Security Projects Win Grants

Monday, September 21, 2015 @ 03:09 PM gHale

Three pilot projects designed to make online transactions more secure and privacy-enhancing for healthcare, government services, transportation and the Internet of Things received $3.7 million in grants from the National Institute of Standards and Technology (NIST).

The three recipients of the National Strategy for Trusted Identities in Cyberspace (NSTIC) grants will focus on reducing tax refund theft, improving the security of medical information and providing secure online data storage.

Cyber Evaluation Tool Update Releases
Security Tool Shifts to Private Sector
Practice Guide for Utilities from NIST
Collaborators Sought for Security Projects

“These pilots will provide innovative, practical solutions to ensure the trust we need to combat the growing threat of cyber threats and keep our online economy growing,” said Deputy Secretary of Commerce Bruce Andrews.

This is the fourth round of pilot grants awarded to support implementation of NSTIC, launched by the Obama administration in 2011 and managed by NIST. The strategy supports collaboration between the private sector, advocacy groups and public-sector agencies to encourage the adoption of secure, efficient, easy-to-use and interoperable identity credentials to access online services in a way that promotes confidence, privacy, choice and innovation.

“The way we represent ourselves online is fundamental to nearly everything we do,” said Mike Garcia, acting director of the NSTIC National Program Office. “We need more — and better — tools to make online identity easier and more secure, and to advance the commercial deployment of privacy-enhancing technologies. The pilots add to an NSTIC pilot portfolio that has already improved the digital lives of millions.”

The grantees are:

MorphoTrust USA (Billerica, MA, $1,005,168): MorphoTrust’s second NSTIC pilot grant will focus on preventing the theft of personal state tax refunds. Through MorphoTrust’s partnerships with multiple states, the project will show how to efficiently leverage trust created during the online driver licensing process, which includes enrollment, verification through biometric identification, authentication and validation, and issuance, in a scalable way to create trustworthy electronic IDs that individuals control.

HealthIDx (Alexandria, VA, $813,922): HealthIDx is developing a privacy-enhancing technology that protects patients’ identity and information. This project will pilot a “triple blind” technology in which medical service providers have no knowledge of which credential service provider an end-user chooses, credential service providers have no knowledge of which medical service provider the end-user is visiting, and the identity broker has no knowledge (nor retains any information) about the transaction’s parties or contents.

Galois, Inc. (Portland, OR, $ 1,856,778): Galois will build a tool that allows users to store and share private information online. The user-centric personal data storage system relies on biometric-based authentication and will end up built securely from the ground up. As part of the pilot, Galois will work with partners to develop just-in-time transit ticketing on smart phones and to integrate the secure system into an Internet of Things-enabled smart home.