Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private...
-
date post
20-Dec-2015 -
Category
Documents
-
view
218 -
download
0
Transcript of Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private...
![Page 1: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/1.jpg)
Building Trusted TransactionsIdentity Authentication & Attribute Exchange
In Public and Private Federations
OASIS Conference September 2010
Joni Brennan, Kantara InitiativeDon Thibeau,
OpenID Foundation Open Identity Exchange
![Page 2: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/2.jpg)
Overview
What’s all this fuss about Trust Frameworks?
![Page 3: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/3.jpg)
![Page 4: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/4.jpg)
The Trust Community
Four main roles involved in making online exchanges trustworthy:
1. End-Entities who are the subjects of identity credentials
2. Credential Service Providers (CSPs)
3. Auditors
4. Entities that rely upon the credentials issued by CSPs, referred to as “relying parties.”
Our Identity Assurance Framework is targeted to address each of these community roles…
![Page 5: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/5.jpg)
![Page 6: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/6.jpg)
![Page 7: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/7.jpg)
Kantara Initiative approach to Federated Identity
Identity Assurance Framework – one stop policy shop…
![Page 8: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/8.jpg)
Identity Assurance Framework Components
Assurance Assessment
Scheme
(Document #IKIAF-1300
Assurance Levels
(Document #IKIAF-1200
Overview
(Document #IKIAF-1100
(Document #IKIAF-1500
(Document #IKIAF-1400
Assessor Qualifications & Requirements
Service Assessment
Criteria
(Document #IAF-1000)
Glossary
![Page 9: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/9.jpg)
![Page 10: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/10.jpg)
![Page 11: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/11.jpg)
Kantara Initiative Accreditation and Certification
Who should apply and how? Assessors / Auditors Credential Service Providers, Identity Providers
For More Information Visit our Assurance Certification Center:
http://bit.ly/assurance_certification Connect with me: [email protected]
![Page 12: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/12.jpg)
What’s Next?
Profiles, profiles and more profiles Jurisdictional (governments), HealthCare, Financial,
Telecommunications, etc
Federation Interoperability Work Group (FIWG) With input from international stakeholders FIWG
developing tools for Federations to use for Interoperation.
Enabling communication of Meta-Data between Federations
Open for adoption by communities world-wide via Creative Commons IPR
![Page 13: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/13.jpg)
Benefits of Adoption US Government ICAM Adopted Level 1, 2, 3 non-crypto Identity Assurance Framework (IAF) is technology Agnostic
Can be adopted as organizational policy framework regardless of the technology protocol in place.
Lowers cost to jurisdictions and entities enabling eased transition in to Trust Framework Model
Has Kantara Initiative international community input Austria, Canada, Denmark, France, Japan, New Zealand, Sweden,
United Kingdom, United States – the list keeps growing Enables Inter-federation through trusted and certified credentials
Could be applied across jurisdictional federations like the European Union.
Enables Government entities to leverage private-sector activities
![Page 14: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/14.jpg)
Working Together
Building Trust…
![Page 15: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/15.jpg)
Collaboration
![Page 16: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/16.jpg)
Kantara Initiative Work Groups
Kantara Initiative –
Identity Assurance (IAWG)http://kantarainitiative.org/confluence/display/idassurance/
eGovernment (eGovWG)http://kantarainitiative.org/confluence/display/eGov/
Federation Interoperability http://kantarainitiative.org/confluence/display/fiwg/
Privacy and Public Policy (P3WG)http://kantarainitiative.org/confluence/display/p3wg/
![Page 17: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/17.jpg)
Open Identity Exchange (OIX)Work Groups
Telco Data Work GroupVerizon, AT&T, TNS, Pacific East, etc.
Public Media National Public Radio, Public Broadcasting Service, etc.
Librarians, Authors, PublishersNational Institute of Health, National Library of Medicine, ORCID, APA, etc
Identity Attributes Trust Framework Google, Yahoo!, AOL, Hot Mail, etc.
![Page 18: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/18.jpg)
OIX/Kantara Collaborative Work Groups
US ICAM Higher Levels of AssuranceOIX, KI, US GSA, US NIH, etc.
A public private partnership to define new technical /policy profiles for higher levels of assurance (NIST LoA 2 and 3)
A forum and forcing function to map policy and legal issues to government and citizen interaction over the web
A collaboration among leading industry organizations to break new ground in trust framework development
![Page 19: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/19.jpg)
Introduction to OIX
A Market Solution to Online Identity Trust…
![Page 20: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/20.jpg)
A Matter of Trust
Relying Parties must be able to trust that the Identity Provider is providing accurate customer data
Identity Providers must be able to trust that the Relying Party is legitimate (i.e., not a hacker, phisher, etc)
Direct RP-to-IDP trust agreements are a common solution, but are impossible to manage at Internet scale
![Page 21: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/21.jpg)
OIX TrustFramework
Trust Community
The Trust Framework Solution
IdentityServiceProvider
RelyingParty
user
![Page 22: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/22.jpg)
Credit Card Trust
Framework
Trust Community
Proven Trust Frameworks Exist!
![Page 23: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/23.jpg)
The OIX Identity Trust Framework Model
Open Identity Exchange
Trust framework agreements
IdentityServiceProvider
RelyingParty
user
![Page 24: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/24.jpg)
What OIX Provides
Referee Neutral, technology agnostic
provider of trust frameworks
Certification Listing Service Machine-readable information
about trust framework participants and certifications
![Page 25: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/25.jpg)
OIX Drives Adoption
By improving market efficiency By providing openness and transparency By ensuring credibility and accountability in
the system By enabling improved user experience
![Page 26: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/26.jpg)
Real World Examples
OIX U.S. ICAM (Identity, Credential, and Access Management) Trust framework For U.S. federal government agencies
OIX Telecom Data Trust Framework For Telco Data Services providers For Data Aggregators
![Page 27: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/27.jpg)
Summary
OIX and KI work together to providean Internet-scale solution
to enable trusted onlinedigital identities
![Page 28: Building Trusted Transactions Identity Authentication & Attribute Exchange In Public and Private Federations OASIS Conference September 2010 Joni Brennan,](https://reader034.fdocuments.us/reader034/viewer/2022042717/56649d485503460f94a243dd/html5/thumbnails/28.jpg)
Thank You!
Get in touch with us…