Tozny introduces encrypted identity tool 'TozID' as part of security service platform

guest · Feb 13, 2020

Tozny introduces encrypted identity tool as part of security service platform
February 13, 2020
https://techcrunch.com/2020/02/13/t...ty-tool-as-part-of-security-service-platform/

Tozny, a Portland, Oregon startup that wants to help companies more easily incorporate encryption into programs and processes, introduced TozID today. It is an identity and access control tool that can work independently or in conjunction with the company’s other encryption tools.

“Basically we have a Security as a Service platform, and it’s designed to help developers and IT departments add defense in depth by [combining] centralized user management with an end-to-end encryption platform,” Tozny CEO and founder Isaac Potoczny-Jones told TechCrunch.
The company is introducing an identity and access solution today with the hope of moving beyond its core developer and government audience to a broader enterprise customer base.

Under the hood, TozID uses standards identity constructs like single sign-on, SAML and OpenID, and it can plug into any existing identity framework, but the key here is that it’s encryption-based and uses Zero Knowledge identification. This allows a user (or application) to control information with a password while reducing the risk of sharing data because Tozny does not store passwords or send them over the network.
Click to expand...

In this tool, the password acts as the encryption key, which enables users or applications to control access to data in a very granular way, only unlocking information for people or applications they want to be able to access that information.

The company also has a data privacy tool geared towards developers to build in end-to-end encryption into applications, whether that’s web, mobile, server and so forth. Developers can use the Tozny SDK to add encryption to their applications without a lot of encryption knowledge.

“This is an open source toolkit on the client side, so that folks can vet it for security — cryptographers like that — and on the server side it’s a SaaS-type platform,” he said. The latter is how the company makes money, by selling the service.
Click to expand...

Tozny: Tozny Launches TozID!

TozID Delivers Powerful Identity Defense-in-Depth for Workforces and Customers that Centralizes Single Sign-on and Decentralizes Risk in an Encryption-as-a-Service Platform
[...]
To learn more about TozID read the blog post. Get started with TozID to add encrypted identity and access management to your applications here.
Click to expand...

mirimir · Feb 13, 2020

It sounds interesting, but I'm suspicious.

Anything that delegates authority for data access from users to third parties is dangerous.

Even without deception or exploits, there's the risk of unintended consequences.

Me, I want to make every decision, every time, in the moment.

Log in or Sign up

Tozny introduces encrypted identity tool 'TozID' as part of security service platform

guest Guest

mirimir Registered Member

Log in or Sign up

Tozny introduces encrypted identity tool 'TozID' as part of security service platform

guest Guest

mirimir Registered Member

Useful Searches