protection. iovation combines cross-vertical fraud prevention expertise with unmatched device recognition technology. This offering already protects over 300 major online brands from fraud and abuse today, such as financial fraud, shipping fraud, affiliate fraud, chat abuse, spam, scams and solicitations, identity theft, phishing, account takeovers, and more.