Skip to main content
UploadLanguage (EN)Support
BusinessMobileSocial MediaMarketingTechnologyArt & PhotosCareerDesignEducationPresentations & Public SpeakingGovernment & NonprofitHealthcareInternetLawLeadership & ManagementAutomotiveEngineeringSoftwareRecruiting & HRRetailSalesServicesScienceSmall Business & EntrepreneurshipFoodEnvironmentEconomy & FinanceData & AnalyticsInvestor RelationsSportsSpiritualNews & PoliticsTravelSelf ImprovementReal EstateEntertainment & HumorHealth & MedicineDevices & HardwareLifestyle
Kaliya "Identity Woman" Young, profile picture
Uploaded byKaliya "Identity Woman" Young
PDF, PPTX7,121 views

Hope x talk

The document provides an update from the HOPE X conference on issues related to online identity. It discusses the history of the "nymwars" debate on anonymity and transparency online. It then outlines the ongoing debate around key concepts like trust, identity, and reputation. The document promotes participating in efforts around the National Strategy for Trusted Identities in Cyberspace (NSTIC) to influence identity policies and protect anonymity and pseudonymity. It introduces the two presenters and their backgrounds in online identity issues.

Download as PDF, PPTX
HOPE X Updates from the Online Identity Battlefield Joint Presentation by: Aestetix @aestetix Kaliya “Identity Woman” @identitywoman
Our Intentions: 1) Update on the history #nymwars Did we “win” with G+ acquiescing? 2) The Battle continues - at its center are key words & concepts and the struggle for meaning. 3) Share more about one battlefield : NSTIC Hoped for result some of you choose to “participate” struggling & using this lever to protect psydonymity and anonymity.
Who are we? - contextual intro’s from each of us Aestetix - reveiw of talk from Hope 9 Kaliya - Indie Advocate for user-centrism + IIW How we Connected - NSTIC! Kaliya - What is NSTIC? - rapid history Aestetix - Experience w/ Nym Issues to NSTIC Words & Concepts on the Battlefield: [Triangles - Circles] Trust Identity Verified Reputation Paths Forward: Limited Liability Persona BC Government Solution Turtles all the Way Down Writing out what we want! NSTIC Next Steps “Hacking the Trust Frameworks” + Next Meeting Florida Biometrics Con. How should it work from a freedom civil liberties perspective?
aestetix “is a mononym” • #nymwars • HOPE Number Nine • What is a “real” name? • NSTIC/IDESG
#nymwars
#nymwars Eric Schmidt, Executive Chairman at Google: • “The only way to manage this is true transparency and no anonymity. In a world of asynchronous threats, it is too dangerous for there not to be some way to identify you. We need a [verified] name service for people. Governments will demand it.” (Techonomy, August 2010) • “If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place."(CNBC Interview, December 2009)
#nymwars Mark Zuckerberg, CEO at Facebook: “The days of you having a different image for your work friends or co-workers and for the other people you know are probably coming to an end pretty quickly. Having two identities for yourself is an example of a lack of integrity.” (Interview, October 2011)
#nymwars Ian Donald Calvin Euclid Zappa
Independent Advocate for the Rights and Dignity of our Digital Selves Saving the world with User-Centric Identity I have had my identity woman blog for almost 10 years
Early 2000’s I was working on developing Distributed Social Networks for Transformation
Protocol: How Control Exists after Decentralization by Alexander R. Galloway Protocols are Political They matter! as Snowden said today at HOPEX
We founded IIW in 2005 Internet Identity Workshop
Unconference Format
Hailstorm SAML v1 & 2 BTOracleSUN XRI XDI Passport Microsoft FireFly Liberty Alliance Kantara Intiative Planetwork Link Tank Identity Commons (1) Identity Gang Identity Commons (2) OpenID v2 OpenID Foundation Open Identity Exchange Information Card Foundation IMI Identity Metasystem Interoperability Information Card Standard VENN OF IDENTITY Higgins Project Lots of Companies Project to be annouced at IIW IBM Project to be annouced at IIW Pamela Project TIME Internet Identity Workshop Loose Affiliations of People Current Organizations Organizations (no longer) Company Proprietary Service (no longer) Protocol standardized at OASIS Protocol standardized at OASIS earlier version (no longer) Independent Open Protocol Independent Open Protocol (no longer) Paper:Shared Understanding Event Project with Code Evolution of Identity Community
Broad Base of Participation BIG COMPANY SPONSORS MSFT PingID SUN Facebook Google Yahoo Cisco Plaxo Commerce Net Adobe BT Novell Facebook AOL Ping Identity Paypal / eBay NONPROFIT SPONSORS ISOC Kantara/Liberty Alliance Info Card Foundation OASIS IDTrust Mozilla Higgins Project Bandit Project Planetwork Internet Society CORPORATE PARTICIPANTS Paypal Booz Allen Hamilton Apple Burton Group Hewlett Packared International Business Machines Intuit LexisNexis Nippon Telegraph and Telephone Corporation Nokia Siemens Networks NRI Oracle Orange Rackspace Radiant Logic Sony Ericsson The MITRE Corporation Tucows Inc VeriSign, Inc. Vodafone Group R &D Alcatel-Lucent Acxiom Identity Solutions Acxiom Research Equifax LinkedIn Amazon SMALL COMPANY SPONSORS FuGen Solutions OUNO Rel-ID Poken Vidoop Chimp Authentrus Sxip ClaimID IETF W3C OASIS SMALL COMPANY PATICIPANTS Ångströ Digg, Inc. Privo Expensify FamilySearch.org FreshBooks Gigya Gluu Janrain Kynetx NetMesh Inc. Protiviti Socialtext TriCipher, Inc. Trusted-ID Wave Systems Six Apart NONPROFIT PARTICIPANTS Center for Democracy and Technology DataPortability Project IdM Network Netherlands OCLC Open Forum Foundation World Economic Forum UNIVERSITY PARTICIPANTS Goldsmiths, University of London Newcastle University Stanford University GOVERNMENT PARTICIPANTS Office of the Chief Informaiton Office, Province of British Columbia and more...
Lots of Open Standards XRI/XDI SAML Information Cards
I founded this in 2010 Goal connect starutps around the world building tools for individual collect manage and get value from their personal data along with fostering ethical data markets.
Privacy: Increasingly Complex as Volumes of Personal Data Grow 27 Source: World Economic Forum, “Rethinking Personal Data: Strengthening Trust,”
The Leola Group 2014 I founded
NSTIC Where did we meet?
2009
10. Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation. Table 2: NEAR-TERM ACTION PLAN
2009
13. Implement, for high-value activities (e.g., the Smart Grid), an opt-in array of interoperable identity management systems to build trust for online transactions and to enhance privacy. Table 3: MID-TERM ACTION PLAN
Says we must maintain anonymity & pseudonymity in cyberspace
Called for in President’s Cyberspace Policy Review (May 2009): a “cybersecurity focused identity management vision and strategy…that addresses privacy and civil-liberties interests, leveraging privacy-enhancing technologies for the nation.” Guiding Principles –Privacy-Enhancing and Voluntary –Secure and Resilient –Interoperable –Cost-Effective and Easy To Use NSTIC calls for an Identity Ecosystem, “an online environment where individuals and organizations will be able to trust each other because they follow agreed upon standards to obtain and authenticate their digital identities.” 36 What is NSTIC?
Where is this / Where are we? CREEPY NSA (and others) SPYING
CREEPY NSA (and others) SPYING Rules for Lawful Intercept Where is this / Where are we?
CREEPY NSA (and others) SPYING Rules for Lawful Intercept IN THIS BIGYELLOW BOX Where is this / Where are we?
CREEPY NSA (and others) SPYING Rules for Lawful Intercept NORMATIVE RULES BUSINESS PRACTICES TECHNOLOGIES FOR EVERY DAY LIFE Business - Business Business - Consumer Business - Government Citizen/Person - Gov Where is this / Where are we?
CREEPY NSA (and others) SPYING Rules for Lawful Intercept NORMATIVE RULES BUSINESS PRACTICES TECHNOLOGIES FOR EVERY DAY LIFE Business - Business Business - Consumer Business - Government Citizen/Person - Gov Where is this / Where are we?
What does the IDESG do: It is proceeding to define how EVERYONE will be able to express their identity online in the future.  It is to answer questions like:  * How can people define their own names, gender identity, race, other   identifying information? * Will we retain the right to use "nicknames"/pseudonyms? * Will we be able to speak anonymously online?   The strategy document "says" we should be able to do so but this institution will define HOW the ecosystem actually built. Only if we are there to ensure our freedoms online will they be retained.  * What are the methods of verification        of enrollment (how you get into the system) what methods of                  authentication (passwords or device ID or biometrics)?
As the White House announcement details below, today [April 2014] marked the release of the Cybersecurity Framework crafted by NIST – with input from many stakeholders – in response to President Obama’s Executive Order on Improving Critical Infrastructure Cybersecurity issued one year ago.    NSTIC is not discussed in the framework itself – but both it and the IDESG figure prominently in the Roadmap that was released as a companion to the Framework.  The Roadmap highlights authentication as the first of nine different, high- priority “areas of improvement” that need to be addressed through future collaboration with particular sectors and standards-developing organizations.   The inadequacy of passwords for authentication was a key driver behind the 2011 issuance of the National Strategy for Trusted Identities in Cyberspace (NSTIC), which calls upon the private sector to collaborate on development of an Identity Ecosystem that raises the level of trust associated with the identities of individuals, organizations, networks, services, and devices online.  The results of this W ILL BECOME POLICY
NSTIC is focused on consumer use cases, but the standards and policies that emerge from the privately-led Identity Ecosystem Steering Group (IDESG) established to support the NSTIC – as well as new authentication solutions that emerge from NSTIC pilots – can inform advances in authentication for critical infrastructure as well. NIST will focus in these areas: ·         Continue to support the development of better identity and authentication solutions through NSTIC pilots, as well as an active partnership with the IDESG; ·         Support and participate in identity and authentication standards activities, seeking to advance a more complete set of standards to promote security and interoperability; this will include standards development work to address gaps that may emerge from new approaches in the NSTIC pilots The results of this W ILL BECOME POLICY
The BIG IDEA behind NSTIC IS NOT DUMB
+ Multi-Factor Authentication
Authentication is NOT: Enrollment or IdentityVerification You need strong multi-factor authentication for pseudonyms too.
The BIG IDEA behind NSTIC IS NOT DUMB Text
Text 50 states
3,144 counties Text 50 states
3,144 counties 19,355 incorporated places 50 states Lots of Government Entities in the US - who’s job it is to interact with citizens and provide services.
Each Government agency could issue a “strong” mutli- factor ID that included verification on enrollment.
Cost $12-$120 per person - per year to manage ID
This would be a National ID
People get services from the private sector with ID.
People get services from the private sector with ID.
Gov ID for employees, contractors under HSPD12 - 12million How can they use this ID at their private sector accounts?
A tone of liability & “trust” issues
A tone of liability & “trust” issues NSTIC
NSTICTRUST FRAMEWORKS
“TRUST” Frameworks
TECHNOLOGY LEGAL/POLICY
TECHNOLOGY LEGAL/POLICY
TECHNOLOGYLEGAL/POLICY
TRUST FRAMEWORK
TRUST FRAMEWORK We must create Legal/Policy - Tech that will underlies what should become an Ecosystem.. We need lots of different parties at the table to create them. We should have an “open” mutli- stakeholder process to figure it out.
Private sector will lead the effort • Not a government-run identity program • Private sector is in the best position to drive technologies and solutions… • …and ensure the Identity Ecosystem offers improved online trust and better customer experiences Federal government will provide support • Help develop a private-sector led governance model • Facilitate and lead development of interoperable standards • Provide clarity on national policy and legal framework around liability and privacy • Fund pilots to stimulate the marketplace • Act as an early adopter to stimulate demand 70 What does NSTIC call for?
NPO Jeremy Grant Program Office Announced inside: National Institute of Standards under: Department of Commerce Friday, January 7, 2011
NPO Hires a STAFF David Temoshuck Naomi Lefkovitz James “Jim” Sheire Michael “Mike” Garcia
NPO ACTION: Notice of Inquiry. SUMMARY: The Department of Commerce (Department) is conducting a comprehensive review of governance models for a governance body to administer the processes for policy and standards adoption for the Identity Ecosystem Framework in accordance with the National Strategy for Trusted Identities in Cyberspace (NSTIC or “Strategy”). The Strategy refers to this governance body as the “steering group.” The Department seeks public comment from all stakeholders, including the commercial, academic and civil society sectors, and consumer and privacy advocates on potential models, in the form of recommendations and key assumptions in the formation and structure of the steering group. The Department seeks to learn and understand approaches for: 1) the structure and functions of a persistent and sustainable private sector-led steering group and 2) the initial establishment of the steering group. This Notice specifically seeks comment on the structures and processes for Identity Ecosystem governance. This Notice does not solicit comments or advice on the policies that will be chosen by the steering group or specific issues such as accreditation or trustmark schemes, which will be considered by the steering group at a later date. Responses to this Notice will serve only as input for a Departmental report of government recommendations for establishing the NSTIC steering group.
NPONPO Workshops Governance Privacy Technology July 2011 May 2011 with IIW Oct 2011
NPO April 2011 at chamber of commerce
NPO Charter “Committees” by Immaculate Conception Bylaws
NPO Charter “Committees” by Immaculate Conception Bylaws The First Plenary meeting was August 2012
NPO a complete 2 year work PLAN!
THE Identity Ecosystem Steering Group STRUCTURENPO THE SECRETARIAT Put out a Bid and then hired private company to run Secretariat
The Plenary NPO THE IDESG STRUCTURE THE SECRETARIAT Any person and any organization in the world (yes the world) can sign up to be a part of making the Identity Ecosystem Framework
The Plenary NPO THE SECRETARIAT You pick a stakeholder category • Privacy Advocate • Small Business - Entrepreneur • Regulated Industries • Relying Party • etc...there are 14
The Plenary NPO THE SECRETARIAT Each Stakeholder Group elects a member of the management council.
The Plenary NPO THE SECRETARIAT THATS “Me” I represent small businesses and entrepreneurs.
The Plenary Chair Management Council Vice-Chair NPO THE SECRETARIAT
Chair Management Council Vice-Chair Vice-Chair Plenary Chair NPO THE SECRETARIAT The first multi-day face to face meeting was 18 months after we were first elected. The management council meets every 2 weeks on the phone.
The Plenary Chair Management Council Vice-Chair Vice-Chair Plenary Chair PRIVACY Security Standards Trust Framework Trust Mark Standards Int’l Policy NPO THE SECRETARIAT Committees are where all the work happens. The NPO defined all the committees BEFORE the management council ever met.
The Plenary Chair Management Council Vice-Chair Vice-Chair Plenary Chair PRIVACY Security Standards Trust Framework Trust Mark Standards Int’l Policy NPO THE SECRETARIAT They meet in a “chairs call” every 2 weeks. The committees elect chairs
The Plenary Chair Management Council Vice-Chair Vice-Chair Plenary Chair PRIVACY Security Standards Trust Framework Trust Mark Standards Int’l Policy NPO THE SECRETARIAT NYM ISSUES? Aestetix tried to bring Nym Issues Committee forward...its still in limbo.
The Plenary Chair Management Council Vice-Chair Vice-Chair Plenary Chair NPO THE SECRETARIAT Management Council Sub-Committees
The Plenary NPO THE IDESG STRUCTURE THE SECRETARIAT Any person and any organization in the world (yes the world) can sign up to be a part of making the Identity Ecosystem Framework HOW MANY PEOPLE are active in IDESG? Under 100! A difference can be made with this institution with not that many people showing up.
The Plenary NPO THE IDESG STRUCTURE THE SECRETARIAT They have Face to Face meetings once a quarter. + they are all broadcast live.
NPO The Chair Vice- Vice- PlePRI Sec Stan Trust Stan In Pol Communications: 30 Mailing lists No Wiki Document Repository Drupal Site No clear vision from management council about what we are actually supposed to do. 10+ Committees & Sub-Committees
The Ch Vi Vi PlPR Se St Trus St I P THE SECRETARIAT NPO IDENTITY ECOSYSTEM STEERING GROUP Year 1 Pilots Year 2 Pilots Year3 Pilots ? • Daon, Inc. • The American Association of Motor Vehicle Administrators • Criterion Systems • Resilient Network Systems, Inc. • University Corporation for Advanced Internet Development • Transglobal Secure Collaboration Participation • Georgia Tech Research Institute • Exponent • ID.me, Inc. • Privacy Vaults Online, Inc.
NPO The Chair Vice- Vice- PlePRI Sec Stan Trust Stan In Pol BIG ISSUES: DIVERSITY - INCLUSION TRUST FRAMEWORK CREATION * NAMING ISSUES REASONABLE PROCESS for CITIZEN INVOLVEMENT
The Importance of Diversity & Inclusion in the NSTIC National Strategy for Trusted Identities in Cyberspace IDESG Identity Ecosystem Steering Group by Kaliya “Identity Woman” Hamlin Management Council Member for Small Business and Entrepreneur Stakeholder Group October 18, 2013 - Boston Plenary Presentation shared remotely in New Business Section This was at close of plenary and was invited after Kaliya raised the issue of the lack of diverse participants in producing the outcomes of Security Committee was reviewing. Told it was out of scope of the committee to address the issue and it should be brought to end of day chairs debrief.
63 CensusViewer US 2010 Census Latino Population as a heatmap by census tract.
63 Anti-Racist Organizations in the US http://en.wikipedia.org/wiki/Category: Anti-racist_organizations_in_the_United_States Ethnic & Racial Minorities in US http://en.wikipedia.org/wiki/ Category:Ethnic_groups_in_the_Unite d_States Asian American http://en.wikipedia.org/wiki/Category:Asian_American Lists of US Cities with non-white majority populations http://en.wikipedia.org/wiki/Lists_of_U.S._cities_with_non-white_majority_populations