Sxip has submitted a paper for the W3C Workshop on ‘Transparency and Usability of Web Authentication’. That sounded to us like part of the Identity 2.0 vision, so we took the opportunity to document the Identity 2.0 Design Goals.
With a nod to Mr Cameron, we now have The Fourteen Design Goals to go with The Seven Laws. They serve as design requirements for a solution architecture that implements the Identity 2.0 vision.
11 comments
February 23, 2006 at 9:38 am
Roland Mechler
I am interested in learning more.
February 23, 2006 at 6:05 pm
Dick
What more would you like to know?
February 28, 2006 at 11:47 am
Pete Rowley
A good set of requirements. It is good to see a "slim" paper outlining just the requirements, however I would like to see more details on the reasons for the requirements, perhaps with references back to Kim Cameron’s Laws.
February 28, 2006 at 1:14 pm
Dick
Good point Pete. That was in an earlier draft, hard to balance between being "slim" and being "complete"
March 2, 2006 at 10:41 am
Phill
OK so is the next item in the chain the 21 golden rules of Identity 2.0 or the 28 golden rules?
March 2, 2006 at 11:41 am
Dick
I’m hoping we can get to shorter lists!
March 3, 2006 at 5:05 pm
Joe
That is very interesting!
March 4, 2006 at 10:04 am
Dick
Glad you think so!
March 7, 2006 at 3:24 am
timrobertson100
Dick,
I’m new to Identity concepts and found your presentation very (very) good. Thanks for sharing!
Do you think it will go to the point where a person will Identify themself using a GUID? - e.g. say a Life Science Identifier (LSID) where I may define myself as:
urn:lsid:sxip.com:personal:timrobertson100:1.0
(timrobertson100 version 1.0 according to the sxip.com "personal" space)
If not a globally accepted GUID format, how does someone declare where there "intentity" resides?
March 7, 2006 at 3:57 am
Dick
Hey Tim, check out http://sxip.org/ and http://sxip.net/ to see SXIP 2.0. We are using URLs now for persona identifiers, and you can have lots of them.
May 15, 2006 at 4:26 pm
Satch
I’m interested in the idea of the uni directional authentication.
How do you see that being carried out?
The existance of a third party identity issuer sound a bit like the kerberos ticket/wrapper model.
How would trust of the issuer be verified?