the higgins trust framework project: a new way to manage … · 2017-10-30 · 1 the higgins trust...
TRANSCRIPT
1
The Higgins Trust Framework Project:A New Way to Manage Identity
Mary Ruddy
Tom Doman
Jim Sermersheim
Higgins
Higgins1: a species of Tasmanian long-tailed mouse
2: the name of an open source collaboration of IBM, Novell, Oracle, Parity…
Em
ail
or
IMCom
mun
ities
of In
tere
st
WebsitesBuddy ListsEnterprise
Apps
Virtu
al
Space
s
• eGovernment • Healthcare System• Corporate Directories
• eCommerce (e.g. Amazon, eBay)• Social Networking (e.g. LinkedIn) • Book club
• Family
• Professional networks• Dating networks
You
Multiple digital identities…
• Second Life• Croquet• WOW• SharePoint
4
Em
ail
or
IMCom
mun
ities
of In
tere
st
WebsitesBuddy ListsEnterprise
Apps
Virtu
al
Space
s
• eCommerce (e.g. Amazon, eBay)• Social Networking (e.g. LinkedIn)
• Book club• Family
• Professional networks• Dating networks
You
…each in its own context/silo
• Second Life• Croquet• WOW• SharePoint
• eGovernment • Healthcare System• Corporate Directories
Interoperability requires a new abstraction
6
Identity is about the linkages between multiple contexts
Interoperability is created when you can create links between aspects of a digital identity in different contexts. Bridging
contexts.
7
Contexts and Digital Subjects
Digital Subjects are sets of attributes and relationships.
� Context determines appropriateness
� Privacy policy must be defined in context
8
This is “you.” (Nothing but a set of links!)
Family Second LifeDept. of Motor
VehiclesSocial Security Administration
Other Digital Subjects
9
Links are where the action is
� Single sign on (authentication)
� Cross contextual claim presentation
� Federation
� Cross contextual facet linking
� User-centricity
The user is the bridge
� Social Networks
10
Contexts and Links
Family Second LifeDept. of Motor
Vehicles
Social Security Administration
Correlations
Relationships (e.g. “knows”)
Social Networks
Other Digital Subjects
11
Digital Subjects are exposed as i-cards
Managed (What the RMV says about you)
12
i-cards
Managed
Personal (What you say about you)
13
i-cards
Managed
Personal (self-issued)
Relationship
(What you and Best Buy say about you right now)
20
eGovernment
� RMV: Drivers license� Id: G304-98-4656
� DOB: 8/28/70
� Address: 123 Main St. Buena Vista, Colorado
� Etc.
� SSA� SSN: 304-98-4656
� Address: 123 Main St. Buena Vista, Colorado
� Etc.
� IRS� Years filed: 2006, 2005, 2004, 2003, …
� Status: Single, 1 dependent
� Address: 123 Main St. Buena Vista, Colorado
� Last audited: <never>
� Etc.
i-cards
eGovernmenteGovernment
Higgins Service
Browser + Extension
“Identity Agent”
Protection and Projection of Identity Attributes
•Authentication
•Personalization
•Blinded data
•3D avatars?
Click on a card
I-Card Selector User Interface
…you’re signed in.
(No password required)
i-cards
REI Employee
Amex
Second Life
Identity ProvidersHiggins Service
1
2
4
3
Identity Providers
REI Employee
Amex
Second Life
Higgins Service
CardSpace™Liberty
OpenIDJNDI
LDAP
SAMLX509Kerberos
An Interoperability Framework
Higgins Framework
Plug-ins
Higgins Browser Extension
Eclipse RCP Apps
Identity Providers
Apps and Services
CardSpaceProtocol Providers implement protocols for interacting with Relying Parties
OpenID
CardSpace Managed (WS-Trust)
RSS SSE
I-Card Providers implement identity protocols and card types
CardSpace Personal
SAML X509
Higgins Relationship
Kerberos
JNDI / LDAP
Enterprise Apps
Token Providers implement different kinds of security tokens
IdAS Context Providers connect to different identity data sources
HTML Forms
UN/PS Idemix
RDF/OWLActive
DirectoryComms Clients
Relying Parties
29
Higgins delivers
A consistent user experience based on i-cards
� Any identity protocol
� Any token data type
� Any kind of identity data
� Any identity data source
� Any platform
30
What can it be used for?
� Projects where you need to integrate with identity management system
� Use cases where users need to interface with lots of
different system
� Projects we are collaborating or talking with:
� ALF
� Corona
� ECF
� Equinox
higgins is glue
higgins 1: a species of Tasmanian long-tailed mouse
2: the name of an open source project
3: a kind of glue
33
Higgins Project Summary
� Open source, extensible framework
� Introduces a Identity Selector Service
� Introduces Identity Attribute Service
�Data model unifies directories, social networks, and collaboration spaces
�Makes it easy to manage identity, profile, reputation, and relationships across contexts
� 16 Committers to date
� Release 1.0 Summer 2007
� We’re always looking for great contributors!
34
35
36
37
38
39
40
41
42
43
44
45
http://eclipse.org/higgins
Paul Trevithick, Higgins Architect
Mary Ruddy, Higgins Operations Lead
[email protected]@socialphysics.org