Relationship Cards Iiw Nov 3 2009

From Information Cards to Relationship Cards IIW IX November 3, 2009 Paul Trevithick, paul@azigo.com

The Problem
I have too many accounts and passwords
My personal information is spread all over the web
I have no way to control my digital footprint
Information about me (esp. social networks) isn’t portable
I have security and privacy concerns with today’s “cookie” model

Missing Identity Layer
Controlled by the individual
Trusted, cloud-based, available anywhere
Synchronizes all of my identities, profiles and social networks
Gives me more control over updating and who has access to my own data
Identity Layer

Higgins
Began in 2003 in affiliation with Harvard’s Berkman Center
Invited to join the Eclipse Foundation in 2004
IBM, Novell, and others contributed a dozen senior developers during 2005-2007
Google and Oracle began contributing in 2007
Higgins 1.0 was released in 2008
Higgins code is part of commercial products from Novell, IBM, Google, Serena, Azigo, and others.
Higgins 1.1 is planned for Q1 2010
http://higgins-project.org

Card Metaphor
Information Cards –a digital version of the cards you carry in your purse or wallet today
You use them with a new kind of digital wallet called a selector

Act I: Regular Information Cards

Information Cards & Claims Data Portability: profile & social networking attributes are made portable by referencing them on Information Cards Any kind of information: your preferences, favorite songs, employee id numbers, drivers licenses, affiliations, your health plan id, etc., can be on a card. Cards from multiple sites are managed in a local Card Selector application (Microsoft CardSpace™ or Azigo™ or Novell DigitalMe™)

Card-based Login Click Higgins is interoperable with Microsoft CardSpace™ shown here

Card Types
Managed
What somebody else says about you
Name
Address
Date of Birth
License number
Personal
What you say about you
Name
Gender
Like to rock climb, fly fish, mountain bike, play piano
No kids
Profession: Medical doctor

Actors A U r P p Identity Provider Relying Party User R

Personal Card A U r P p R Personal Card has

Personal Card: Data Flow A U r P p R Personal Card

Managed Card A U r P p R points to token generator Managed Card has

Managed Card: Data Flow A U r P p R points to token generator Managed Card has

Managed Card: Alice goes to site A U r P p R

Managed Card: Selector retrieves policy A U r P p R Required and Optional Claims

Managed Card: Display cards that match policy A U r P p R

Managed Card: Alice selects a card A U r P p R

Managed Card: Auth to IdP A U r P p R

Managed Card: Generate token A U r P p R

Managed Card: Browser sends token A U r P p R Set of Claims

Managed Card: Validate token A U r P p R

Managed Card: Alice accesses resource A U r P p R

Card-based Login Benefits
Per-site passwords are eliminated
Strong anti-phishing protection
Site declares what claims it needs or desires
User reviews and consents to all release
Privacy enhancing minimal disclosure

Regular Cards
Manual
Static “one shot”
Read only
Uni-directional

Act II: Relationship Cards

Personal Data Agent
The agent is the advocate of the consumer/patient/citizen
Gives data ownership back to the individual
Personal Data Agent Browser Add-on Permissioned data sharing

Relationship Cards: Sending a pointer claim value over the front channel A U r P p R Set of Claims & Ptr

Personal Relationship Cards: Sending a pointer over the front channel A U r P p R Set of Claims & Ptr Personal R-Card points to data has

Personal Relationship Cards: User managed data channel A U r P p R Any protocol

Managed Relationship Cards: Sending a pointer over the front channel A U r P p R Set of Claims & Ptr has Managed R-Card

Managed Relationship Cards: User managed data channel A U r P p R Managed R-Card has Kantara UMA Access Manager control control control Any protocol

Relationship Cards
Manual  Automatic
Static “one shot”  Continuous
Read only  Read/Write
Uni-directional  Bi-directional
… data channels managed by the user

http://www.internetidentityworkshop.com	817
http://www.slideshare.net	3
http://localhost	2
http://translate.googleusercontent.com	1
https://x.disconnect.me	1

Relationship Cards Iiw Nov 3 2009

by Internet Identity Workshop on Nov 05, 2009

Accessibility

Categories

Tags

Upload Details

Usage Rights

5 Embeds 824

Statistics

Relationship Cards Iiw Nov 3 2009 — Presentation Transcript