Iiw east openidentityforopengovfinal

Open Identity for Open Government
September 9, 2010
Mary Ruddy
Mary Ruddy

Open Identity For Open Government Initiative
Public Private Partnership
Various Agencies
Non-Profits
For Profit Companies

US GSA Initiative
“The government believes that there is a win-win for all of us in collaborating with industry to provide good identity solutions for electronic interactions with the American public.”
Judy Spencer of GSA

Goals
(With full credit to Chris Louden Protiviti Gov Services)
Make Government more transparent to citizenry
Make it easier for citizenry to access government information
Avoid issuance of application-specific credentials
Leverage Industry credentials for Government use
Leverage Web 2.0 technologies

What is Open Identity ?
Portable Internet identities
Identities issued by industry – multiple providers
Some call it federated identity….
Based on open standards
User driven (user controls what data is released)
OpenID and Information Card protocols…
Identities certified by independent organizations

Multiple Levels of Assurance (LOA)
Pseudonomity - MickyMouse123
Verified identities - John D. Smyth
Verified claims - City or state of residence, age, etc.

Third-party identity Mgmt.
Address the need for Internet-scale digital identity management
Solves the problem by using a third party to assist end-users in identity transactions
Called an “identity service provider” (also “identity provider”, “IdP”, “IP”)
This sets up a “trust triangle” for Internet identity transactions
7

8
relyingparty
identityserviceprovider
Optional direct trust agreement
Terms of Service (TOS) agreement
Terms of Service (TOS) agreement
user
The “trust triangle”

Open Identity Framework Model
9
Trust Community
Trust Community
Trust Community
1
1
1
relyingparties
Identityserviceproviders
Trust Framework Provider
3
2
4
5
assessors& auditors
disputeresolvers
Trust framework agreements
TOS agreements
user

Initiatives
Gov standards
Certifying process for gov standards
Market for certifying to gov standards
IdP market
Enabling infrastructure technology
Meta Data for Federated Interoperability
RP adoption
Privacy

Since Last Gov 2.0
GSA finalized TFPAP
Open Identity Exchange (OIX) formed
Kantara and OIX certified to certify IdPs to GSA schemas
IdP’s certified (Google, Yahoo, PayPal, Equifax VeriSign)
NIH in production at NLM with PubMed site
More Pilots in process
Various interops at RSA and Catalyst
FI-WG for meta data automation
Input to NS-SOT, now NSTIC

www.Idmanagement.Gov

PubMedhttp://www.ncbi.nlm.nih.gov/pubmed

US GSA Demonstration
Equifax issued Information Cards, powered by Azigo CardPress
Azigo Selector
Demo version of recovery.gov Drupal site with PamelaWare Drupal plugin

Next Challenges
More higher LOA certifiers
Higher LOA credentials and business models
More work on meta data interoperability
Roll out more pilots
Continued interop feedback to enabling software providers
Attribute claims

Thank You
mary@meristic.com

http://www.identitywoman.net	1482
http://www.internetidentityworkshop.com	803
http://identitywoman.kaliyasblogs.net	22
http://webcache.googleusercontent.com	2
http://localhost	2
https://webcache.googleusercontent.com	1
http://dustpan.intranet	1
http://translate.googleusercontent.com	1
https://x.disconnect.me	1

Iiw east openidentityforopengovfinal

by MaryIIW on Sep 09, 2010

Accessibility

Tags

Upload Details

Usage Rights

9 Embeds 2,315

Statistics

Iiw east openidentityforopengovfinal — Presentation Transcript