{"id":4826,"date":"2014-12-23T21:00:03","date_gmt":"2014-12-23T21:00:03","guid":{"rendered":"https:\/\/evssolutions.com\/mobile-boarding-passes-and-identity-verification\/"},"modified":"2023-04-12T18:00:02","modified_gmt":"2023-04-12T18:00:02","slug":"mobile-boarding-passes-and-identity-verification","status":"publish","type":"post","link":"https:\/\/evssolutions.com\/insights\/mobile-boarding-passes-and-identity-verification\/","title":{"rendered":"Mobile Boarding Passes and Identity Verification"},"content":{"rendered":"<p><span data-sfref=\"[images|OpenAccessDataProvider]e96f1af2-df94-6758-a613-ff00008a8f48\" class=\"sfImageWrapper\"><img decoding=\"async\" src=\"https:\/\/evssolutions.com\/wp-content\/uploads\/sites\/7\/plane-tickets.jpg\" displaymode=\"Original\" alt=\"plane tickets\" title=\"plane tickets\" style=\"vertical-align: middle;\"><br \/> <\/span> <\/p>\n<p>A Delta security flaw discovered this week showed once again the need for identity authentication measures for online and mobile platforms.<br _moz_dirty=\"true\"><\/p>\n<p><span style=\"line-height: 1.5;\">Dani Grant, a passenger and hacker, found that she could share the URL to her mobile boarding pass and because there was no requirement to log in, anyone could download the pass. Grant investigated further and found that by changing a digit in the URL she could access the boarding passes of other passengers.<br \/> <\/span><span style=\"line-height: 1.5;\"><br \/>\nGrant was also able to log into Delta\u2019s site as these passengers where she could change their seat assignments and access any personal details they have stored in the site.<\/span><span style=\"line-height: 1.5;\"><br \/> <\/span><br _moz_dirty=\"true\"><\/p>\n<p><span style=\"line-height: 1.5;\">This means that people could download boarding passes, change the name on the QR code to their own, and potentially board flights with tickets they had not purchased. Airports are supposed to conduct their own thorough identity checks, but often fail to do so. Additionally, photo ID checks may not have caught the problem.<\/span><br _moz_dirty=\"true\"><\/p>\n<p><span style=\"line-height: 1.5;\">Airline security is still a major concern and while Delta has said the bug has been fixed, airlines need to make online identity verification a bigger concern. As airlines move toward becoming paperless, the use of mobile boarding passes is on the rise. With this move there needs to also be a move toward tighter online security.<br \/> <\/span><span style=\"line-height: 1.5;\"><br \/>\nDelta should, at the very least, require customers to log in before accessing any flight information, especially boarding passes. By using more thorough identity verification systems, like <a href=\"https:\/\/www.electronicverificationsystems.com\/products\/knowledge-based-authentication\" style=\"cursor: text;\"><span style=\"line-height: 1.5;\">dynamic KBA<\/span><span style=\"line-height: 1.5;\">,<\/span><\/a><\/span><span style=\"line-height: 1.5;\">&nbsp;they could prevent what could become a very serious federal aviation security issue.<\/span><span style=\"line-height: 1.5;\"><br \/> <\/span><br _moz_dirty=\"true\"><\/p>\n<p><span style=\"line-height: 1.5;\">In a time when security threats can <span class=\"k-marker\"><\/span><a href=\"https:\/\/www.electronicverificationsystems.com\/resources\/blog\/credit-card-fraud-and-your-brand\">harm brand reputation<\/a><span class=\"k-marker\"><\/span><span class=\"k-marker\"><\/span>,<\/span><span style=\"line-height: 1.5;\">&nbsp;taking hard line against fraud is a worthy investment.<\/span><br _moz_dirty=\"true\"><\/p>\n<p><span style=\"line-height: 1.5;\">[Contributed by EVS Marketing]<\/span><br _moz_dirty=\"true\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A Delta security flaw discovered this week showed once again the need for identity authentication measures for online and mobile platforms.<\/p>\n","protected":false},"author":40,"featured_media":4827,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[35],"tags":[],"class_list":["post-4826","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-verification"],"acf":[],"_links":{"self":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts\/4826","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/comments?post=4826"}],"version-history":[{"count":0,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/posts\/4826\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/media\/4827"}],"wp:attachment":[{"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/media?parent=4826"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/categories?post=4826"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/evssolutions.com\/wp-json\/wp\/v2\/tags?post=4826"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}