28
A Registry for Online Trust Building OIXnet Don Thibeau Chairman & President A Registry for Online Trust

The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Embed Size (px)

DESCRIPTION

Don Thibeau, Chairman & President of the Open Identity Exchange discusses the challenges of third party credentials in a Breakout Session at the 2014 IRM Summit in Phoenix, Arizona.

Citation preview

Page 1: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

A Registry for Online Trust

Building OIXnet

Don Thibeau Chairman & President

A Registry for Online Trust

Page 2: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Early Maps of Emerging Ecosystems

Page 3: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Markets grow when there is trust between stakeholders, making transactions

reliable and repeatable

Page 4: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Trusted identity systems need leverage

Page 5: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

How do we leverage trusted identity systems?

Page 6: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Listings leverage identity data

Page 7: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Directories automate discovery

Page 8: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Exchanges grow markets

Page 9: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Registries build trust

Page 10: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Even dogs have registries!

Page 11: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

There is no registry for trusted identity systems.

Page 12: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

is building

Page 13: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

An online registry of trusted identity systems

Page 14: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

enables federation

Page 15: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

increases the volume and velocity of trusted transactions

Page 16: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

accelerates market growth.

Page 17: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Registries drive unique value.

Page 18: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

What’s the value of a registry for identity systems?

Page 19: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

WE ARE HERE

Early Impact on Emerging Ecosystems ü  It’s early in the registry adoption process…

ü  Now is the time to shape and steer smarter

federation growth

ü  By doing so, we help everybody

TIME

TRU

STED

TRA

NSA

CTIO

NS

Page 20: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

OIXnet Value

Disclosure Discovery •  Trustworthiness

across registered identity systems

•  Compliance across registered identity systems rules

•  Equivalency across registered identity systems rules

Centralized •  Visibility,

transparency and understandability builds trust

•  Information needed to be trusted

•  Information needed to be registered

•  Market driven

•  Interoperability of registered identity systems

•  Registrants’ policies, certifications, end-points are easier to find and be found

Page 21: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Information Needed “To Be Trusted”

Registrants’ business, legal and technical federation requirements

Information Needed “To Be Registered”

OIX verification of registrant information ensures credibility

ACCES

S LA

YER

GOVER

NANCE

LAYER

Manual/Automated Platforms

Discovery at high volumes and high velocities

Page 22: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Building OIXnet

Accelerating Self-Certification and Federation

ü  Focusing on near-term, low cost, agile use-cases (e.g. OpenID Connect, Account Chooser, etc.)

ü  Investing in legal research focused on liability in the OIXnet registry model

Adapting Registry Models for OIXnet

ü  CA Browser Forum Membership Information

ü  FICAM TFS Approved Identity Services

ü  U.S.-EU & U.S.-Swiss Safe Harbor Frameworks

Piloting* Registry Technical Infrastructure

ü  Testing machine-to-machine discovery

ü  Partnering with 3rd parties on development

Page 23: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

WHO BENEFITS? HOW?

IDPs, APs, and RPs ü  Access complete business, legal and technical requirements ü  Market driven convergence of requirements over time ü  Leverage safe harbor-type models for risk mitigation

COIs and TFPs ü  Greater visibility into other COIs’ and TFPs’ requirements ü  Greater ability to identify federation opportunities

OIX Members ü  Early influence on OIXnet governance and operations ü  Greater insight into market dynamics and policy needs

Pilots ü  Greater visibility into global pilot requirements ü  Greater ability to identify interoperability opportunities

All Stakeholders ü  Complete visibility into registrants’ requirements ü  Greater visibility of global market opportunities ü  Greater understandability of policy across registries

Page 24: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

OIXnet Partners

Page 25: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Why OIX?

Page 26: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

ü  Non-profit

ü Multi-sector

ü  Technology & business

model agnostic

ü  Experience

ü Global

ü  Industry leadership

Page 27: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Early Maps of Emerging Ecosystems

Page 28: The Challenges of Third Party Credentials & Why a Trusted Identity Registry is Needed: Current Initiatives in the UK and the US

Don Thibeau Chairman & President

[email protected]

Join OIX’s work to build trust in internet identity. Shape the future of trusted transactions online.