Franco Canadian Identity? SLL from an immigrant child’s perspective...
Introduction: Identity Management – Our Perspective
description
Transcript of Introduction: Identity Management – Our Perspective
Introduction:Identity Management – Our Perspective
Henry Krasemann, Marit Hansen
Unabhängiges Landeszentrum für Datenschutz //
Independent Centre for Privacy Protection
Schleswig-Holstein, Germany
CACR, Toronto, October 2004
Identity Management – Our Perspective
Overview
• Identity Management – More than Single sign-on??
• Different Ways of Implementation – Different Properties of Solutions
• Outlook – A Glimpse into the Future
Identity Management – Our Perspective
Identity Management –
More than Single Sign-on??
Identity Management – Our Perspective
Category 1:“Account Management”
NOT
Employee
Company
Identity Management – Our Perspective
Category 1:“Account Management”
Company
Employee
PersonnelData
NOT
Identity Management – Our Perspective
Category 2:“Profiling”
Individuals,e.g. customers, citizens
NOT
Organization,e.g. company/
gov. administration
Identity Management – Our Perspective
Category 2:“Profiling”
Individuals,e.g. customers, citizens
PII
NOT
Organization,e.g. company/
gov. administration
Identity Management – Our Perspective
Category 2:“Profiling”
Organization,e.g. company/
gov. administrationIndividuals,
e.g. customers, citizens
PII
Customer relationship
NOT
Identity Management – Our Perspective
Category 2:“Profiling”
Individuals,e.g. customers, citizens
NOT
Customer relationship
Organization,e.g. company/
gov. administration
Identity Management – Our Perspective
Category 3:“Management of own identities”
User
Identity Management – Our Perspective
Category 3:“Management of own identities”
Trustedarea
User
Identity Management – Our Perspective
Category 3:“Management of own identities”
Context-dependent
pseudonyms
Trustedarea
User
Identity Management – Our Perspective
Intermediate Result
Cat. 1 “Account Management”
by organization
Cat. 2 “Profiling” by organization
Cat. 3 “Management ofown
identities”
by user himself supported by
service providers
X
X
Identity Management – Our Perspective
Different Ways of Implementation –
Different Properties of Solutions
Identity Management – Our Perspective
Problem Solution Concept
Confusing and inconvenient handling of my different “identities”
Password Management;
Form Filler
Little knowledge of what others know about me
Anonymity as basis, on top:
Controllability of data flow and of privacy preferences;
Reputation Management
Little control about what I permit from the outside
Reachability Management
Little legal liability;
no protection against Identity Theft
Authenticity
Motivation
Identity Management – Our Perspective
Problem Solution Concept
Confusing and inconvenient handling of my different “identities”
Password Management;
Form Filler
Little knowledge of what others know about me
Anonymity as basis, on top:
Controllability of data flow and of privacy preferences;
Reputation Management
Little control about what I permit from the outside
Reachability Management
Little legal liability;
no protection against Identity Theft
Authenticity
Motivation
Identity Management – Our Perspective
Problem Solution Concept
Confusing and inconvenient handling of my different “identities”
Password Management;
Form Filler
Little knowledge of what others know about me
Anonymity as basis, on top:
Controllability of data flow and of privacy preferences;
Reputation Management
Little control about what I permit from the outside
Reachability Management
Little legal liability;
no protection against Identity Theft
Authenticity
Motivation
Identity Management – Our Perspective
Problem Solution Concept
Confusing and inconvenient handling of my different “identities”
Password Management;
Form Filler
Little knowledge of what others know about me
Anonymity as basis, on top:
Controllability of data flow and of privacy preferences;
Reputation Management
Little control about what I permit from the outside
Reachability Management
Little legal liability;
no protection against Identity Theft
Authenticity
Motivation
Identity Management – Our Perspective
Problem Solution Concept
Confusing and inconvenient handling of my different “identities”
Password Management;
Form Filler
Little knowledge of what others know about me
Anonymity as basis, on top:
Controllability of data flow and of privacy preferences;
Reputation Management
Little control about what I permit from the outside
Reachability Management
Little legal liability;
no protection against Identity Theft
Authenticity
Motivation
State of the Art
+
-
-
±
±
-
+
Identity Management – Our Perspective
Key question:Who is in control?
Identity Management – Our Perspective
Outlook –
A Glimpse into the Future
Identity Management – Our Perspective
Source:Identity Management Systems (IMS):Identification and Comparison Study, September 2003
The Market of Identity Management Systems
Identity Management – Our Perspective
“A Toolkit for Usable Security Freiburg”
Identity Management – Our Perspective
Identity Management – Our Perspective
IdentityManagementComponent:
Pseudonymous Delivery Service
In several countries:“Pickpoints”
at Gas Stations
Identity Management – Our Perspective
Further Information
PRIME – Privacy and Identity Management for Europe(Aim: Prototype)
www.prime-project.eu.org
FIDIS – Future of Identity in the Information Society(Network of Excellence)
www.fidis.net
www.uld-i.de