1. What types of technology could big retailers use to prevent identity thieves from purchasing merchandise

There are couple thing that would help big retailers from identity thieves. One thing is the authentication and authorization technologies such as biometrics. Another way is detection multiple transactions from different location. There should be a red flag if unusually large order or purchases in a short time. Last, retailers could notify the customer directly if they found unusual transaction and verify with the real customer if they truly buying something big.

1. Two-step verification
Although much of today's digital world is password-protected, a recent survey from security technology company McAfee found that 37 percent of people use the same password for multiple online accounts. That really simplifies things for a hacker: If a hacker is able to obtain login credentials for one online account, he or she will likely be able to use that information to access yet another. But two-step verification, also referred to as two-factor authentication, adds an additional layer of protection. It requires users to have an extra credential, beyond just a password, to access an online account. Two-step verification generally requires a user to know something, such as a password, and have something, such as a specific mobile device. For example, a social media site might require two-step verification if you try to access your account from a new device. In addition to entering your password, the site might also require you to enter a unique PIN that is text messaged to your phone. In this case, a hacker would need to know your password and have access to your phone to break in. "[Two-step verification] really decreases the likelihood of someone with malicious intent getting access to whatever information you are engaging with online," says Gary Davis, vice president of global consumer marketing at McAfee. "I would encourage everyone to use two-factor authentication," Davis says. "It's going to provide a higher level of confidence that something bad can't happen when you are interacting with that property." While two-step verification isn't a security norm yet, Davis says it's gaining in popularity. Both LinkedIn and Twitter, for example, introduced two-step verification features this year. 2. Biometric technology
Biometric technology is no longer the fodder of Hollywood spy movies. Now, more consumers are unlocking their smartphones with their fingerprint, and biometric devices are also being implemented in hospitals to reduce the risk of medical identity fraud. Biometric devices recognize people's unique physical traits—such as a fingerprint, iris, face, or voice—and use them as a means of authentication. The iPhone 5s smartphone, for example, allows the use of a fingerprint as a passcode. According to information from the Apple Support website, the probability that small sections of two separate fingerprints would be alike enough to register as a match for its technology is one in 50,000 for one enrolled finger. The odds of guessing a four-digit passcode, on the other hand, are 1 in 10,000. "I believe there will be a time when biometrics is authentication you are using to not only access your devices but [to also access] every place you go online," Davis says. "It's the surest thing that can't be compromised, if done correctly, when you are going to all of your different properties," he adds.

3. Password managers
With passwords to unlock everything from your phone to your email to your account on your favorite shopping website, it's easy to suffer from password fatigue. It can be difficult to come up with strong, unique passwords for all of your accounts—and then remember all of them. Password managers, which allow you to store and encrypt all of your login information, can help you manage and secure your digital accounts. Password managers come in the form of downloaded apps or software, browser plug-ins, or even thumb drives. (If you opt for a thumb drive, be sure to keep it with you at all times.) With a password manager, you only need to remember one password—that which you use to access the password manager itself. Some programs allow you to access your password manager through a biometric, such as your fingerprint, or through some form of two-step verification. Additionally, many password managers will create strong passwords for you so you don't have to rack your brain for a clever combination of letters, numbers, and symbols. While new technologies can help you protect your personal information and prevent identity theft, it's still important to practice basic identity protection measures when interacting online or with your tech gadgets. Always use a secure Internet connection when sending personal information, make sure your phone and computer software are regularly updated, and be wary of clicking on links in unsolicited emails or text messages.

4. Create Keys and Key Escrow Mechanisms

Some encryption technologies provide a method to render a key obsolete, and often require the pass phrase used to create the key to do so. Once the keys and their related pass phrases are created, the information needed to make the key obsolete, along with clear text versions of pass phrases and the created keys, should be escrowed. One suggested escrow method is to copy all of this information to removable media and then physically secure that media. Access to these physically secured copies must be highly controlled. The originals from whence copies were made should be appropriately destroyed in accordance with all appropriate data destruction requirements. Copies needing to be destroyed in the future should be destroyed using the same methods and technologies. These methods used are governed by policies and described in procedures.