ETech 2006 - Dick Hardt - Who is the Dick on your site?

Talk about Identy 2.0 - simple, secure solution.

There are many Dicks, how do you know which one is me? How do you know which one of me with my personas.

How do we prove who we are in an online world?

Prove it's me in the physical world with a drivers license. What do I do in the online world? 

How does Amazon know all about me? How do i tell the Hyatt that I'm allergic to down feathers. How do I move my friends from Orkut to Tribe?

How do sites use my data? Who and how much disclosure. 

What's the solution? SXIP identity

Identiy History

• Identity 1.0 - DAP, etc.
• Lightweight - LDAP, Passport
• Multiple directories with a domain centric models
• Identiity 1.5 - SAML, Liberty Alliance - requires Trust between sites

Identity providers and relying parties handle this today. THere's explicit trust between Indentity Provider and Relying Party 

Salesforce uses a simple and flexible ASP model. Little choice as a worker? Should your identity provider always be your employer?  

Emerging model called YADIS. Better model - no trust required, and more flexibility.

Identity 2.0 - Higgins (IBM), SXIP, Identity Cards (Microsoft)

Ning created a working site in 12 minutes.

A member site can now ask for if available by asking for information a user already has and not overwhelm them with a ton of fields. I can also use this to send data to sites that I want to send data to.

Chris - Dick Hardt has a GREAT presentation style.

Comments

[weston]

You can see SXIP 2.0 in action at http://sxore.com and can download open source SXIP development kits at: http://sxip.org/index.php?title=Downloads