A new decentralized identity management system from Ping Identity promises fewer headaches and more robust security. Credit: iStock Ping Identity, a Colorado-based IAM software vendor, is making a new product, PingOne Neo, available in a limited early access program. PingOne Neo is designed as a decentralized platform, as opposed to the heavily federated systems commonly in use. It allows for data decentralization, storing credentials and keys on the user’s mobile device, and lets credentials be issued using a wider range of identity proofs, instead of particular government-issued ID.It works something like a wallet, according to the company. End users request a credential from an issuing organization, which is cryptographically signed and verifiable. That credential becomes a part of the user’s “digital wallet,” and works like a ticket into whatever system or application it is designed to access. PingOne Neo also supports other identity standards that are popular in the market, including OpenID, ISO and W3C.ID management technique limits attack surfaceThis identity management technique also improves security by limiting the attack surface for bad actors, according to Ping. Pre-set integrations between the various identity back-ends used for verification represent potential targets for malicious hackers, the company said. Neo proects against this by checking credentials using minimal necessary identification, which means that less sensitive data is stored and transported.“Organizations spend significant time and money obtaining and verifying information from customers and employees, then attempt to determine access, entitlements, and authorizations to remain secure and compliant,” said Ping CEO Andre Durand in a press release. “Neo eliminates the manual resource burden from businesses while empowering individuals with their own data, reducing threats of fraud or identity theft while increasing privacy.” It’s a strong move for Ping, according to IDC Research Vice President Jay Bretzmann, who noted that the company’s embrace of open standards for this type of “digital wallet” bodes well for interoperability and personal control over privately identifiable information.“It’ll be a few years before centralized identity providers … start seeing much of an impact to those businesses,” he said via email. “But in the end, users walk away with a ‘win’ over controlling what personal data gets shared.” Sign-ups for the early access version of PingOne Neo are available here. Related content feature Top cybersecurity M&A deals for 2023 Fears of recession, rising interest rates, mass tech layoffs, and conservative spending trends are likely to make dealmakers cautious, but an ever-increasing need to defend against bigger and faster attacks will likely keep M&A activity steady in By CSO Staff Sep 22, 2023 24 mins Mergers and Acquisitions Mergers and Acquisitions Mergers and Acquisitions brandpost Unmasking ransomware threat clusters: Why it matters to defenders Similar patterns of behavior among ransomware treat groups can help security teams better understand and prepare for attacks By Joan Goodchild Sep 21, 2023 3 mins Cybercrime news analysis China’s offensive cyber operations support “soft power” agenda in Africa Researchers track Chinese cyber espionage intrusions targeting African industrial sectors. By Michael Hill Sep 21, 2023 5 mins Advanced Persistent Threats Cyberattacks Critical Infrastructure brandpost Proactive OT security requires visibility + prevention You cannot protect your operation by simply watching and waiting. It is essential to have a defense-in-depth approach. By Austen Byers Sep 21, 2023 4 mins Security Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe