background preloader

Identity management

Facebook Twitter

Own your identity. This paragraph in Marshall Kirkpatrick’s Why I’ll Never Redirect my Personal Blog to Google Plus scared me a bit: Google Plus doesn’t have RSS feeds, or email subscription options. Both are important to me; I want to speak to my readers however they want to be spoken to. Some day, we’ll be able to write to and read from any platform in any other platform, just like we can call one phone network from inside another phone network now. I hope he’s being clever here, because we had that. It’s interesting that so much online publishing is moving into a small handful of massive, closed, proprietary networks after being so distributed and diverse during the big boom of blogs and RSS almost a decade ago. In many ways, we’re better off now: publishing online is far easier, less time-consuming, and more accessible than it has ever been, which has brought content, voices, and consumers online that wouldn’t have been otherwise.

If you care about your online presence, you must own it. Identity, Authentication, and Provisioning Them Online. Christina jotted down some thoughts on indentity on a flight to SF and I read them this morning. In her post, she references Ev's excellent post on the same topic from a while back. So I went on a bike ride as the sun rose over the east end of long island and thought a bit about all of this. Before going on, I'd like to emphasize that these thoughts are mine and mine only. Nobody has seen this post before publishing other than me, including my partners and our portfolio companies.

It does not represent the opinions of any company I and/or our firm are involved in. I don't have a single online identity. @fredwilson facebook.com/fredwilson fredwilson.vc (tumblr) avc.com foursquare.com/fredwilson soundcloud.com/fredwilson fredwilson.fm etsy.com/people/fredwilson disqus.com/fredwilson And many many more. I apologize to all the services out there (in and out of our portfolio) that I left off this list. I believe that OpenID is on the right track. OpenID has two important concepts in it. Single Sign-On (SSO) and Identity Management - Crowd. Identity management. In computing, identity management (IdM) describes the management of individual principals, their authentication, authorization,[1] and privileges within or across system and enterprise boundaries[2] with the goal of increasing security and productivity while decreasing cost, downtime and repetitive tasks.[3] The terms "Identity Management" and "Identity and Access Management" (or IAM) are used interchangeably in the area of Identity access management, while identity management itself falls under the umbrella of IT Security.[4] Identity-management systems, products, applications and platforms manage identifying and ancillary data about entities that include individuals, computer-related hardware and applications.

Definitions[edit] Identity management (IdM) is the task of controlling information about users on computers. Digital identity is an entity's online presence, encompassing personal identifying information (PII) and ancillary information. Identity management functions[edit] Www.defcon.org/images/defcon-15/dc15-presentations/dc-15-plet.pdf. ITL Program - Identity Management Systems. Five Easy Pieces of Online Identity. Every Internet service that has a concept of users has to deal with identity. And for anything social (which seems like everything these days) identity is a huge part. For the Internet as a whole, there are battles waging to "own" identity—or, at the very least, not let someone else own it. And there have been efforts for years to make identity more manageable for users and to put control in their hands. So, identity is an important concept. A while back, Twitter's CTO, Greg Pass, and I created a framework I've found useful for thinking about all this.

I thought this might be useful framework for others, so, I present to you, the five pieces of online identity: 1) Authentication Question Answered: Do you have permission? There are various ways to check if someone should have access to something. There have been many attempts create "single sign-on" solutions, both decentralized and centralized, so people can walk around with a single key and get into everything they need. 2) Representation. OpenID. OpenID is an open standard and decentralized authentication protocol. Promoted by the non-profit OpenID Foundation, it allows users to be authenticated by co-operating sites (known as Relying Parties or RP) using a third party service, eliminating the need for webmasters to provide their own ad hoc login systems, and allowing users to login to multiple unrelated websites without having to have a separate identity and password for each.[1] Users create accounts by selecting an OpenID identity provider, and then use those accounts to sign onto any website which accepts OpenID authentication.

The OpenID protocol does not rely on a central authority to authenticate a user's identity. Moreover, neither services nor the OpenID standard may mandate a specific means by which to authenticate users, allowing for approaches ranging from the common (such as passwords) to the novel (such as smart cards or biometrics). Adoption[edit] Technical overview[edit] Logging in[edit] Identifiers[edit] People[edit] Category:Identity management systems.