Roundtable: Consumer Identity

Moderator(s):

Dave Kearns Senior Analyst

KuppingerCole

While consumer expectations of their online experience is becoming ever more sophisticated, with privacy, security and ease of use being critical requirements for online success. Are current offerings sufficient to meet those expectations? What has to be changed? What is in the pipeline?

After attending this you will be able to:

Describe consumer expectations for online privacy and security.
List the current Internet Identity Protocols and standards and their status.
Describe how current systems and standards can satisfy consumer expectations.
Explain the rules and tools comprising the Open Identity Exchange (OIX) Trust Framework.

This Roundtable qualifies for 2 Group Learning based CPEs

Continuing Professional Education Credits:

KuppingerCole is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing education on the National Registry of CPE Sponsors. State Boards of accountancy have final authority on the acceptance of individual courses for CPE credits. Complaints regarding registered sponsors may be submitted to the National Registry through its website: www.learningmarket.org

You can get 1 CPE for this track.

Session:

Consumer Identity

Consumer Identity Systems - Trends

Date: Wednesday, April 18, 2012 Time: 10:30-12:30

Consumer Identity Systems - Trends

Kim Cameron, Convergence.tech • Colin Wallis, Kantara Initiative • John Bradley, Yubico • Susan Morrow, Avoco Secure • Malcolm Crompton, Information Integrity Solutions

Consumer expectations of their online experience is becoming ever more sophisticated. Whilst the negative aspects of online privacy is becoming understood and questioned. These tenets are impacting the design and development of consumer identity systems. Can our current offerings, such as SAML, OpenID Connect and Information Cards, provide the type of identity system that will perform to the needs of an increasingly sophisticated audience in terms of user control, privacy and security?

A Review of the Status of key Internet Identity Protocols OpenID Connect, OAuth 2.0 and Account Chooser

Axel Nennker, Deutsche Telekom • Dr. Michael B. Jones, Microsoft • John Bradley, Yubico

Description: A high level overview of the protocol, and an explanation of why major technology companies have standardized on it including Google, Microsoft, Facebook, Yahoo, etc. We will also discuss how the functionality of the OpenID v2 protocol has been reimplemented on top of OAuth to create OpenID Connect. The session will also discuss the security problems of websites that run their own password based login systems.

Barn-Rasing At Internet Scale: Trust Framework Development for Open Identity

Anthony Nadalin, Microsoft • Drummond Reed, Avast • Don Thibeau, OpenID Foundation • Dr. Scott David, LL.M., University of Washington • Jeff Stollman, RMTM

In April 2011, the US Department of Commerce released its National Strategy for Trusted Identities in Cyberspace (NSTIC) calling for a public-private partnership to create a secure commercial, social, and civic identity ecosystem. The Open Identity Exchange (OIX) has taken the lead in constructing both the rules and tools for the rapid, internet-scale creation of such an ecosystem: the Trust Framework.