Introduction to OpenID Huanxing Shen WHIM 2009Spring

An Online Profile Management Issue How oftern do you forget your account name or the password for online applications? We have too many username/password for different online applications to remember, e.g.google, facebook,twitter,etc. Do we need a password management software to assist?

OpenID Solution Use one identity for all the internet service (openid enabled)

An Example Use your openid to comment on blogger Use your openid to login other web application

What’s behind? End-user – The person who wants to assert his or her identity to a site. Identifier – The URL or XRI chosen by the end-user as their OpenID identifier.URLXRI Identity provider or OpenID provider – A service provider offering the service of registering OpenID URLs or XRIs and providing OpenID authentication (and possibly other identity services). E.g. Yahoo, Wordpress, Blogger, etc. Relying party – The site that wants to verify the end-user's identifier. Sometimes also called a "service provider".

What’s behind?

Website Benefits Increased conversion rates from “site visitors” to “registered users” Reduced customer care cost and frustration with forgotten passwords Accelerated adoption of “community” features Limited password sharing issues Facilitated single sign-on across multiple company and partner websites

User Benefits Faster & easier registration and login Reduced frustration from forgotten user name/password Maintain personal data current at preferred sites Minimize password security risks

Current OpenID Provider/Supporters If you are using service: yahoo, AOL, Blogger, Flickr, Wordpress, you are already have a OpenID. Well Known & Simple Providers: Myopenid.com Janrain.com Roll your own

OpenID for Enterprise

Action?! Over 500 million OpenID-enabled Users More than 25,000 websites