Embed Size (px)
Citation preview
1
Kaliya Hamlin @identitywoman
Markus Sabadello http://danubechannel.com
Joseph Boyle @Josephboyle
Joe Johnston @simple10
The Personal Data Store (PDS) Project
2
What is a Personal Data Store?*
A cloud service for storing personal life bits Could be anything you create or do online Could be your own server or a PDS service provider
Under the complete control of an individual Like a personal bank account Like banking, no third party (including PDS provider)
has access to any of this data without permission
Provides portability of personal data across all PDS-enabled service providers and consumers This standard PDS interchange capability is called PDX
(personal data exchange)
* Also called “personal data service”, “personal data locker”, and “personal data vault”
3
Core thesis
Personal data stores and PDX providea strong, user-centric foundation
for both person-to-person relationships
(federated social web)&
person-to-business relationships (vendor relationship management)
5
PDS as foundation for P2P social web
Allows every individual to create their own interconnected social graph based on open protocols
Each person can decide how open or how closed to be about every relationship
Provides a standard global API for social applications
“TCP/IP for relationships”
6
Groups: beyond networked individualism
Groups are not “just the same” as individual nodes
Complex, first-class data sharing entities
PDX can enable groups to be defined and shared interoperably across all PDX providers and consumers
Group relationships use the same portable authorization and access control as individual relationships: XDI link contracts
7
Phil Windley* on PDX
“One thing we discovered with KRL (Kynetx Rule Language) early on was that interesting rulesets were often going to tie to multiple sets of permissioned data and that having a user go through multiple ‘allow-deny’ ceremonies when they start up was a bad user experience. PDX solves that problem.”
* Founder and CTO of Kynetx (kynetx.com) and archictect of Kynetx Rules Language (KRL)
8
PDS as foundation for VRM
Enable “volunteered personal information” A direct connection between individuals and the
vendors they do business with or the organizations they belong to
The “inverse of CRM” – the customer manages the vendor as much as the vendor manages the customer
Already being implemented by Mydex in the UK Participating vendors include the UK national
government, several local authorities, a data aggregator, and the UK’s largest online parenting organization.
9
Tech Interop:PDX XDITech Interop:PDX XDI
Policy Interop:PDX Trust FrameworkPolicy Interop:PDX Trust Framework
“Semantic JSON”Portable format for all
PDX dataPortable
authorization/access control format (XDI link contracts)
Includes shared PDX XDI dictionary services
Extensibility & mapping to other protocols/formats
Open Identity Exchange (OIX) service
Enables risk-based certification of PDX providers/consumers
Can support all levels of assurance/protection
Self-certificationSocial certificationThird-party certification
The two halves of PDX
10
XDI DATA IN PDS
=!1111.aaaa.bbbb.cccc <-- =alice --> $is =(http://alice.exampleopenid.com/) =(mailto:[email protected]) $is$a +person +street "100 Main St" +city "Seattle" +zip "98101" +country "USA"
11
XDI MESSAGE TO PDS
=!2222.xxxx.yyyy.zzzz <-- =bob --> $get / =!1111.aaaa.bbbb.cccc <-- =alice --> +street +city
12
XDI LINK CONTRACTS (1)
=!1111.aaaa.bbbb.cccc$has$1 <-- =alice --> $is$a $has $has$a $a $get / =!1111.aaaa.bbbb.cccc <-- =alice -->
13
XDI LINK CONTRACTS (2)
=!1111.aaaa.bbbb.cccc$has$1$a <-- =alice --> $is$a $a $is$has =!2222.xxxx.yyyy.zzzz <-- =bob -->
14
Code
What exists already: Core native XDI PDS component Code for resolving XRI addressing of PDX documents OpenID endpoint Very basic web interface for managing the PDS and
PDX social address book (see http://pds.fullxri.com) Next steps:
Webfinger support PDX web address book sync PDX mobile address book sync Getting existing code packaged and available
15
16
17
19
Talk to us
Hang with Markus, Joseph, or Joe at OSCON
http://personaldatastore.info/[email protected]
OR ping any of us on Twitter@identitywoman
@josephboyle@versionvega
@drummondreed
