Microsoft Live Labs releases new security services

Microsoft's Live Labs has launched two security-related Web-based services, one for providing authentication and another for connecting P-to-P (peer-to-peer) applications through network firewalls.

The services are part of Microsoft's plan to quickly deliver Web-based services to compete with rivals Google and Yahoo. Microsoft formed Live Labs, its research arm for creating these Internet technologies, in January. Microsoft has said many of its Live services will be connected to Windows Vista, the next version of its client OS, but has not clearly articulated a plan for how that makes the OS more valuable to users.

The Security Token Service (STS) is an online identity-management service that enables users to register personal information on a virtual information card using Microsoft's authentication service, code-named InfoCard. After signing up for STS, when users visit a site that is InfoCard-enabled, they can sign in to the site using information stored in the virtual card, according to Microsoft.

Microsoft envisions InfoCard as a simple and secure authentication technology that will ultimately replace the name- and password-based systems used by most Web sites today. The company introduced the technology, which will be a part of Windows Vista, at the RSA Conference in February. Many see it as the latest incarnation of Microsoft's Passport service, introduced several years ago as the company's plan for users to authenticate themselves across multiple sites on the Web, which never was as widely used as Microsoft had hoped.

The new Relay Service allows services built using Windows Communication Foundation (WCF) to connect over P-to-P networks through security devices such as firewalls and network address translators (NATs). WCF is the underlying technology in Windows Vista that allows for different systems to connect and communicate using Web services. NATs hide the private addresses of the local network from the public address side attached to the Internet.

To allow for applications to communicate via P-to-P networks now, developers typically write complex, custom code, a process that can be time consuming, according to Microsoft. The Relay Service provides communication infrastructure that eliminates the need to write this code to connect applications between networks that run firewalls or NATs, Microsoft said.