Identity Management Eco-system: Requirements for the Youth. Hemma Prafullchandra

Transcription

1 Internatinal Telecmmunicatin Unin Identity Management Ec-system: Requirements fr the Yuth Hemma Prafullchandra VP, Advanced Prducts & Research, Infrmatin Services, VeriSign Wrkshp n Digital Identity fr NGN Geneva, 5 December 2006

2 29% f the Wrld ppulatin is < 15 years % f Ppulatin by Age (mid-2006) Billin! Surce: Ppulatin Reference Bureau < 15 years 65+ years Wrld Nrthern America Latin America Africa Eurpe Asia Oceania Wrkshp n Digital Identity fr NGN Geneva, 5 December

3 And the Physical is cnverging with the Digital Mbility Infrmatin Cmmunicatin + Anywhere + Anytime + Any Device Physical Entertainment Cnsumptin Supply Chain Lifestyle Digital + Any Channel + Any Prduct + Any Event + Any Me Driving A Dramatic Increase In Netwrked Interactins Wrkshp n Digital Identity fr NGN Geneva, 5 December

4 Our generatin has already enabled the Any Era Wrkshp n Digital Identity fr NGN Geneva, 5 December

5 It s Real, It s Glbal and It has already begun 1b Internet users, 75% utside f U.S. 70m Chinese 1b cumulative itunes Internet users under m registered Skype users 180m glbal bradband subscribers 70%+ Krean bradband penetratin 100m registered PayPal users 2b security incidents 60m ipds 34m active blgs Surce: Mrgan Stanley Wrkshp n Digital Identity fr NGN Geneva, 5 December

6 Watch where the Glbal Yuth spend their time Surce: Mrgan Stanley And many ther places Wrkshp n Digital Identity fr NGN Geneva, 5 December

7 Mbile + Web 2.0 Data Sharing My * Scial Netwrking Cllabratin Tls Users in Cntrl Real-time Enhanced by: Persistent Identity Prfile Presence Ge-lcatin Wrkshp n Digital Identity fr NGN Geneva, 5 December

8 Characteristic: Multi-tasking Easily bred Share (everything)! Nw Be cl - High-tech Have a Scial edge The Yuth IdM System Requirement: Seamless acrss ANY Interactive Prvide privacy prtectin Real-time Demands Rich User experience MUST facilitate scial interactins Challenges: Cst Quality Individualizatin We must integrate and unify, nt dictate Wrkshp n Digital Identity fr NGN Geneva, 5 December

9 Basic IdM Requirements Unique (universal t a namespace) identifier Simple, yet Rich and cntext aware Reslvable and rutable frm anywhere at anytime Maps t many virtual identities/persnas (r t real ids in ther namespaces) Entity verificatin t determine level f trust (and safeguards needed) Persn, device, netwrk, applicatin, cntent, Rich Attributes Inherited ( frever ) Assigned (ptentially Verified) Acquired (reputatin, behaviral, negtiated/exchanged,...) Apprpriate authenticatin, SSO Discverable Scalable - as needed fr the specific situatin passwrd t bimetric Auditable Real-time Authrizatin based n cntext and applicatin-specific Typical Identity Lifecycle Establish Mdify Suspend Terminate Archive Wrkshp n Digital Identity fr NGN Geneva, 5 December

10 Persnal Identity Prvider (based n OpenID) Cnvergence f cncepts frm LID, OpenID 1.1, SXIP, DIX Implements a framewrk: Discvery, Authenticatin, Prfile Exchange, Attribute verificatin (e.g. Age), Real-time authrizatin (e.g. trust requests t exchange specific attributes), audit recrds, OpenID ( is: URI-based n new namespaces! Decentralized n hard-wired rts f authrity/trust Lightweight practical t adpt and extend Flexible security layer mre security dependent n need Open Surce cmmunity-based and transparent Open surce prject in Apache: Heraldry PIP at Wrkshp n Digital Identity fr NGN Geneva, 5 December