Epic struggle over Microsoft's Passport

US privacy group Epic has called on the US state attorney generals to investigate Microsoft's Passport authentication engine and related .Net services.

Epic (the Electronic Privacy Information Centre) said it has been forced to take the action because repeated calls for the Federal Trade Commission to investigate had been ignored.

It said it has grave concerns over the services, which are a fundamental part of Microsoft's future strategy.

Epic said in a statement: "These systems unfairly and deceptively gather personal information and expose consumers to the release, sale, and theft of their personal information."

The group said Microsoft's record on security, in addition to its unclear description of what it will do with customer data, means the software is a huge threat.

Epic added: "Immediate state action is necessary to protect consumers and ensure Microsoft does not continue to improperly collect personal information."

The news comes as yet another security hole has emerged in .Net with problems at MSN's Gaming Zone.

Microsoft's Passport software controls the authentication of users trying to log in to any Microsoft-enabled web service, such as Hotmail, and is a fundamental part of its .Net vision.

Microsoft was unable to comment on the story.