|
IDsec is a mechanism that provides a digital identity (aka. Virtual Identity) for users on the Internet. Users may allow Internet service providers to access their User Profile data. As such it can be an alternative for MS Passport. Software development is the translation of a user need or marketing goal into a software product. ...
A software release refers to the creation and availability of a new version of a computer software product. ...
2006 (MMVI) was a common year starting on Sunday of the Gregorian calendar. ...
A software release refers to the creation and availability of a new version of a computer software product. ...
2006 (MMVI) was a common year starting on Sunday of the Gregorian calendar. ...
An operating system (OS) is a computer program that manages the hardware and software resources of a computer. ...
Microsoft Windows is the name of several families of proprietary operating systems by Microsoft. ...
Digital identity refers to the aspect of digital technology that is concerned with the mediation of peoples experience of their own identity and the identity of other people and things. ...
A software license is a legal agreement which may take the form of a proprietary or gratuitous license as well as a memorandum of contract between a producer and a user of computer software. ...
The GNU logo The GNU General Public License (GNU GPL or simply GPL) is a widely used free software license, originally written by Richard Stallman for the GNU project. ...
A website (or Web site) is a collection of web pages, typically common to a particular domain name or subdomain on the World Wide Web on the Internet. ...
Windows Live ID (previously called . ...
Introduction Today many services exist on the Internet that require some form of user identification or user information, e.g. for personalisation or e-commerce purposes. These services rely on customer information to improve their quality by using previously acquired knowledge about users stored in user profiles. However each of these services implements its own mechanism for that purpose, which leads to user information redundancy, fragmentation and possible inconsistency. Moreover the current situation forces users to maintain multiple profiles at multiple service providers. This overload of personal, possibly privacy-sensitive, information floating around the Internet leads to great issues of trust. Electronic commerce, EC, e-commerce or ecommerce consists primarily of the distributing, buying, selling, marketing, and servicing of products or services over electronic systems such as the Internet and other computer networks. ...
Redundancy, in general terms, refers to the quality or state of being redundant, that is: exceeding what is necessary or normal, containing an excess. ...
Fragmentation is a term that occurs in several fields and describes a process of something breaking or being divided into pieces (fragments). ...
Consistency has three technical meanings: In mathematics and logic, as well as in theoretical physics, it refers to the proposition that a formal theory or a physical theory contains no contradictions. ...
IDsec presents a generic mechanism for establishing Virtual Identities on the Internet, that standardises protocols and interfaces for exchanging identity information between users and service providers in a secure manner. It enables users to reuse profile information across Internet services and service providers to delegate (part of) their customer information maintenance.
Overview Identity in IDsec means that a user is known by a certain profile that contains precisely those attributes that the user wants to reveal to the requester of his profile. Access to profile attributes is managed by the user himself. Certificates and public/private key mechanisms ensure that information is exchanged in a secure way only between parties that trust each other. A big random number is used to make a public-key pair. ...
Profiles are stored with so-called Profile Managers somewhere on the Internet. Profile Managers are parties that have a trusted relationship with the Profile Owners whose Profiles they have stored in their databases. A database is an information set with a regular structure. ...
A Profile Manager runs a Server-side application that allows his clients to modify their Profile over a secure connection. In addition to modification of attributes and their values, Profile Owners can assemble Access Control Lists that specify which attributes are accessible to which Profile Requesters. Access Control Lists are based on certificate information. In computer networking, the term server-side refers to operations that are performed by the server in a client-server relationship. ...
Upon starting an Internet action that requires the use of IDsec, a Profile Owner will login with the Profile Manager. This "session login" will result in the creation of a "session certificate" that is sent to the Owner. The session certificate represents the Owner in the current Internet session and it contains a reference to the location of his Profile.
The Profile Owner sends the session certificate to the IDsec enabled Profile Requester. The Requester in his turn, sends it together with his own root certificate to the location specified in the session certificate. The Profile Manager uses the session certificate to identify the Owner and to assemble a Profile Requester specific Profile based on the Requester credentials and the Access Control List that the Owner specified.
The Profile Requester now has a customer Profile that he can use to personalize content, to do accounting and/or billing (eventually in combination with a third party) and any other business that he would normally do with locally stored customer data.
Notice that IDsec supports "anonymous browsing" and single sign-on; it does not necessarily reveal the name and address of the Profile Owner or any other attribute that uniquely identifies the Profile Owner. IDsec transmits exactly those attributes that an Owner trusts to be sent to the Requester.
Status Several people have given positive feedback on the IDsec specification. It has been proposed as input to the IETF, to the DotGNU project and to the PingID project, amongst other personal initiatives. Furthermore RSA security has commented on the draft specification and they will put it forward as input to the Liberty Alliance Project. The Internet Engineering Task Force (IETF) is charged with developing and promoting Internet standards. ...
DotGNU is a part of the GNU Project that aims to provide a free software replacement for the Microsoft . ...
This article is about an algorithm for public-key encryption. ...
The Liberty Alliance, also known as Project Liberty, is a broad-based industry standards consortium developing suites of specifications defining federated identity management and web services communication protocols. ...
See also Digital identity refers to the aspect of digital technology that is concerned with the mediation of peoples experience of their own identity and the identity of other people and things. ...
External links - IDsec at Sourceforge - The project mainsite.
| 
Feeds |
Contact