Identity Management (IdM) Consultation Presentation to the ISOC Advisory Council March 27, 2009 Presented by: J. Trent Adams, Outreach Specialist for Trust & Identity March 27, 2009 - Not for Distribution -

IdM Consultation Overview IdM Consultation Goals: Develop working relationships between ISOC and various IdM communities and projects. Facilitate discussion between stakeholders related to the direction of their IdM projects. Provide clarity to the IdM landscape for participants currently outside the communities. Leverage consultation process to identify a feature set for an “Identity Audit Tool” March 27, 2009 - Not for Distribution -

IdM Consultation Overview IdM Consultation Process Survey Known IdM Initiatives Develop Liaison Relationships Series of Working Group Conversations Weekly Working Group Sync-Up Teleconferences Engagements with ISOC Chapters Compile Discussion Topics into Draft Framework Solicit Feedback on Working Draft from Broader Audience Publish “User-Managed Identity” Position Paper March 27, 2009 - Not for Distribution -

IdM Consultation Overview “User-Managed Identity” Audience Primary: End User Early Adopters / Influencers Secondary: Technology Advocates / Journalists / Educators / Policy Makers Tertiary: User-Focused Developers / Architects March 27, 2009 - Not for Distribution -

- Not for Distribution - IdMC Scenario Focus Scenario Categories: Technology: Privacy & Data Protection Policy: Trust & Reputation Protection Evaluation: Utility vs. Protection March 27, 2009 - Not for Distribution -

- Not for Distribution - IdMC Scenario Focus Personal IdM Topic Areas Social Networking Identity Portability Identity Providing Services Feature Providing Services High-Value Identity Protection Online Banking eGovernment eHealth Education / Research Anonymity & Multi-Context Support March 27, 2009 - Not for Distribution -

IdMC Tracked Activites Focused on user-centric activities Created initial list of activities to track: Vertical Markets Solution Categories Communities Projects Assumed to expand organically through participation Suggestions welcome March 27, 2009 - Not for Distribution -

IdMC Tracked Activities Tracked Solution Categories Centralized Federated Single-Purpose / Homogenous Multi-Party / Heterogenous User-Managed Central Management Fully Decentralized Root / Circle of Trust Reliance Technical Policy March 27, 2009 - Not for Distribution -

IdMC Tracked Activities Tracked Verticals (alphabetical) Consumer Product Services Education / Research Finance Government Services Healthcare Social Networking March 27, 2009 - Not for Distribution -

IdMC Tracked Communities 7th Framework Programme (7FP) Cancer Biomedical Informatics Grid (caBIG) Community Research and Development Information Service (CORDIS) Harvard Berkman Center for Internet & Society (BCIS) Higgins Project Identity Commons (IDC) InCommon Federation Information Card Foundation (ICF) Internet Engineering Task Force (IETF) Internet2 (I2) Liberty Alliance Project (LAP) Middleware Architecture Committee for Education (MACE) OAuth [Open Community] Open Source Identity Systems (OSIS) OpenID Foundation (OIDF) Organization for the Advancement of Structured Information Standards (OASIS) Worldwide Web Consortium (W3C) March 27, 2009 - Not for Distribution -

- Not for Distribution - IdMC Tracked Projects 7FP: SWIFT / STORK 7FP: PrimeLife caBIG: Grid Authentication and Authorization with Reliably Distributed Services (GAARDS) BCIS: Vender Relationship Mangement (VRM) Facebook: Facebook Connect Higgins: Identity Framework I2: Shibolleth ICF: InformationCard IDC: Internet Identity Workshop IETF: Kerberos IETF: LDAP IETF: OAuth LAP: Identity Assurance Framework Microsoft: CardSpace OIDF: OpenID OASIS: SAML W3C: FOAF + SSL March 27, 2009 - Not for Distribution -

IdMC Participants Wishlist R. Mark Adams (BAH / caBIG) Peter Alterman (US GAO / NIH) Joe Andrieu (VRM) Bob Blakley (Burton Group) Scott Cantor (I2, OASIS) Eran Hammer-Lahav (OAuth) Patrick Harding (Ping Identity) Sam Hartman (IETF) Iain Henderson (VPI, MyDex) Joe Hewitt (Facebook) Jeff Hodges (I2, MACE) Leif Johansson (I2, MACE) Ben Laurie (Apache-SSL, OpenPGP) Paul Madsen (LAP, NTT) Eve Maler (Sun) Kevin Marks (Google) Chris Messina (OpenID, OWF) Bob Morgan (I2, MACE) Eric Neuman (W3C, MIT / Fellow) Thomas Roessler (W3C) Nat Sakimura (OpenID Japan) Henry Story (Sun) Paul Trevithick (Higgins, ICF, IDC) Suggestions and introductions welcome. March 27, 2009 - Not for Distribution -

Identity Management Consultation Questions? Comments? Suggestions? J. Trent Adams Outreach Specialist, Trust & Identity Internet Society (ISOC) adams@isoc.org March 27, 2009 - Not for Distribution -