openid and usercentric identity: it's all about me

Joint Information Systems Committee

OpenID and User-Centric Identity: It’s All About MeNicole Harris, JISC Executive

Joint Information Systems Committee

An Apology

Today, I will be saying very little about OpenID

Joint Information Systems Committee

What are we talking about?

Identity 2.0??

Joint Information Systems Committee

“in Identity 2.0, usage of identity more closely resembles today's offline identity systems, but with the advantages of a digital medium. As with a driver's license, the issuer provides the user with a certified document containing claims. The user can then choose to show this information

when the situation requires.”

Burton Group

Joint Information Systems Committee

What are we talking about?

The multiple identity problem?

Joint Information Systems Committee

Multiple Identities

Joint Information Systems Committee

Joint Information Systems Committee

Joint Information Systems Committee

Joint Information Systems Committee

Joint Information Systems Committee

Approaches to managing multiple affiliations

and lots more……

Joint Information Systems Committee

Identity 2.0 Is Too Ill-Defined for Imminent Deployment

Gartner, 9th August 2006

Joint Information Systems Committee

We are talking about…

What services are users accessing?

Who is responsible?

Joint Information Systems Committee

Access and Identity Within the UK

Service Provider Credentials

Single Central Identity Provider

Devolved A

uthentication

User C

entric Identity??

Joint Information Systems Committee

Managing Identity or..

Joint Information Systems Committee

Managing Resource Access

Joint Information Systems Committee

What’s the difference?

Joint Information Systems Committee

It’s All About Me

Joint Information Systems Committee

What is my Identity? Personal Information

27th April 1977 n.harris@jisc.ac.uk

Victoria

07734 058308

Joint Information Systems Committee

What is my Identity? Stuff I like

Joint Information Systems Committee

What is my Identity? Stuff I am Allowed to do

Joint Information Systems Committee

Disconnecting Identity from Resources

Joint Information Systems Committee

Can I manage my own identity?

Joint Information Systems Committee

Can I manage my own identity?

Joint Information Systems Committee

Can I manage my own identity?

Joint Information Systems Committee

Redefining the institutional role as identity provider and service provider for students

Joint Information Systems Committee

The role of the broker

Joint Information Systems Committee

Direct Relationship between User-Institution-Resource

Joint Information Systems Committee

No Direct Relationship Between User-Institution-Resource

Joint Information Systems Committee

Questions

When is it better for the institution to physically host the resource for an end-user? Institution provided blogs, wikis, google video etc.?

When is it better for the institution to manage an identity for the end-user? (registration / revocation).

When is it better for the institution to verify identity for service providers? (authentication)

When is it better for the institution to broker access to resources for the end-user (authorisation process)? Can this be disaggregated from all service providers?

Do we have the infrastructure to allow institutions to broker access against a user-managed identity?

Where will this be important?

Who benefits, and where?

Joint Information Systems Committee

So, OpenID?

Important role to play in providing the infrastructure to allow us to move forward.

Better than e-mail verification.

Role for institutions as an OpenIDprovider?

Links to ‘policy-lite’ approaches.

Single digital identity very important.

Great for people without an identity provider.

Joint Information Systems Committee

What is JISC Doing?

Full review of access and identity management against the Information Environment.

Identity Project: reporting soon. Focus on current landscape within institutions.

OpenID / external identity provision study to be commissioned.

Identity Metasystems study to be commissioned.

Personalisation study.

E-Portfolio work: ULN??

Importance of links to repositories work.

Users and Innovation Programme.

Joint Information Systems Committee

Contacts

n.harris@jisc.ac.uk

j.farnhill@jisc.ac.uk

www.jisc.ac.uk