1. Introduction: Identity Management – Our Perspective Henry Krasemann, Marit Hansen Unabhängiges Landeszentrum für Datenschutz // Independent Centre for Privacy Protection Schleswig-Holstein, Germany CACR, Toronto, October 2004

2. Identity Management – Our Perspective Overview Identity Management – More than Single sign-on?? Different Ways of Implementation – Different Properties of Solutions Outlook – A Glimpse into the Future

3. Identity Management – Our Perspective Identity Management – More than Single Sign-on??

4. Identity Management – Our Perspective Category 1: “Account Management” NOT Employee Company

5. Identity Management – Our Perspective Category 1: “Account Management” Company Employee Personnel Data NOT

6. Identity Management – Our Perspective Category 2: “Profiling” Individuals, e.g. customers, citizens NOT Organization, e.g. company/ gov. administration

7. Identity Management – Our Perspective Category 2: “Profiling” Individuals, e.g. customers, citizens PII NOT Organization, e.g. company/ gov. administration

8. Identity Management – Our Perspective Category 2: “Profiling” Organization, e.g. company/ gov. administration Individuals, e.g. customers, citizens PII Customer relationship NOT

9. Identity Management – Our Perspective Category 2: “Profiling” Individuals, e.g. customers, citizens NOT Customer relationship Organization, e.g. company/ gov. administration

10. Identity Management – Our Perspective Category 3: “Management of own identities” User

11. Identity Management – Our Perspective Category 3: “Management of own identities” Trusted area User

12. Identity Management – Our Perspective Category 3: “Management of own identities” Context- dependent pseudonyms Trusted area User

13. Identity Management – Our Perspective Intermediate Result Cat. 1“Account Management” by organization Cat. 2“Profiling”by organization Cat. 3“Management of own identities” by user himself supported by service providers X X

14. Identity Management – Our Perspective Different Ways of Implementation – Different Properties of Solutions

15. Identity Management – Our Perspective ProblemSolution Concept Confusing and inconvenient handling of my different “identities” Password Management; Form Filler Little knowledge of what others know about me Anonymity as basis, on top: Controllability of data flow and of privacy preferences; Reputation Management Little control about what I permit from the outside Reachability Management Little legal liability; no protection against Identity Theft Authenticity Motivation

16. Identity Management – Our Perspective ProblemSolution Concept Confusing and inconvenient handling of my different “identities” Password Management; Form Filler Little knowledge of what others know about me Anonymity as basis, on top: Controllability of data flow and of privacy preferences; Reputation Management Little control about what I permit from the outside Reachability Management Little legal liability; no protection against Identity Theft Authenticity Motivation

17. Identity Management – Our Perspective ProblemSolution Concept Confusing and inconvenient handling of my different “identities” Password Management; Form Filler Little knowledge of what others know about me Anonymity as basis, on top: Controllability of data flow and of privacy preferences; Reputation Management Little control about what I permit from the outside Reachability Management Little legal liability; no protection against Identity Theft Authenticity Motivation

18. Identity Management – Our Perspective ProblemSolution Concept Confusing and inconvenient handling of my different “identities” Password Management; Form Filler Little knowledge of what others know about me Anonymity as basis, on top: Controllability of data flow and of privacy preferences; Reputation Management Little control about what I permit from the outside Reachability Management Little legal liability; no protection against Identity Theft Authenticity Motivation

19. Identity Management – Our Perspective ProblemSolution Concept Confusing and inconvenient handling of my different “identities” Password Management; Form Filler Little knowledge of what others know about me Anonymity as basis, on top: Controllability of data flow and of privacy preferences; Reputation Management Little control about what I permit from the outside Reachability Management Little legal liability; no protection against Identity Theft Authenticity Motivation State of the Art + - - ± ± - +

20. Identity Management – Our Perspective Key question: Who is in control?

21. Identity Management – Our Perspective Outlook – A Glimpse into the Future

22. Identity Management – Our Perspective Source: Identity Management Systems (IMS): Identification and Comparison Study, September 2003 The Market of Identity Management Systems

23. Identity Management – Our Perspective “A Toolkit for Usable Security Freiburg”

24. Identity Management – Our Perspective

25. Identity Management Component: Pseudonymous Delivery Service In several countries: “Pickpoints” at Gas Stations

26. Identity Management – Our Perspective Further Information PRIME – Privacy and Identity Management for Europe (Aim: Prototype) www.prime-project.eu.org prime@datenschutzzentrum.de FIDIS – Future of Identity in the Information Society (Network of Excellence) www.fidis.net fidis@datenschutzzentrum.de www.uld-i.de