Identity 2.0
by Nick Shelness
Establishing identity and authenticating on the web are a mess. I doubt I’m alone in using the same user id and password over and over again. If they’re hacked once they can be employed a hundred times over. Yeah, some sites make you change your password at regular intervals, but how do you remember them? I write them down, and carry them with me. OK, they’re somewhat encoded, but ...
For some time now, there has been the possibility of improvement under the “Identity 2.0” banner. To the surprise of some (many?), a significant chunk of Identity 2.0 innovation has come from Microsoft, and no, no, no, it’s not “Passport”. It is expressed in two seminal papers: The Laws of Identity and The Identity Metasystem, both by Kim Cameron.
But this is not all. There is a Microsoft product. It’s called “CardSpace” (it used to be called “Info Card”). It ships as part of Vista. It also ships as an automatic XP upgrade, and there are a host of alternatives, including open source ones.
CardSpace and its analogues, on their own, are not a solution. They are a component, albeit a key one, of an Identity Metasystem. What needs to come next is for web sites (“Relying Parties”) to start requesting and employing CardSpace-managed security assertions. This in turn will create a demand for Identity Provision (yes, this is where ActiveDirectory and son of Passport come in).
Will this happen? It’s too early to say. But by seeding the digital world with CardSpace, Kim and Microsoft have taken us a long first step down this path, and IMHO done us all a big favor.
Comments
Nick, did you look at OpenID?
Yes. I've also looked at OpenID. I see OpenID and CardSpace as two cooperating components of the Identity 2.0 Metasystem.
I hope that Google decides to become a OpenID-Provider. I'd love to use my Google Account _everywhere_ in the Web to sign in. And I admit, that I have as well only few login und passwords that I choose in relation to my trust in the site. There's always that little men in my cerebral cortex telling me how careless I am, but who want's to remember dozens of passwords? And there's no really comfortable password safe solution yet ...
Nick, enjoy this legendary video with Dick Hardt:
http://identity20.com/media/OSCON2005/
Before OpenID et.al. become widespread, there is a nice solution, at least for browser passwords: Stanford's PwdHash.
Volker,
Perhaps I should have written
... create a demand for Identity Provision (this is where OpenID, Sxip, and yes, ActiveDirectory and son of Passport come in) ...
Cem,
Yes it's deservedly legendary. I thought about including it in my post, but decided it was one URL too many.
Jan-Piet
I agree that this approach blocks a password replay attack by creating a unique password generated from a common seed for every domain.
Post a comment
Recent comments
Ingo Seifert on Ask Siri "what is the best smartphone ever" at 14:17
Ingo Seifert on Ask Siri "what is the best smartphone ever" at 08:54
Juergen Heinrich on The hardest job in the world at 07:50
Lucius Bobikiewicz on The hardest job in the world at 22:48
Mariano Kamp on Hiding all those video components at 22:07
Volker Weber on Hiding all those video components at 22:05
Mariano Kamp on Hiding all those video components at 20:49
Mariano Kamp on Super Moto at 20:47
Israel Charo on Apple Airport Express dropping off the network at 19:57
Jonathan Lewis on Ask Siri "what is the best smartphone ever" at 13:41
Ole Saalmann on Hiding all those video components at 13:34
Ole Saalmann on Hiding all those video components at 13:32
Simon O'Doherty on Ask Siri "what is the best smartphone ever" at 13:07
Volker Weber on Hiding all those video components at 10:59
Frank Stangenberg on Fifty Four at 10:17
Mariano Kamp on Hiding all those video components at 10:06
Chris Frei on The hardest job in the world at 09:12
Friedrich Holstein on The hardest job in the world at 23:47
Eric Bredtmann on Fifty Four at 21:08
Frank Kemper on The hardest job in the world at 14:34
Tobias Mueller on Fifty Four at 13:50
Hubert Stettner on The hardest job in the world at 02:13
Andreas Pfeifle on The hardest job in the world at 01:54
Volker Weber on The hardest job in the world at 23:19
Volker Weber on Die Suche nach der besten iPad-Hülle ist beendet at 22:37
Click here to subscribe
