Higgins

1
Higgins

• 1 a species of Tasmanian long-tailed mouse
• 2 the name of an Eclipse open source
  collaboration

2
Evolution of Identity Management
Presence(Inference from video cameras, RFID
sensors, etc.)
ImplicitBiometrics (Key strokes, voice, face)
Transparent

• Complete separation of user-centric and
  service-centric ids

ExplicitBiometrics (Fingerprint)
Attribute Mgmt

• Fine-grained and gradual release of attributes

Infocards
Proximity(Badge, Key, 2nd Device)

• User-centric and service-centric identities match

Federated Id

• Identity as a set of attributes
• Sharing of service-centric ids

Microsoft Cardspace
SSO

• Single user-centric id paired with many
  service-centric ids

Username/Password
OpenID
3
Towards 3-D Internet
Level of Interaction
Time
4
Immersive Worlds 2-D Web Evolve to a 3-D Net
5
Imagine the Internet with Highly Immersive,
Visual Components

• 3-D online spaces where your avatar can walk
  around in a real life setting
• Build virtual buildings and machines, socialize
  and exchange ideas with others even do business

satisfying two key aspects of being human
our innately social and visual natures
6
Early Virtual Worlds Business Applications
Collaboration and Events
Commerce
Education and Training
Emerging Business Applications
7
Higgins Trust Framework will boost productivity
by integrating identity, profile and relationship
data across complex enterprises
An Eclipse open source project supported by IBM,
Novell and Parity

• Enable dynamic, automatic capture of people
  information from disparate information
  repositories
• Facilitate integration with diverse identity
  management systems
• Ease management of identity, profile, reputation
  and relationship data across repositories

Websites
Buddy Lists
Communities of Interest
Enterprise Apps
Email or IM
Virtual Spaces
YOU
Higgins Trust Framework
http//www.eclipse.org/higgins/
Eclipse
8
Multiple digital identities

• eCommerce (e.g. Amazon, eBay)
• Social Networking (e.g. LinkedIn)

• Book club
• Family

• Professional networks
• Dating networks

Websites
Buddy Lists

• Healthcare System
• Corporate Directories

Communities of Interest
Enterprise Apps

• Second Life
• Croquet
• WOW

Email or IM
Virtual Spaces
You
9
each in its own context (silo)

• eCommerce (e.g. Amazon, eBay)
• Social Networking (e.g. LinkedIn)

• Book club
• Family

• Professional networks
• Dating networks

• Healthcare System
• Corporate Directories

Websites
Buddy Lists
Communities of Interest
Enterprise Apps
Email or IM
Virtual Spaces

• Second Life
• Croquet
• WOW

You
10
And there are multiple mes!
11
(No Transcript)
12
(No Transcript)
13
(No Transcript)
14
(No Transcript)
15
(No Transcript)
16
(No Transcript)
17
A better way
18
Introducing i-cards

• I create (personal)
• I define a few personas
• Business me, web surfing me, dating me
• Others create (managed)
• Credit cards
• Membership, reputation in community
• 3D avatar (virtual identity)
• Governments (drivers license)
• I co-create with others (relationship)
• My preferences, interests within community
• Might include shopping history and wishlists

19
You use them to

• Sign-in to sites
• Exchange with friends stay in sync
• Increase convenience and privacy (e.g. far fewer
  passwords)
• Project my values, interests, preferences to
  sites
• Get introductions and offers that I find relevant
  and compelling

Heres how it works
20
First, I need an identity agentI get one from
any site that uses i-cards

• I download the Higgins browser add-on
• Restart my browser (IE and FireFox)
• Thats it.

21
Now I can sign in to sitesWithout passwords at
each site
i-cards (digital mes) are displayed in my
browser or mobile device
22
I can exchange them with friends

• Every user gets an i-name (e.g.
  agentdrummond)
• I can send my I-name in email, IM or SMS
• My friend responds with their i-name
• We each choose which persona(s) each other can see

23
I can import present managed cardsMy
identities are now portable across silos
Amex
Sears
Nike
HM
Second Life
MVM
Select Present
24
Relationship cards build a connection
What Best Buy knows about me and what Im willing
to share with Best Buy.
Best Buy
Best of all, when I update information about me
ALL of my relationships are instantly updated.
25
How it works
26
Identity Agent
Browser Extension

• Projection (and protection) of identity
  attributes
• Authentication
• Personalization
• Selective disclosure
• Projection of preference, interests, and social
  values
• Profile management, avatars

Higgins Service
27
(No Transcript)
28
4
3
REI Employee
1
Amex
2
Second Life
Higgins Service
Identity Providers
29
Higgins is an interoperability framework
Higgins Browser Extension
Eclipse RCP Apps
Identity Providers
Relying Parties
Apps and Services
Higgins Framework
Plug-ins
CardSpace
Protocol Providers implement protocols for
interacting with Relying Parties
OpenID
RSS SSE
HTML Forms
CardSpace Managed (WS-Trust)
I-Card Providers implement identity protocols and
card types
CardSpace Personal
Higgins Relationship
SAML
X509
Kerberos
Token Providers implement different kinds of
security tokens
UN/PS
Idemix
JNDI / LDAP
Enterprise Apps
IdAS Context Providers connect to different
identity data sources
RDF/OWL
Active Directory
Comms Clients
30
Higgins delivers

• A consistent user experience based on i-cards
• Any identity protocol
• Any token data type
• Any kind of identity data
• Any identity data source
• Any platform

31
Getting a little more technical...Interoperabili
ty requires a new abstraction
32
Identity is about the linkages between multiple
contexts

• Interoperability is created when you can create
  links between digital subjects in different
  contexts.
• i.e. bridges between them.

33
Contexts and Digital Subjects

• Digital Subjects are sets of attributes and
  relationships.
• Context determines appropriateness of each
  attribute and data flow
• Privacy policy must be defined in context

34
This is you. (Just a set of links!)
Dept of Motor Vehicles
Social Security Administration
Facebook
Second Life
Other Digital Subjects
35
Links are where the action is

• Single sign on
• Cross contextual claim presentation
• Federation
• Cross contextual digital subject linking
• User-centricity
• The user is the bridge
• Social Networks
• Links are relationships

36
i-cards
37
youre signed in.

• (No password required)

38
Coming Soon !
i-cards
39
Questions ????