Your SlideShare is downloading. ×
110728 Trust Framework - Takashi Shitamichi
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×

Saving this for later?

Get the SlideShare app to save on your phone or tablet. Read anywhere, anytime - even offline.

Text the download link to your phone

Standard text messaging rates apply

110728 Trust Framework - Takashi Shitamichi

6,328
views

Published on

「信頼フレームワーク最新動向」~Open Government, Open Economy, Open Identity~ …

「信頼フレームワーク最新動向」~Open Government, Open Economy, Open Identity~
2011年7月28日(木)

http://www.openid.or.jp/modules/news/details.php?bid=41
http://www.ustream.tv/recorded/16287210

Published in: Technology

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
6,328
On Slideshare
0
From Embeds
0
Number of Embeds
7
Actions
Shares
0
Downloads
21
Comments
0
Likes
0
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. Trust に対する取り組みの歴史(?) Kantara Initiative , Japan Shitamichi, Takashi 下道 高志
  • 2. 顧みると、、、• 2001年9月スタート
  • 3. Liberty Alliance Project 発足時の体制図 Management Board • Consists of 16 founding sponsors • Responsible for overall governance and maintenance • Final voting authority for specifications and other output Public Policy Technology Marketing Expert Group Expert Group Expert Group • Advise on privacy, • Develops technical • Develops marketing security, and other architecture and requirements and use public policy issues engineering cases • Liaison to privacy requirements • Responsible for groups and government • Develops technical membership, press agencies specifications relations, and marketing communications3
  • 4. 属性情報の交換時に 属性ひとつひとつ 本人同意を得る技術的仕組みがある ことが重要
  • 5. Liberty Trust Models (Trust Team)2002年時点(Liberty 発足の翌年)に おいて既に検討開始
  • 6. Options for trust discovery Option 1: Discovery of the trust path followed by direct exchange of assertions between the end-points.Easy: using already developed specs for accounts linking and SSODifficult: “infrastructure-less” enabling (new protocols?) of direct trust and authentication of exchanges between the end-points Option 2: Discovery of the trust path followed by using discovered path for exchange of assertions between the end-points.Easy: segment-by-segment trust and authentication of exchangesDifficult: need for new protocols, complexity and performance 6
  • 7. IAFの夜明け• PPEG – 法律とか制度とかわかるけど、Technology わから ん• TEG – 技術だけぢゃ世間一般のTrustの必要性わから ん! IAEG( Identity Assurance Expert Group)の結成
  • 8. Liberty Identity Assurance Group• 当初はIdentity Trust なんちゃら• 途中でGSA やニュージーランド政府、ワシント ンの人間も参加した• どこかのタイミングで、Identity Assurance Group の名称に変わった• 結果ドキュメントもIdentity Assurance Framework になった• 世に出すまで、足掛け6年以上かかった
  • 9. Lesson Learned• インターネットの世界で「ビジネスや法制度」のフレー ムワークをつくるのはものすごく時間がかかる• 必要だと言われる一方で、事例も必要と言われる• さらになにがしかの標準化仕様になっているか• 構築するためのライブラリ等が存在するか上記全部満たされたからといっても使われるとは限らない
  • 10. (Personal) Recommendation• つくっちゃえ!!(サービスを)• それに基づいて○○をフレームワーク化する• 文句言われたら、その時点で revise