Zerify Inc (ZRFY)

[Gold49er]

NCCOE & NIST MFA Links

The following Links are from the NCCoE and NIST and pertain to MFA.


Multifactor Authentication for e-Commerce
https://nccoe.nist.gov/projects/use_cases/multifactor-authentication-ecommerce
In collaboration with stakeholders in the retail and e-commerce ecosystem, the NCCoE has identified that implementing multifactor authentication (MFA) for e-commerce transactions, tied to existing web analytics and contextual risk calculation (by the retailer and/or by a federated identity provider), can increase assurance in purchaser or user identity and thus help reduce the risk of false online identification and authentication fraud. The NCCoE understands that retail is a volume-reliant business and that consumers and retailers will adopt multifactor authentication mechanisms as long as they do not unnecessarily encumber the purchasing process or disrupt the user experience.

The publication of this project description is the beginning of a process that will identify project participants, cybersecurity vendors, and their relevant commercially available or open-source hardware and software components. These components will be used in a laboratory environment where the project team will build open, standards-based, modular, end-to-end reference designs that will address the CNP authentication problem. The approach may include architectural definition, logical design, build development, test and evaluation, and security control mapping. The output of the process will be the publication of a multi-volume NIST Cybersecurity Practice Guide that will help consumer-facing and retail organizations implement multifactor authentication for e-commerce transactions.

2016
Cybersecurity experts consider standards for multi-factor authentication in the retail sector
https://www.secureidnews.com/news-item/cybersecurity-experts-consider-standards-for-multi-factor-authentication-in-the-retail-sector/

The National Cybersecurity Center of Excellence (NCCoE) is seeking public comment on a project aimed at reducing retail fraud in the U.S. The catalyst for the project is the uptick in fraud among European retailers since the rollout of EMV chip-and-PIN (CNP) technology a decade ago.
The goal is to reduce the risk in e-commerce transactions by employing multi-factor authentication using existing web analytics and contextual risk calculation.


MULTIFACTOR AUTHENTICATION FOR E-COMMERCE
https://nccoe.nist.gov/sites/default/files/library/fact-sheets/cr-mfa-fact-sheet.pdf
Online Authentication for the Retail Sector
The Natonal Cybersecurity Center of Excellence (NCCoE) is helping enterprises ensure the security of their online transactons through collaboratve eforts with industry and the Informaton Technology (IT) community, including vendors of cybersecurity solutons. This fact sheet provides an overview of the Multfactor Authentcaton for e-Commerce project descripton, including background and challenge, goals, and potental benefts. If you would like to propose an alternatve architecture or know of products that might be applicable to the challenge of securing e-commerce transactons, please contact us at [e-mail].


Back to basics: Multi-factor authentication (MFA)
https://www.nist.gov/itl/tig/back-basics-multi-factor-authentication


Digital Identity Guidelines: Public Comment Period Extension
Comments due by: May 1, 2017
https://pages.nist.gov/800-63-3/


NIST’s NCCoE Showcases Projects at RSA, HIMSS Conferences
https://nccoe.nist.gov/news/nist%E2%80%99s-nccoe-showcases-projects-rsa-himss-conferences
Data Integrity : Wednesday, February 15 from 4-4:30pm Multifactor Authentication for e-Commerce : Thursday, February 16 from ... Sector Wireless Infusion Pumps Data Integrity Multifactor Authentication for e-Commerce Electronic Health Records on ...

Pioneering Protection Beyond PCI
http://eventscribe.com/2016/Transact/QRcode.asp?Pres=129191
Wednesday, April 201:30 PM - 2:20 PMRoom: South Pacific ABCE: 1 Credit
Moderator(s):

Brad Corrion
Platform Architect, Intel Corporation, Chandler, Arizona

Speaker(s):

David Gosman
Global Hospitality Segment Manager, HP, New City, New York

Robert Martin
Vice President, Ingenico

George Rice
Senior Director, Payments, Hewlett-Packard Enterprise, Herndon, Virginia

Tiffany Trent-Abram
VP, Global Product Management, Payment Network Solutions, Transaction Network Services, Reston, Virginia


Track Sponsored By:


In order to deliver customized "next gen" retail experiences, retailers are collecting more personally identifiable information about consumers. The time is NOW to move to protecting all of the sensitive data streams- going beyond PCI scope to embrace protecting the entire customer. Stolen identities are both time consuming and expensive to remediate- and yet on the rise. In 2014 19M fraudulent tax returns were filed in the USA. Intel has assembled a panel of experts to discuss what can be done to protect the entire customer.