“All right, now, folks–what’s it worth? Com’on–you tell me!”

6. Security (privacy, anonymity, vulnerabilities, risk management)

• 
  We are a coalition of more than 150 organizations that share a common goal.
  
• 
  We want freedom of speech in a digitalized world and a free and uncensored internet to express ourselves.
  
• 
  We want privacy in the knowledge society, not surveillance.
  
• 
  We want to live in freedom, not in fear.
  

Identity Management Resources

• 
  Glossary of Semantic Technology Terms (mkbergman.com)
  
• 
  The Five Stars of Web Identity (melvincarvalho.com)
  
• 
  The Laws of Identity (identityblog.com)
  
• 
  AAA commonly stands for authentication, authorization and accounting. It refers to a security architecture for distributed systems, which enables control over which users are allowed access to which services, and how much of the resources they have used. Twonetwork protocols providing this functionality are particularly popular: theRADIUS protocol, and its newerDiameter counterpart. (Wikipedia)
  

• 
  Apache Shindig is the reference implementation of OpenSoicial and OpenSocial API specifications, a standard set of Social Network APIs which includes:
  

• 
  Profiles
  
• 
  Relationships
  
• 
  Activities
  
• 
  Shared applications
  
• 
  Authentication
  
• 
  Authorization
  

• 
  The National Strategy for Trusted Identities in Cyberspace (NSTIC)
  
• 
  No hub. No center. (identityblog.com)
  
• 
  Federated Identity Management in Cloud Computing (clean-clouds.com)
  
• 
  Reimagining Active Directory for the Social Enterprise (msdn.com)
  
• 
  The Personal Identity Consortium was founded in 2010 by Kaliya “Identity Woman” Hamlin to catalyze a thriving ecosystem. Projects include:
  

• 
  Standards Engagement and Development -- To succeed, an effective personal data ecosystem needs to use open standards to allow many different services to interoperate. We track developments in many open standards efforts and are proactively engaged in several standards technical committees. We report on our activity in the Personal Data Journal.
  

• 
  The Open Group and MIT Experts Detail New Advances in ID Management (sys-con.com)
  
• 
  What is OpenID Connect? "OpenID Connect is a suite of lightweight specifications that provide a framework for identity interactions via RESTful APIs. The simplest deployment of OpenID Connect allows for clients of all types including browser-based, mobile, and javascript clients, to request and receive information about identities and currently authenticated sessions. The specification suite is extensible, allowing participants to optionally also support encryption of identity data, discovery of the OpenID Provider, and advanced session management, including logout."
  
• 
  Open Data Protocol (OData) “is an open web protocol for querying and updating data. The protocol allows for aconsumer to query a datasource over theHTTP protocol and get the result back in formats likeAtom,JSON or plainXML, including pagination, ordering or filtering of the data. Many of the building blocks that make up OData are standardized viaAtom and AtomPub. The OData specification is available under theMicrosoft Open Specification Promise (OSP). Microsoft has released an OData software development kit (SDK) consisting of libraries for .NET, PHP, Java, JavaScript, webOS, and the iPhone.” (Wikipedia)
  
• 
  Security Assertion Markup Language (SAML)
  
• 
  MIT Core ID Project Site "The increase dependence today of citizens on the IT and telecoms infrastructure for their day-to-day activities points to the crucial need for an “identity infrastructure” that offers an ecosystem in which digital identities can be created, managed and destroyed in a practical manner. Such an identity ecosystem must support digital identities which maintain the privacy of the human person associated with the identity, and allows the human person to personalize their identity according to their needs."
  
• 
  The Jericho Forum Identity Commandments (collaboration.opengroup.org) "define the principles that must be observed when planning an identity eco-system. Whilst building on “good practice”, these commandments specifically address those areas that will allow “identity” processes to operate on a global, de-perimeterised scale; this necessitates open and interoperable standards and a commitment to implement such standards by both identity providers and identity consumers
  
• 
  Access governance: Identity management gets down to business; NetIQ integrates former Novell IDM tools (securitybistro.com)
  
• 
  OIX Open Identity Exchange "Building trust in online identity"
  
• 
  How to steal a facebook identity (blog.mostof.it)
  
• 
  AWS Identity and Access Management (IAM) (Amazon Web Services)
  

• 
  xID In accordance with The Standards of LIFE forInformation, the xID specification uses a distributed storage model that allows data to be held in separated silos that are as close to the people they serve as is practical, given the security requirements. It also specifies the nature of a transaction between trusted and untrusted systems that returns verification results without exposing or compromising the contents of the identity record.
  

• 
  Windows Identity Foundation (WIF) is a Microsoft framework for building identity-aware applications. It provides APIs for buildingASP.NET orWCF basedsecurity token services as well as tools for building claims-aware andfederation capable applications.
  
• 
  Identity, Persistence, and the Ship of Theseus and Reddit comments -- Clojure Working Models and Identity: While some programs are merely large functions, e.g. compilers or theorem provers, many others are not - they are more like working models, and as such need to support what I'll refer to in this discussion as identity. By identity I mean a stable logical entity associated with a series of different values over time. Models need identity for the same reasons humans need identity - to represent the world. How could it work if identities like 'today' or 'America' had to represent a single constant value for all time? Note that by identities I don't mean names (I call my mother Mom, but you wouldn't). So, for this discussion, an identity is an entity that has a state, which is its value at a point in time. And a value is something that doesn't change. 42 doesn't change. June 29th 2008 doesn't change. Points don't move, dates don't change, no matter what some bad class libraries may cause you to believe. Even aggregates are values. The set of my favorite foods doesn't change, i.e. if I prefer different foods in the future, that will be a different set. Identities are mental tools we use to superimpose continuity on a world which is constantly, functionally, creating new values of itself.
  

• 
  Connect.me Connect.Me is the first P2P reputation and discovery network that works across Facebook, Twitter, LinkedIn, and other providers. As you build your reputation, you can use it to curate the social web by vouching for the people, content and businesses you trust. Connect.Me is not just a new app, it’s the beginning of a larger movement to put people back in control of the social web.
  

• 
  Netention is a tool for describing one's current life situation (“is”), and potential future situations (“will be”) – as linked data objects. A semantic "story" of human life consists of statements detailing the aspects about which an individual is concerned or interested. Netention collects a community of peoples' stories, and interlinks them with automatically discovered opportunities that are mutually inter-satisfying - essentially suggesting to its participants how they could realize the desired futures they have described. mailinglist :http://www.automenta.com/global-survival-group
  

Digital identity systems must only reveal information identifying a user with the user’s consent. (Starts here…)

The solution which discloses the least identifying information and best limits its use is the most stable, long-term solution. (Starts here…)

Digital identity systems must limit disclosure of identifying information to parties having a necessary and justifiable place in a given identity relationship. (Starts here…)

A universal identity metasystem must support both “omnidirectional” identifiers for use by public entities and “unidirectional” identifiers for private entities, thus facilitating discovery while preventing unnecessary release of correlation handles. (Starts here…)

A universal identity metasystem must channel and enable the interworking of multiple identity technologies run by multiple identity providers. (Starts here…)

A unifying identity metasystem must define the human user as a component integrated through protected and unambiguous human-machine communications. (Starts here…)

A unifying identity metasystem must provide a simple consistent experience while enabling separation of contexts through multiple operators and technologies.(Starts here…)