The nation's four largest network operators recently provided an update on the progress being made by the Mobile Authentication Taskforce. In September 2017, AT&T, Sprint, T-Mobile, and Verizon Wireless agreed to work together in order to build a better way for people to log-in to apps and other services with their phone. This week, they announced Project Verify, which they contend will replace passwords with a "more secure, device-based, multi-factor authentication." With Project Verify, consumers will have control over what information they share through their device and what apps are allowed to access it. Once they've set up the initial handshake between their phone and their favorite apps and services, they will be logged in automatically. The Mobile Authorization Taskforce says user IDs will be backed by unique identifiers, including phone numbers, account type, account tenure, and SIM card data -- all of which are protected by the mobile network's authentication protocols. Consumers' ID is verified via network intelligence that matches the SIM card to device owner data. The service can work with text- and email-based two-factor authentication methods when necessary. Users will need to protect their phone with a password, fingerprint, or other method to prevent others from easily accessing their apps and data. The carriers hope Project Verify will help prevent fraud and data breaches, while also helping people bypass the hassle of usernames and passwords. There's no word yet on when Project Verify will launch, nor what phones and carriers will be able to use the service.


More...