Kerberos backers form consortium

The Kerberos authentication platform is being extended to work more efficiently across multiple organizations and within handheld devices and mobile apps

Developers and other supporters of the Kerberos authentication platform gathered at MIT's Stata Center on Thursday to unveil a new industry effort aimed at furthering the technology.

Already in use by an estimated 100 million people through its longtime inclusion in other technologies, including popular products made by Apple, Microsoft, Red Hat, and Sun, backers of the new MIT Kerberos Consortium said that the group should help the platform -- invented at MIT 20 years ago -- remain relevant and accommodate new trends around shared infrastructure and mobile computing.

The new Kerberos association, whose members include Centrify, Financial Services Technology Consortium, Google, Stanford University, Sun, TeamF1, and the University of Michigan, will provide some of the funding, technological expertise, and development resources needed to help achieve those goals, organizers said at the event.

Sam Hartmann, chief technologist of the consortium and one of the five full-time developers of Kerberos, said the technology remains one of the IT industry's best-kept secrets but that the group is hoping to change that via its new efforts.

"Kerberos has grown incrementally until today, but it's a technology where people who are using it don't know how much they've used it. When a computer security program works, you shouldn't notice it. You should be able to get your job done, and it shouldn't get in the way," Hartmann said.

"Anyone using Microsoft's Active Directory or Apple Mac Server has used [Kerberos] without even knowing it, and that's the level of success we're striving for," he said. "Our job now is to expand the envelope to bring Kerberos to new developers and uses."

With the backing of the group, Hartmann said that developers will attempt to modify Kerberos to work within the smaller footprint of mobile devices and applications to offer expanded authentication capabilities to areas like wireless e-commerce.

The current iteration of Kerberos designed for use across multiple organizations remains "a pain to set-up" he admitted, while pledging that the assembled team will push to improve the technology's functionality to that end.

The MIT Kerberos Consortium will also seek new opportunities to align the authentication system with industry standards, including SAML (Security Assertion Markup Language), as well as with standards bodies like the Information Assurance Task Force (IATF) and the Organization for the Advancement of Structured Information Standards.

Bruce Vincent, the chief technology strategist at Stanford, said that Kerberos has proven critical in allowing commercial authentication systems to communicate and provide access management across multi-vendor IT systems.

"Without Kerberos as part of the fabric of our existing infrastructure for ID management and a number of other uses, there's no way we could manage authentication across thousands of systems today," Vincent said, while adding that Stanford was committed to the platform for the "long haul."

Officials from Centrify, which has built its own software business around Kerberos, an open-source project, said that the platform is as relevant today as it has ever been, particularly inside large corporate IT shops.

As a result, his company has been able to recruit US$36 million in venture funding from Silicon Valley capitalists, including Sigma Partners, and sold products to roughly 25 percent of companies ranking in the Fortune 50.

"A lot of large enterprises are dealing with compliance problems, and this is forcing customers to take a hard look at how they manage their internal systems and access technologies," Kemp said. "The reality of the situation is that computing environments and infrastructure will be heterogeneous and that the people who wrote Sarbanes-Oxley weren't thinking about this situation. Most vendors' technologies don't talk to each other."

Contrary to some rumors, consortium representatives reported that the Kerberos community has not had a falling-out with Microsoft and said that the platform's presence in Active Directory remains crucial based on the product's popularity among businesses.

"MIT wants to make sure that everyone plays nicely together," said Stephen Buckley, executive director of the Kerberos Consortium. "Bad things only happen because people do nothing. If MIT and these visionary companies did nothing, the world's ability for authentication would fracture."

Join the PC World newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Matt Hines

Show Comments

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?