The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust...
Transcript of The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust...
![Page 1: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/1.jpg)
1
The Higgins Trust Framework Project:A New Way to Manage Identity
Mary Ruddy
Tom Doman
Jim Sermersheim
![Page 2: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/2.jpg)
Higgins
Higgins1: a species of Tasmanian long-tailed mouse
2: the name of an open source collaboration of IBM, Novell, Oracle, Parity…
![Page 3: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/3.jpg)
Em
ail
or
IMCom
mun
ities
of In
tere
st
WebsitesBuddy ListsEnterprise
Apps
Virtu
al
Space
s
• eGovernment • Healthcare System• Corporate Directories
• eCommerce (e.g. Amazon, eBay)• Social Networking (e.g. LinkedIn) • Book club
• Family
• Professional networks• Dating networks
You
Multiple digital identities…
• Second Life• Croquet• WOW• SharePoint
![Page 4: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/4.jpg)
4
Em
ail
or
IMCom
mun
ities
of In
tere
st
WebsitesBuddy ListsEnterprise
Apps
Virtu
al
Space
s
• eCommerce (e.g. Amazon, eBay)• Social Networking (e.g. LinkedIn)
• Book club• Family
• Professional networks• Dating networks
You
…each in its own context/silo
• Second Life• Croquet• WOW• SharePoint
• eGovernment • Healthcare System• Corporate Directories
![Page 5: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/5.jpg)
Interoperability requires a new abstraction
![Page 6: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/6.jpg)
6
Identity is about the linkages between multiple contexts
Interoperability is created when you can create links between aspects of a digital identity in different contexts. Bridging
contexts.
![Page 7: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/7.jpg)
7
Contexts and Digital Subjects
Digital Subjects are sets of attributes and relationships.
� Context determines appropriateness
� Privacy policy must be defined in context
![Page 8: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/8.jpg)
8
This is “you.” (Nothing but a set of links!)
Family Second LifeDept. of Motor
VehiclesSocial Security Administration
Other Digital Subjects
![Page 9: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/9.jpg)
9
Links are where the action is
� Single sign on (authentication)
� Cross contextual claim presentation
� Federation
� Cross contextual facet linking
� User-centricity
The user is the bridge
� Social Networks
![Page 10: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/10.jpg)
10
Contexts and Links
Family Second LifeDept. of Motor
Vehicles
Social Security Administration
Correlations
Relationships (e.g. “knows”)
Social Networks
Other Digital Subjects
![Page 11: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/11.jpg)
11
Digital Subjects are exposed as i-cards
Managed (What the RMV says about you)
![Page 12: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/12.jpg)
12
i-cards
Managed
Personal (What you say about you)
![Page 13: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/13.jpg)
13
i-cards
Managed
Personal (self-issued)
Relationship
(What you and Best Buy say about you right now)
![Page 14: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/14.jpg)
![Page 15: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/15.jpg)
![Page 16: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/16.jpg)
![Page 17: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/17.jpg)
![Page 18: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/18.jpg)
![Page 19: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/19.jpg)
![Page 20: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/20.jpg)
20
eGovernment
� RMV: Drivers license� Id: G304-98-4656
� DOB: 8/28/70
� Address: 123 Main St. Buena Vista, Colorado
� Etc.
� SSA� SSN: 304-98-4656
� Address: 123 Main St. Buena Vista, Colorado
� Etc.
� IRS� Years filed: 2006, 2005, 2004, 2003, …
� Status: Single, 1 dependent
� Address: 123 Main St. Buena Vista, Colorado
� Last audited: <never>
� Etc.
![Page 21: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/21.jpg)
i-cards
eGovernmenteGovernment
![Page 22: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/22.jpg)
Higgins Service
Browser + Extension
“Identity Agent”
Protection and Projection of Identity Attributes
•Authentication
•Personalization
•Blinded data
•3D avatars?
![Page 23: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/23.jpg)
Click on a card
I-Card Selector User Interface
![Page 24: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/24.jpg)
…you’re signed in.
(No password required)
![Page 25: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/25.jpg)
i-cards
![Page 26: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/26.jpg)
REI Employee
Amex
Second Life
Identity ProvidersHiggins Service
1
2
4
3
![Page 27: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/27.jpg)
Identity Providers
REI Employee
Amex
Second Life
Higgins Service
CardSpace™Liberty
OpenIDJNDI
LDAP
SAMLX509Kerberos
![Page 28: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/28.jpg)
An Interoperability Framework
Higgins Framework
Plug-ins
Higgins Browser Extension
Eclipse RCP Apps
Identity Providers
Apps and Services
CardSpaceProtocol Providers implement protocols for interacting with Relying Parties
OpenID
CardSpace Managed (WS-Trust)
RSS SSE
I-Card Providers implement identity protocols and card types
CardSpace Personal
SAML X509
Higgins Relationship
Kerberos
JNDI / LDAP
Enterprise Apps
Token Providers implement different kinds of security tokens
IdAS Context Providers connect to different identity data sources
HTML Forms
UN/PS Idemix
RDF/OWLActive
DirectoryComms Clients
Relying Parties
![Page 29: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/29.jpg)
29
Higgins delivers
A consistent user experience based on i-cards
� Any identity protocol
� Any token data type
� Any kind of identity data
� Any identity data source
� Any platform
![Page 30: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/30.jpg)
30
What can it be used for?
� Projects where you need to integrate with identity management system
� Use cases where users need to interface with lots of
different system
� Projects we are collaborating or talking with:
� ALF
� Corona
� ECF
� Equinox
![Page 31: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/31.jpg)
higgins is glue
![Page 32: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/32.jpg)
higgins 1: a species of Tasmanian long-tailed mouse
2: the name of an open source project
3: a kind of glue
![Page 33: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/33.jpg)
33
Higgins Project Summary
� Open source, extensible framework
� Introduces a Identity Selector Service
� Introduces Identity Attribute Service
�Data model unifies directories, social networks, and collaboration spaces
�Makes it easy to manage identity, profile, reputation, and relationships across contexts
� 16 Committers to date
� Release 1.0 Summer 2007
� We’re always looking for great contributors!
![Page 34: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/34.jpg)
34
![Page 35: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/35.jpg)
35
![Page 36: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/36.jpg)
36
![Page 37: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/37.jpg)
37
![Page 38: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/38.jpg)
38
![Page 39: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/39.jpg)
39
![Page 40: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/40.jpg)
40
![Page 41: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/41.jpg)
41
![Page 42: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/42.jpg)
42
![Page 43: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/43.jpg)
43
![Page 44: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/44.jpg)
44
![Page 45: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/45.jpg)
45
![Page 46: The Higgins Trust Framework Project: A New Way to Manage … · 2017-10-30 · 1 The Higgins Trust Framework Project: A New Way to Manage Identity Mary Ruddy Tom Doman Jim Sermersheim](https://reader036.fdocuments.us/reader036/viewer/2022070704/5e8de0b6d4008c468b27e5f0/html5/thumbnails/46.jpg)
http://eclipse.org/higgins
Paul Trevithick, Higgins Architect
Mary Ruddy, Higgins Operations Lead
[email protected]@socialphysics.org