InfoCard - Revision history

Tom: /* What is Identity? */

2025-04-27T22:53:18Z

‎What is Identity?

Tom: /* What is Identity? */

2023-07-27T19:55:33Z

‎What is Identity?

Tom: /* InfoCard Interactions and Protocols */

2023-03-31T20:55:07Z

‎InfoCard Interactions and Protocols

Tom: /* What is Identity? */

2023-03-31T20:54:14Z

‎What is Identity?

Tom: /* Full Title */

2022-09-02T01:03:46Z

‎Full Title

Tom: /* InfoCard: An Identity Metasystem */

2022-09-02T01:02:48Z

‎InfoCard: An Identity Metasystem

Tom: /* Contents */

2022-09-02T00:59:46Z

‎Contents

Show changes

Tom: /* References */

2022-09-02T00:54:13Z

‎References

Tom at 00:51, 2 September 2022

2022-09-02T00:51:56Z

Tom: /* InfoCard Interactions and Protocols */

2022-09-02T00:50:03Z

‎InfoCard Interactions and Protocols

@@ Line 24: / Line 24: @@
 In fact, this leads directly to a definition of identity from the InfoCard perspective: A digital identity is a set of claims made by one digital subject about itself or another digital subject. This definition was proposed by Kim Cameron on his identity blog (www.identityblog.com). Kim was a [[Computer Architect]] at Microsoft working on InfoCard, and he's made many important contributions to the current thinking on identity.
+===[[Obfuscation]]===
-Oh, and one more thing, in case you think you know where I'm going. The problem of having hundreds of identities today is not solved by merging them into a single identity that's used everywhere. That would introduce more problems than it solves. InfoCard allows you to have as many identities as you need. Looking into the future, you might have one identity that's issued by your government, one that's issued by your bank, and one issued by a Web community of which you're a long-standing member with a good reputation. You will likely have several self-issued identities, a few of which contain false information! I don't know about you, but I usually lie when a Web site asks me for personal information that I don't want them to have. I really don't live at 1313 Mockingbird Lane, Anytown, USA. But it satisfies the Web site and reduces my risk. InfoCard won't change your ability to do this.
+We all have multiple [[Personas]] now so the problem of having hundreds of identities today is not solved by merging them into a single identity that's used everywhere. That would introduce more problems than it solves. InfoCard allows you to have as many identities as you need. Looking into the future, you might have one identity that's issued by your government, one that's issued by your bank, and one issued by a Web community of which you're a long-standing member with a good reputation. You will likely have several self-issued identities, a few of which contain false information! I don't know about you, but I usually lie when a Web site asks me for [[Personal Information]] that I don't want them to have. I really don't live at 1313 Mockingbird Lane, Anytown, USA. But it satisfies the Web site and reduces my risk. InfoCard won't change your ability to do this.
 ===The Spirit of InfoCard===

@@ Line 21: / Line 21: @@
 I've made a bunch of statements about who I am. Do you believe them? Are they assertions of fact or merely claims? That really depends on who is making the statements and how much you trust that person or organization. For example, if you wanted to trade with me on eBay, you could easily discover that eBay says I have an excellent record for paying quickly. If you regularly trade on eBay, you probably have a reasonable degree of trust in their feedback system, so this is a claim you'll accept.
-One approach that InfoCard takes is that it doesn't make any assumptions about the veracity of statements made about a given identity. It's up to you to decide whether you believe the claims I've made about myself, or the claims eBay makes about me. Thus the use of the word, "claim" as opposed to something stronger, like "assertion."
+One approach that InfoCard takes is that it doesn't make any assumptions about the [[Veracity]] of statements made about a given identity. It's up to you to decide whether you believe the claims I've made about myself, or the claims eBay makes about me. Thus the use of the word, "claim" as opposed to something stronger, like "assertion."
 In fact, this leads directly to a definition of identity from the InfoCard perspective: A digital identity is a set of claims made by one digital subject about itself or another digital subject. This definition was proposed by Kim Cameron on his identity blog (www.identityblog.com). Kim was a [[Computer Architect]] at Microsoft working on InfoCard, and he's made many important contributions to the current thinking on identity.

@@ Line 146: / Line 146: @@
 Figure 1 is an interaction diagram from "A Guide to Integrating with InfoCard," which used to be available on the Microsoft download center. It illustrates how a user can authenticate with a service using InfoCard. In the diagram, you can see the identity provider (the relying party), which is a Web service, and the subject, which is the user. The client app the user is running is also shown for clarity.
 [[File:InfoCard Interaction.gif]]
 Figure 1 InfoCard Interaction

@@ Line 23: / Line 23: @@
 One approach that InfoCard takes is that it doesn't make any assumptions about the veracity of statements made about a given identity. It's up to you to decide whether you believe the claims I've made about myself, or the claims eBay makes about me. Thus the use of the word, "claim" as opposed to something stronger, like "assertion."
-In fact, this leads directly to a definition of identity from the InfoCard perspective: A digital identity is a set of claims made by one digital subject about itself or another digital subject. This definition was proposed by Kim Cameron on his identity blog (www.identityblog.com). Kim is an architect at Microsoft working on InfoCard, and he's made many important contributions to the current thinking on identity.
+In fact, this leads directly to a definition of identity from the InfoCard perspective: A digital identity is a set of claims made by one digital subject about itself or another digital subject. This definition was proposed by Kim Cameron on his identity blog (www.identityblog.com). Kim was a [[Computer Architect]] at Microsoft working on InfoCard, and he's made many important contributions to the current thinking on identity.
 Oh, and one more thing, in case you think you know where I'm going. The problem of having hundreds of identities today is not solved by merging them into a single identity that's used everywhere. That would introduce more problems than it solves. InfoCard allows you to have as many identities as you need. Looking into the future, you might have one identity that's issued by your government, one that's issued by your bank, and one issued by a Web community of which you're a long-standing member with a good reputation. You will likely have several self-issued identities, a few of which contain false information! I don't know about you, but I usually lie when a Web site asks me for personal information that I don't want them to have. I really don't live at 1313 Mockingbird Lane, Anytown, USA. But it satisfies the Web site and reduces my risk. InfoCard won't change your ability to do this.

@@ Line 1: / Line 1: @@
 ==Full Title==
-Step-by-Step Guide to InfoCard by Keith Brown MSDN Magazine (2005-05) taken from Microsoft website 2019-10-07
+Step-by-Step Guide to InfoCard by Keith Brown MSDN Magazine (2005-04 & -05) taken from Microsoft website 2019-10-07
 Code download is no longer available.

@@ Line 55: / Line 55: @@
 InfoCard encompasses a lot of different tasks. It orchestrates a few of the WS-* protocols to make the secure interchange of identity information feasible. It also presents a GUI that allows a user to choose among several digital identities, each of which is represented visually as a card. Figure 1 shows a very early "wire frame" UI. I'll talk a bit more about some of the other things it does later on, but first let me introduce the three players that are always involved in any InfoCard transaction.
 Figure 1 Digital Identity Made Concrete for Users
 First is the subject. An example of a subject is a user who wants to represent herself digitally on the Internet. Second is the identity provider (IP), an organization that issues digital identities. A close analogy is a company like Thawte, the issuer of the secure sockets layer (SSL) certificate that I use to identify my company's Web site. Finally, there's the relying party (RP), which relies on digital identity for its operation. Most Web sites and Web services today allow users to submit some form of identity, anything from a simple e-mail address to a digital certificate or something more exotic.

← Older revision		Revision as of 00:54, 2 September 2022
Line 152:		Line 152:
	==References==		==References==

		+	[[Category: Identifier]]
	[[Category: Credential]]		[[Category: Credential]]