navigating user-centric identity - windley digital... · 2007. 12. 3. · user-centric identity...
TRANSCRIPT
![Page 2: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/2.jpg)
![Page 3: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/3.jpg)
Technical Protocols
![Page 4: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/4.jpg)
Technical Protocols
Identity Projects
![Page 5: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/5.jpg)
Technical Protocols
Identity Projects
Interop Projects
![Page 6: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/6.jpg)
Technical Protocols
Identity Projects
Interop Projects
Industry Consortia
![Page 7: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/7.jpg)
Technical Protocols
Identity Projects
Interop Projects
Industry Consortia
New Horizons
![Page 8: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/8.jpg)
Some Terminology
• Identity Provide (IdP)
• Relying Party (RP) or Service Provider (SP)
• User
• See the identity lexicon for complete list
• http://identitygang.org/moin.cgi/Lexicon
![Page 9: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/9.jpg)
Cameron’s Laws of Identity1. User consent and control
2. Minimal disclosure
3. Justifiable parties
4. Directed identity
5. Pluralism
6. Human integration
7. Consistent experience across contexts
![Page 10: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/10.jpg)
Technical Protocols
![Page 11: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/11.jpg)
CardSpace &Information Cards
• Protocol for exchanging token-based claims Identity selector
• WS-Trust, STS, WS-Security
• Microsoft lead, with lots of community involvement
![Page 12: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/12.jpg)
• URL-based identity
• Provides RP with evidence user has a shared secret with IdP
• AOL, Orange, Technorati, Wordpress.com, LiveJournal members all have them
• Thousands of RPs (depending on who’s counting)
• 2.0 standard still not approved
![Page 13: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/13.jpg)
SAML
• Security Assertion Markup Language
• XML framework for describing and exchanging
• Authentication information
• Attributes
• Used by other identity protocols (CardSpace, OpenID extensions)
• Solves used cases in it’s own right
![Page 14: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/14.jpg)
ID-WSF
• Web services framework for identity
• Optimized for SAML
• Privacy protection
• Discovery
• Attribute sharing
![Page 15: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/15.jpg)
OAuth
• An open protocol to allow secure API authentication in a simple and standard method from desk top and web applications
• Designed for safe delegation of authority within limits set by the user
• Mashups!
![Page 16: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/16.jpg)
XRI
• eXtensible Resource Identifier
• Industry support for standard (OASIS)
• Persistent identifier
• iname (=windley)
• inumber
• Semantic tagging
![Page 17: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/17.jpg)
XDI
• Data sharing protocol based on XRI
• XRI’s provide semantic information for data via linking
• Personal profile information is a primary use case
![Page 18: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/18.jpg)
Identity Projects
![Page 19: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/19.jpg)
![Page 20: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/20.jpg)
Bandit
• Open source project sponsored by Novell
• Building identity components
• Multiple protocols supported
• Identity selectors or Mac and Linux
![Page 21: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/21.jpg)
Sxipper
• Free Firefox plug-in
• Password management
• OpenID Support
• Browser-based identity selector
![Page 22: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/22.jpg)
Interop Projects
![Page 23: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/23.jpg)
OSIS
• Project interoperability
• Runs multiple interop events each year
• Identity Commons working group
![Page 24: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/24.jpg)
Concordia
• Defines use cases for interop
• Focus on use cases not supported by current protocols
• Drives identity protocols forward
• Broad industry support
![Page 25: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/25.jpg)
The Pamela Project
• Grassroots effort
• Support for technical and non-tehnical users
• Focus on relyig party code development
![Page 26: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/26.jpg)
Industry Consortia
![Page 27: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/27.jpg)
Liberty Alliance
• Industry consortium with long history in federation
• Sponsors multiple projects and working groups
• Liberty Federation
• Liberty Web services
• Open Liberty (open source)
![Page 28: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/28.jpg)
Liberty PPEG Privacy Summits
• Public Policy Expert Group
• Discussions/meetings about privacy among
• Industry
• Legal
• Academia
• Policy
• Shared models and terminology
![Page 29: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/29.jpg)
Shibboleth
• Roots in higher-education
• Internet2 project
• Based on SAML
• Provided RP and IdP code
![Page 30: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/30.jpg)
ITU-T Focus Group on IdM
• Telephone standards
• Deliverables:
• Requiements for Global Identity Management, Interoperability, and Trust (Rec X.125)
• Standards for nextgen networks
• Global registries for XRI, SPIDs, and network elements
![Page 31: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/31.jpg)
OASIS ID Trust
• Founded in 1991 as PKI Forum
• Focus on trust infrastructures
• Identity and trust infrastructures
• Trust policies
• Barriers and emerging issues
• Outreach and education
• IDTrust 2008
![Page 32: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/32.jpg)
Identity Commons
• Supports creation of open identity layer for the Web
• Serves as an umbrella legal entity for working groups
• Internet Identity Workshop, OSIS, OpenID, others
• Governed by Stewards Council
![Page 33: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/33.jpg)
New Horizons
![Page 34: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/34.jpg)
Project VRM
• Vendor Relationship Management
• Dual of Customer Relationship Management
• Allows demand to inform supply (rather supply trying to “create” demand)
![Page 35: Navigating User-Centric Identity - Windley digital... · 2007. 12. 3. · User-Centric Identity Phillip J. Windley, Ph.D. phil@windley.org . Technical Protocols. Technical ... Cameron’s](https://reader034.vdocument.in/reader034/viewer/2022052103/603d41e39c1b3b17a534402b/html5/thumbnails/35.jpg)
The End
Questions?
Contact me:
Phil Windley
www.windley.com