I recommend the content on the Telco 2.0 site and if you are interesting in visiting interesting innovative parts of the Telco world they have great events for that.

AT&T: to be a 'Personal Information Agent'
Von Wright, VP Cloud & Wholesale Services, describes how AT&T plans to put consumers in control of their own data, and take the role of an agent or broker for their Personal Information

Google: Strategic 'Co-opetition' with Telcos on Consumer Data

The 'Personal Information Economy' will see a higher intensity of strategic co-opetition between Google and telcos according to Google's Eric Sachs.

Microsoft: Why Telcos Must Act Now or Lose The Opportunity

Marc Davis, formerly Yahoo! Mobile's Chief Scientist, now at Microsoft, and a key collaborator with both Telco 2.0 and the World Economic Forum's 'Re-Thinking Personal Data' initiative, gives his unique perspective on the 'Gold Rush' for personal information, and why telcos must act now or lose the opportunity to take a valuable role in it.

This is completely the wrong frame to foster community collaboration.

Part of this presentation touched on a timeline of events in the community. Those and more are reflected on this timeline that is beginning to be developed here. IIW11 will be November 9-11 in Mountain View, CA The first ever IIW outside the Bay Area will be happening September 9-10 in Washington DC following the Gov 2.0 Summit with the theme Open Identity for Open Government. The first IIW in Europe will be happening in London likely October 9-10 (dates still to be confirmed) prior to RSA Europe. If you would like to know about when the next IIWs have registration open please join this announce list. TheIdentity Gang is the community mailing list where conversations are ongoing about identity. You can follow modest updates about IIW on twitter via our handle - @idworkshop You can see IIW 10 attendees on our registration page.

You could sum it up this way - "stuff happens in peoples lives and the need the freedom to go online and get support for those things and not have it all linked back to their "real identity."

The slides are moving (drawing from post secret post cards) and it is worth watching if you don't think people need this freedom.

This year there are 2200 panels submitted for 300 slots. It is great they are going with community generated ideas for the conference. It is also hard to tell what will be happening in our fast moving industry 7 months from now. PLEASE go to SXSW create an account and then vote for these two

I put a lot of thought in to what to put forward this year knowing it would be 9 months out. One of the trends that is just starting to emerge is identity verification - my hunch is that by March this will be a topic getting a lot of attention and worth exploring at SXSW.

Who are you? Identity trends on the Social Web.

"On the Internet Nobody Knows You're a Dog" Is this famous New Yorker cartoon still true? Twitter is doing verified accounts. Facebook claims everyone using their "real name" gives strong social validation 'proof'. Equifax is validating age with information cards (digital tokens). We will explore the current trends and their implications for the future.

1. What is identity?
2. Why are people doing identity validation?
3. Who is doing identity validation?
4. Why are websites seeking people who have had their identities validated?
5. Is identity validation improving the web?
6. What are the current open standards in this space?
7. Are approaches by men and women different about idnetity presentation and validation?
8. What kinds of businesses are requiring online identity validation for customers?
9. Is identity validation going to squish "free speech"?
10. How is this trend changing the web?

With my She's Geeky hat on: What Guys are Doing to Get More Girls in Tech!

The point of this is to get beyond the women say there are issues in the field and guys say there isn't - to have guys who know there is an issue and are proactively doing constructive stuff to address it.

Many tech fields have a low percentage of women. If you are a guy do you wonder what you can do about it? Learn about successful strategies and proactive approaches for supporting women you work with and participate in community with. We will even cover some well-intentioned efforts that have gone awry.

1. How many women by percentage participate in different technical fields?
2. Why does it matter that they are underrepresented in these fields?
3. What are the cultural norms that men and women have about performance and self-promotion?
4. What is Male Programmer Privilege?
5. What can a guy do who has a sister that is math/science inclined but being steered away from the field?
6. How have the men on the panel improved things in their workplaces?
7. How have the men on the panel addressed the challenges that arise in open communities? (that is where you don't have a boss that fires people for inappropriate behavior/comments)
8. What are the qualities of a workplace that is friendly for women?
9. How to go beyond tokenism in workplaces, communities and conferences?
10. How to encourage women more?

Other interesting Preso/panels covering Identity topics:

The Politics & Economics of Identity Put forward by my friend Liza Sabature of Culture Kitchen and the Daily Gotham Identity Politics" has always been left to the realm of feminist, civil rights activists, aka "minority politics". This panel will explore the social and political ramifications of the business of identity and reputation. We will talk about the good, the bad and the ugly and what social entrepreneurs, businesses and digital activists are doing to impact this new economy.

1. What is identity?
2. What is reputation?
3. What is privacy?
4. How have big business historical monetized privacy?
5. How social media works on identity and reputation?
6. Online surveillance in the US : DMCA, FISA, Patriot Act
7. Facebook BEACON : a study on how not to spy on people for fun and profit
8. Google Adsense or Spysense?
9. What are Vendor-Relationship Management systems?
10. Will we need "Identity Management Systems" instead of VRMs?

Distributed Identity: API’s of the Semantic Web Without much conscious thought, most of us have built identities across the web. We fill in profiles, upload photos, videos, reviews and bookmarks. This session will explore the practical use of Social Graph API and YQL to build new types of user experience combining identity discovery and data portability.

Online Gatekeeping: Who Died and Made You King? by Liz Burr As the web becomes more open via social networks, we're adopting new rules of communication. But who creates these rules? How much does class, race and gender figure into social media policing? We'll discuss how identity affects social networks, as well as look at how online communities police themselves as participation expands.

1. Which groups are in control of what is worth sharing via social media?
2. Are the under-25 community using social media differently?
3. How do we recognize and confront social media 'gatekeepers'?
4. Is our behavior in online communities merely a reflection of offline stereotypes and experiences?
5. What is the impact of the amplification of social stereotypes online on under-represented groups?
6. How do we integrate previously, under-represented groups into this more social world?
7. Is there really such a thing as a "digital ghetto"? If so, is it our responsiblity to combat it?

OpenID: Identity is the platform is put forward by Chis Messina.
I have to say it is really great to have this be put forward so plainly and simply - to "get religion" about user-centric tdentity and its central role in shaping the fugure the social web.

Ignore the hype over social networking platforms and web OS's! The platform of the social web is identity. Facebook and Twitter Connect are just the beginning of the era of user-centric identity. I'll go beyond the basics of OpenID and learn how to effectively incorporate internet identity into your apps.

Your Online Identity After Death and Digital Wills

If you died tomorrow, would someone take care of your internet accounts? How do you tell subscribers the blogger has died? Every day people die and no one can access their email. Let's explore what can be done to manage your online identity after you pass on.

1. What usually happens to email accounts when a person dies? Policies for Gmail, Yahoo, Hotmail and AOL
2. What about WordPress.com and Blogger for digital policies concerning the death of a blogger?
3. Do You have a digital will setup?
4. Products and services to manage digital wills, electronic correspondence after death and auto replies.
5. Grief, "You Have Mail" and online memorial services.
6. Who owns blog content after the death of a blogger?
7. How to calculate the worth of your website or blog.
8. How can you manage your online accounts and passwords for easy access after you pass?
9. What are some recent legal examples of online account ownership disagreements?
10. How to keep your passwords safe?

How to Benefit from 1-Click Identity Providers by Luke Shepard from Facebook.

Sites across the Web are opening up to support open identity platforms, such as OpenID. How can companies at scale and those with large user bases successfully work with open standards including OpenID, Activity Streams and new social markup language specs? Can companies survive the challenges of incorporating OpenID into their websites?

1. Are there any success stories with OpenID?
2. What does the OpenID user experience look like?
3. Who has implemented OpenID?
4. What have been some of the failures of OpenID?
5. What is OpenID?
6. What are the user benefits of OpenID?
7. How can websites educate users about open protocols?
8. What are the privacy concerns around OpenID?
9. What kind of user data is made available to sites when they implement OpenID?
10. What will it take for OpenID to become mainstream?

Crime Scene: Digital Identity Theft

I hope to bring the big map or another version to the conference at Berkman and DIDW for others to add more information to it.

I knew that Harvard was critical to get involved in the discussion so when I found out about the conference on Internet and Society I flew out there specifically to talk at length with John about what Identity Commons and i-names. We had a great meeting in the Charles hotel for about two and a half hours. I also on that trip spoke at length with Paul and Mary.

Then when we were out at PCForum for a pre-Forum identity gang. John couldn't make that but got there late in the day. I set up a breakfast meeting with Owen Davis, Drummond Reed and John Clipppinger to talk about identity matters including how to get support from the big players for the kind of research and dialogue needed to address the social concerns. It seems the subsequent conversations went well and they secured some funding.

So...Doc that is part of the story about how John Clippinger and the Berkman Center got involved in the identity conversation.

I have like many many folks participated in this system. I have bought first albums then cassettes and then CD's (and now people buy songs online too - but I have yet to). When I make a purchase of these artists works I have bought the right to listen to them freely. People who had albums upgraded to cassette tapes (maybe) but likely for sure upgraded to CD's. If they did this they bought the work 'twice.' In the digital realm it gets even stranger where if you buy a piece of music on apple i-tunes you only get to copy it three times.. from one computer to the next to the next. Then it 'runs out' of copies. mmmm...but didn't buy the right to listen to it when you first bought it no mater which medium you as the owner of that music choose to listen to it in.

So far the whole frame around DRM has been device based. This means every time there is a new form that plays media - (record player, cassette deck, CD Player, MP3 on desktop, ipods and zen players....and there will be more in the future.

If DRM is to exist and not completely alienate those who are the end users of music it should be identity based. I - ME - I buy a copy of a song and I get to listen to it forever on what ever the 'medium' of the day is.

I would like to propose a better system that still means folks get money. Music and other digital work is completely FREE.

It is all on the web and we call all access it all. I as a listener to music only have so much time that I spend listening to music. I allocate some amount that I will contribute to the music payment pool in a month $50 - $500. Then the attention 'given' to each song is recorded. The money I allocate amongst all the artist/podcaster etc. is distributed between them (perhaps with me giving particularly enjoyable ones a bit more) based on my attention data stream. The artist I listen to actually get money! If I like them and listen to them over years and years they will get more money then they would if they sold me a song once. This of course needs a functioning micro-payments system it may be worth the music industries business to actually do this.

Technorati Tags: identity, attentiontrust

I mention the founding of Virtual Rights to address this new era of personal representation online. I share what inspires me how we can use these tools to empower us as citizens.

Dr. Contractor presents a multi-theoretical multilevel model of using technologies to understand knowledge and social network organization through the discussion of real-world examples. From the 'Lovegety' to Amazon purchase suggestions and beyond, Dr. Contractor outlines the concepts that form the basis of social and knowledge networks.
Those concepts are:

1. the social network, "it's not what you know, but who you know";
2. the cognitive-social network, "it's not who you know, it's who they you think you know";
3. the knowledge network, "it's not who you know, it's what they think you know";
4. the cognitive-knowledge network, "it's not who you know, it's what who you know knows."

Technorati Tags: podcast, Dataweb, Cool

He was less articulate then Daniel Solve about why the courts have ruled that information held by third parties are not protected under the 4th amendment. It is because the courts interpret a third party even the service provider of knowing your phone number (because they are providing you that service) as not private. In the digital age this third party status expands to so many many things.

He talked about the laws they have and are considering about e-mail. They basically mandate the service providers keep copies of everything that comes to your in-box and the records of where you travel on the net. He gave a great analogy about this. It is like the government is mandating the post office to photocopy every piece for mail you ever get and store it for 10 years in case some government agency needs to search it.

Technorati Tags: Digitalperson, NpTech, NTEN, Conference, puppy

Here is the summary:
How do I as user my identity on the web?
The 'story that started it all'
Wife's machine got Trojan. I had to change all passwords everywhere.

What is Identity?!
Identity is just another class of information we manage.
It's a second-order problem. When I get on the net I get on it to do Identity Management other tasks.

What is Identity [Italicized] ?
Depends on the setting

Bottom line two fundamental types
third party vouch for and self asserted

His summary of the other stuff..

What are the options:
Passport
All others are not inherently evil.
everyone is throwing protocols against the wall and seeing which ones stick.
who do you trust to host you identity?

SAML
SAML/Liberty
trust relatinoship between two entities on your behalf
"asserting" used a lot in this world....and I will use it a lot

Standards are well documented and widely deployed. Lots of infrastructure required for trust relationships. Conditionals and trust relationships not viable from an open source stand point. Took a lot of time for a second order problem.

SXIP
Identity is locked into who the identity provider. You can change home sites. not locked in. Run on own machine. Powerful for users with centralized for user to move.

LID
Send information back and forth and urls based.

OpenID
No dynamic scripting needed. You have your identity URL tell via meta tag where identity server is. enter URL - blog URL. LiveJournal do you allow it to authenticate?

Can't i-names do this?
He asserted wrongly that there was not reputation (global services launch will embed reputation in the messaging/contact system.

For Internet-scale Identity needs

• Aggregate IDentity
• Decentralized and open
• Divers programming Language/environments
• Interoperable implementations
• Bootstrap off existing trust models

PASSEL
Gives you more control over data
Aggregates your identity via user-centric three-piece architechure
implemntations already started Perl, PHP, Java and C#
Pluggable trust models.

Generalized model for proving any DNS-based identifier
Trust Model

• how you prove the signer
• person x
• Moving identity information proving that a
• protocol how move around
• plug in how you trust information

PIECES:
Agent (principle's computer)

• aggregates into portfolio
• public private key and fingerprint
• natively if not
• Zip file on key - use on different locations

Signer (site that makes assertions)

• signer issues token with for example 4 hour life span
• agent must retrieve new token from dizzyd.com

Target (relying party)

• how does the
• retrieval of public key.

Technorati Tags: identity, OSCON05, Passel, puppy

He began with ... as I was saying

Semasiology is the science of the meanings or sense development of words; the explanation of the words.

I wonder if we can collectively do a Semasiology of Identity perhaps that is a topic we can invite R0ml to consider with us since Optaros is considering and 'identity' practice.

He returns to a quote from the princess Bride where the guy says Inconceivable 'I do not think it means what you think it means'

Summarizes last year's talkwhere he made the point that the source of open source was not 'code' but instead was the requirements.

PART II - Really it was all about the CODE

Programs must be written for poeple to read, and only incidentially for machines to execute.

APL progammling language by Kenneth Iverson it was 'easy to read' and designed for Notation an a Tool of Thought.

(check out what it really looks like - totally not 'easy to read')

Why read?
70-80% of all "software development is maintenance
70-80% of all maintenance is reading old code and understanding
49-64% of the cost of CODE

WEB originates from this work Literate Programming by Donald Knuth. It is a method of composing programs. He felt the time was ripe for significantly better documentation of program and saw them as Works of Literature. He was an essayist whose main concern is with exposition and excellence of style.

With Literate Programming there are two steps
Tangle (create the code)
Weave (create the documentation)

Hence the aphorism: Given one Literate eyeball, most bugs are shallow.

This language and its associated programs have come to be known as the WEB system.

He said: I chose the name WEB partly becasue iftwas one of the fe three-letter words of the Engligh lanauge not applied to computers

We can also invite some other words to describe the programming process from this set of words.

SPIN (create requirements) ...a ask in spining a yarn

Knit (create the test cases)

Fashion (generate the models)

We might wonder how good our spinning, knitting and fashioning are going in the identity space. Hopefully the IIW in October can help with all three.

Warning this next section has a lot of free association

Steven Roger Fischer wrote A History of Reading

How many people are computer literate?
The census bureau says there are 600,000 programmers in the US.
If you include other professions that also would read code as part of their job you reach about 1.9 million which is less then one percent. It is about 16 million people world wide which is 1/6th of one percent world wide.

Where does reading come from? All early reading involved simple code recognition very task oriented.

Sumarian writing developed
Enheduanna was the first poet in 2285 BC. and was the daughter of Kin Sargon.
Ada Byron - first programmer Countess of Lovelase is the daughter of a poet.

In Sumaria at the time this poem was written only 1% of population knows how to read in the Great City of UR.

Around 500BC.. Athenians 5% could read.

This was the Dark Ages 500 AD at it was asserted that what writing made presnet to reader pictures make present ot the illiterate.

That is the GUI...(Graphical USer interface)

Words were written down for Public Performance:

scripta manet verba volat

script remains verbal is volitle
writing is eternal, talk is ephemeral

This phrase did not mean this

To 'read' was to transmit, not to receive. Things written were written as memory aids.
To read was to speak...because of not for orators...

So this phrase really meant:

Writing reposes, speaking soars

Writing isn't any good unless you read it out loud. Existance of the book meant that the speaker could be anybody.

GPL3 - GPL is a copyright.

Copyright protects against unauthorisze copying derivation, distribution or publicly performance.

What does it mean to publically perform software?

It means to 'run the code'

The purpose of the code is to be performed.

GPL defines source code's preferred form of the work for making modifications to it.

Refrain

Voices of the Absent
The spanish theologian - Isidor of Seville (560-636 BC) - praised silent reading, too, for being without effort, reflecting on the which has been read rednering their in.

In 1999 St Isidore was named the patron saint of programmers
Why?
He wrote a treatise - Etymologiae (source) or Origines as sometimes called.
He compiled it - all existing knowledge and literature.

Authorship does not matter the collection of knowledge matters.

What happen next? In the early middle ages changes our understanding of authorship changed. Integrity of the Authors Source Code

Something changed meaning of word to read... it was now possible to read in silence...

789 Admonitio Generalis no standards improve aimed specifically at educaiton reading and writing.

Carolingian Minuscurle brought some standards in.
Alcuin of York 798-804

Words are separated use a blank space.
What 0 did for math the space di for reading.

Irish scribes created the fullstop, comma, semicolon
Standards emerged for heights (m) ascenders (b) decenders (g)

Reading went form public act to private act - reader is no longer shared the text with others.

Reading and writing was collaborative and became individual.
Reusable Software is collaborative.
will it become individual?

Readable software needs typography.

If you write scripts they will need maintenance.
If you write readable code they will soar.

Writing reposes, speaking soars
scripta manet verba volat

Programming is literature.
Reading is not performance.

Two gods of literature the reader and writer.
Rewriting of what the author has originally authored.

Moving away from respect to original author when writing became a silent and private act.

Intellectual Property is invented in 1251

So we flip back to authorship...

In antiquity we gave credit to original author because failure to respect honored ancestor.

Post renaissance -> more about legal requirement.

Couple hundred years 40-50% will read can read CODE.

When this happens will the collaborative nature dissipate?
Power of collaboration is essence of what it is about now but it may become a private act.

Symbolic manipulation skill.
Extent to writing skill - literary skill.
We have done this before.

Speaking venacular of that people are talking.

Semiotic agreement about core set of concepts.
Be liberal in what you understand.
Be strict in what in what you are trying to say.

Poetry is obfuscated.

Poetry is set in LINE.
The white space is significant.
Prose it is not.

Come to OSCON for Part III next year.

I had fun at BlogHer I did my first podcast there with Halley (you can see the picture over on Marc's site) It was about 10 min talking about identity in various forms. I wonder when Podtech will put it up?

Yahoo! who hosted the cocktail party and did demo's of Yahoo 360. I got to talk with one of the guys from the company and he raised some issues about identity 2.0 that I had not thought about. The power to enforce the of the EULA (end user license agreement) for a company like Yahoo! is in large part tied to their right to 'terminate' identities when the principles behind them misbehave. It seems key to include them more of the folks working for 'the big guys' in our identity workshop discussions and perhaps particularly policy usability.

Talk about changing identity (if where you work is a part of ones identity) Dana now works for the Yahoo! Berkeley Research and resigned from Google.

Thursady, July 28th doors at 6, program at 7
CIIS, Namaste Hall,3rd Floor
1453 Mission St. San Francisco (2 blocks from Civic Center BART)

With my emerging persona as Identity Woman curated this line up that provides a great opportunity to learn more about some of the latest tools for next generation digital identity.

Light Weight Identity - LID
Johannes Ernst NetMesh Inc. .
Light-Weight Identity(tm)-- LID(tm)-- a new and very simple digital identity protocol that puts users in control of their own digital identities, without reliance on a centralized party and without approval from an "identity provider".

OpenID
Brad Fitzpatrick Six Apart, Ltd.
OpenID, a decentralized identity system, but one that's actually decentralized and doesn't entirely crumble if one company turns evil or goes out of business. An OpenID identity is just a URL.

Sun Single Sign On
Pat Patterson Sun Microsystems
Sun is announcing the intention to open source web single sign-on. This project, called Open Web Single Sign-On, or OpenSSO, gives developers access to the source code to these basic identity services allows them to focus on innovations that solve more urgent problems, such as securely connecting partner networks, ensuring user privacy, and proving compliance.

Opinity, Inc
Ted Cho
Opinity provides open reputation for end users. It is a young start up offering free online reputation management related services so that individuals can authenticate, aggregate, and mobilize their website (eBay, Amazon, etc.) reputations. Opinity also offers reputation management tools so that individuals can monitor, build, and work to enhance their own reputation going forward. Individuals can also review other individuals at the Opinity website.
_______
Planetwork has been hosting monthly networking forums in the Bay Area for the last 3 years. We are a unique network sitting at the nexus of technology use for social and environmental good. To support the monthly forums we invite voluntary donations (in a basket on the food table).

If you would like to join our mailing list to get more information about upcoming events please go to this page and get a planetwork i-name and then set your mail preferences.

Jamie you are the calmest conference organizer I have ever met. Your staff was together and very helpful. Thanks!
Here are the roundup highlights:
Identity Management Market Trends - guitar introduction by Mike Neuenschwander.

Every move of your mouse you make
You'll get a browser cookie for pete's sake
Every username you fake, every federated claim you stake
They'll be watching you

Every night and day
Every online game you play
Everything you say in IM, e-mail, VoIp or some other way
They'll be watching you

Jamie Lewis kicked of the final afternoon with a keynote on user-centric Identity summed up by Dave Kearns with these talking points

*Heady mix of optimists, pessimists, idealists, cynics
*Agendas, governments, commercial interests could subvert the process
*Indicators of the constant tensions virtualization, digital ID create
*The tug of war will continue, and we all have a stake in the outcome
*Demonstrates the relativistic nature of identity, need for
polycentrism

Bob Blakley talked about his Axiom's of Identity - they were quite though provoking and a great addition to the Identity Gang/Workshop conversation.

Dick gave a new and improved lessig style presentation on Identity 2.0 / User Centric Identity.

These two both belong to the "mac" community and gave their presentation on them. I got a lot of comments about my decorated Mac. It is nothing compared to Mary's though.

Identity Workshop on stage. It was great to get a name and face for more of the Identity folks this included Stefan Brands of ID Corner and Scott Blackmer. Who I know was there but didn't meet was David Kerns.
Strangest Job title: Ryan from Sxip - Sales Engineer (huh?)

Best Hospitality Suite themes matching the company:

• Elementalwith their Ice Carved Bar and Earth and Fire graphics on the wall.
• BridgeStream does role based enterprise Identity Management. So they had had Impro Theater (IT) Shakespeare provided by Theater Sports LA (Michelle, Brianand Floyd) where they each played improvised "roles." They were kind enough to do an improvised sonnet about Identity Woman (I was really sad I didn't have a tape recorder ) They also handed out world beach balls for the 'globe theater.'

Talked to Scott Mace a bit on the first hospitality suite evening about podcasting. It is something Identity Woman might start doing.

Phil Windley, Doc Searls and myself worked out more details regarding the Independent Identity Workshop we are pulling together for the fall.

The Spiritual element of what identity is - the unnameable quality was honored with two different Lau Tzu quotes.

Sailing San Diego Bay with Mary Rundle was the closing highlight.

Thanks to all for a great conference! I am looking forward to coming back next year.

Opening - Sermon on Laws

Laws of Planetary Motion
Kim's Laws what happens to Identity if you make stupid or subtle mistakes
Newtons Law - gravity
Why things happen
Introduction - Looking Back Digital Signatures

A while back we decided we needed non-repudiation and did digital signatures by issuing certificates.
We forgot to figure out why do signatures work in the real world.
So, we got how they worked wrong in the technical world.
Having signatures not work is bad looking forward having privacy not work is bad.
Body of Talk
Definition:
Identity is a collection of attributes by which a person or thing is generally recognized or known
Identity Relativity
The Identity of X according to Y: The set of attributes believed by Y to be true of X.
Axiom: Utility
An identity attribute has value if and only if knowing that attribute reduces risk for some party
Reducing one party's risk often creates risks for other parties.
Consequence: Identification is Power
Identity allocates risk.The ability to create or eliminate a risk for another confers power over the other.

Axiom: Contention
Because identity claims allocate risks, they will be disputed.
Identity Attributes

• Commercial Interest - Convenience
• Government Interest - Security
• Individual interest - Privacy

Definition
Privacy: is the ability to lie about yourself and get away with it.

Axiom: Subjectivity
People disagree about one anothers identity attributes
In general, there's now easy way to tell who's right and who's wrong
Axiom: Temporality
The name that can be named is not enduring and unchanging name. All identity attributes change over time.

• Prince -> symbol
• Michael Jackson Black -> Plastified

Axiom: Obscurity
Identity attributes can be

• what you know - you can lie
• what you have - loose / leave
• what you are - alter disguise

Axiom: Publicity
Identity attributes cannot be secret
By definition attributes aren't observable can't be used to use attributes
Axiom: Contextually
Identity is inherently subject to effect of scale.
Brandon Mayfield - guy who did not blow up trains
His finger print matched one at Madrid Bombing (it was not an accurate assertion)
Large databases -> not completely reliable
To scale identity information one needs to collect -- more information

Consequence: Powerlessness
Identity is in they eye of the beholder - subjectivity.

• You can't control what other people think or say about you.
• You can't even know who knows what about you.
• Can control what you tell people but not what people find out

Consequence: Privacy Erosion
Scale requires distinguishing between lots of individuals which requires lots of information.
In a sufficiently large population the commonly agreed to be public attributes will not distinguishing individuals well enough.
So information about sensitive attributes will be collected.

In the UK they are look at putting in scanners (QinetiQ) while entering the subway to detect knives but what about creep in the use of other things identifying tatoos?
People push back against government identification.

Consequence: Due Process
Because identity is subjective, contextually, contention and obscurity and temporality.

IDENTIFICATION REQUIRES DUE PROCESS

But due process undermines the business case for identity. Due process requires transparency. Transparency reveals how identity attributes are collected and synthesized to make judgment. Collection and Synthesis are the only sources of completive value.

They do it because they like costumer intimacy.

Supply and Demand mismatch between favorable and unfavorable information.
Favorable information is easy to get.
The subject is happy to give it to you and the subject is happy to help you authenticate it. Therefore the supply is large and the value is low. But it's worse: Demand is also low! Because favorable information is less likely to reduce another party's risk. Especially the case when the other party has lots of potential customers.

The business case fore identity service provider infringes privacy.

The business of identity service providers is risk reduction withholding adverse information decrease the value of business.
Collecting more adverse information makes more.

Identity and Privacy are Incompatible.
Adverse information has positive identity value but negative privacy value.
Favorable information has zero identity value and zero privacy value.

Fable about MARIA

Recent guatemalan immigration
she has AIDS and she doesn't want anyone to know. The health insurance company wants to know this information because it is a $180,000 not to know this.

]]> http://www.identitywoman.net/catalyst-logic-of-identity-bob-blakley-chief-scientist-ibm/feed 0 http://www.identitywoman.net/catalyst-sso-simple-secure-and-open-dick-on-identity-20#utm_source=feed&utm_medium=feed&utm_campaign=feed http://www.identitywoman.net/catalyst-sso-simple-secure-and-open-dick-on-identity-20#comments Thu, 14 Jul 2005 23:22:16 +0000 Kaliya Hamlin, Identity Woman http://www.identitywoman.net/?p=48 Dick - had a 580 slide deck done Lessig Style
This is a summary of his talk:

We found out about Dick's Identity

We learned a about what Identity is

What I say about me
What other say about me (others trust this)
So,
identity=reputaiton
What others say about you
We learned about Identity Transactions:
Verbal in person (with visual cues)
Talk on phone (loss of visual cues)
Job Application (fill out form)

We learned about data verification using drivers licenses in the real world and how the process reduces Identity Friction.
Identity Transactions are Asymmetrical
There is separation of the acquisition and presentation of credential
The credential is reusable
Trust is social

What is digital identity?

Identity 1.0 Today

Today it is the hassel of filling out the same information again and again.
Basically today authentication is that you get to prove you are an entry in a directory entry. single authority on one credential - not portable - in silo.

Verified digital Identity is not what you give a site today.
e-bay -/-> Craigslist
We have walled gardens

Identity 2.0 is where the user can move it to any site.

Simple and open has a history of winning in new standards look at:

• networking
• e-mail
• web - html

WHAT DOES IT LOOK LIKE?
Identity Credential exchange is transparent transaction that is scalable.

WHO WILL DRIVE THIS?
users? - to many user names and passwords

won't pay - little influence

enterprise? - partners, contracts, agents

but risky to lead... can't get there
Identity 1.5

e-government?

maybe

but localized

Banks?

motivated to solve
theoretical trust relationship

Identity Ecosystem will emerge where

users are loosely coupled
share user identity

We are in a new era

Webservices - Flickr, Mappr, SalesForce

Web 2.0 will drive identity 2.0

It will happen on the edge of the Internet (not the edge of the enterprise).

XRI/XDI no web-service apps

SXIP

name/value pairs
DIGS XML

The goal is to mimic photo ID
With Sxip Network

SXIP 1.0 has had a few tire kickers

SXORE Blog comment spam solution

SXIP 2.0 support web services
SXIP ACCESS
SSO - Simple Secure and Open

Jamie Lewis -
Q: So will this go into a STANDARDS PROCESS?
A: We are working on it. We want to get it very close to right then put it into standards body. I like IETF. Our goal is to be open

Homeland security directive 12
"Policy for Common Identification Standard For Federal Employees and Contractors" - August 2004

HSPD 12 Requirements

1. Secure and reliable forms of personal identification that are:

• Based on sound criteria to verify an individual employee’s identity
• Strongly resistant to fraud, tampering, counterfeiting, and terrorist exploitation
• Rapidly verified electronically
• Issued only by providers whose reliability has been established by an official accreditation process

2. Applicable to all government organizations and contractors except National Security Systems
3. Used for access to federally-controlled facilities and logical access to federally-controlled information systems
4. Flexible in selecting appropriate security level – includes graduated criteria from least secure to most secure
5. Implemented in a manner that protects citizens’ privacy

Expanding Electronic Government

Needing Common Authentication Services for

• 280 million Citizens
• Millions of Businesses
• Thousands of Government Entities
• 10+ Million Federal Civilian and Military Personnel

You can learn more on the GSA website - http://www.gsa.gov/aces

Outer Space (the world around us: science, the natural and built environment, universal systems theory)

Human Space (the human world: our bodies, behavior, minds, human systems theory)

Inner Space (the world below: energy, small tech, computer "bodies", inner systems theory)

Cyber Space (the virtual world: computer "behavior", computer "minds", cyber systems theory)

Hyper Space (the world beyond: new paradigms, phase transitions, hyperphysics, hyper systems theory)

Relationships are the crossing of boundaries between things.
This happens within our selves and between others.
Maintaining right relationship and boundaries between these is what helps energy flow well.

I heard this talk on June 17 at the Cato Institute / The Economist Luncheon LIberty, Technology and Prosperity in San Francisco by Joel Garneau author of Radical Evolution.
Joel's introduction was given by The Economist SF corespondent.
He has five hats the most interesting of those seemed to be a TROLL as in the norse mythological figure who hangs out in the woods and looks after the forest.

He is editor of the Washington Post Style section. Is a scenario planner at the Global Business Network. He also has a consulting firm the Garneau group - with him and his best sources. He also dabbles in Academia.
He has authored three books - The

Nine Nations of North America, Edge City - life on the new frontier and the topic of today's talk Radical Evolution: The Promise and Peril of Enhancing Our Minds, Our Bodies and what it means to be human.

Joel Garneau

We are at turning point in human history because of the fundamental changes in what it means to be human in the next 10-20-30 years. The change in the technologies we are working on today is that they are not focused outward on - fire, cloths,
They are focused inward on us - Modifying our minds, memory, metabolism our kids and what it means to be human.
These changes in science have significant political implications. They are changing VC's have to look at the world.

When I heard this I mentally noted the oddity of it being the next statment. It sort of implied that there was a way in which their decisions had a profound effect on the future - and perhaps they do but should they have this big a power to shape it - how do we discuss and discern about these issues that affect the whole of society?

Their will be changes in cultures and values on our watch in real time. The future is being driven by the curve of accelerated change. How many people have heard of Moores Law - about 1/2 of the audience raised their hands. The data point on this is that normally only 10% of the audience does. We have had 29 doublings of computing since 1959 - that is 40,000,000 times.
This curve did not suddenly start out with the chip. We are in a third sort of evolution of what it means to be human. Darwin and chimps it took 8,000 years to get reading and writing.

Technosis is a great book to understand 'writing' as a technology that profoundly shaped culture.

To give perspective rail roads changed everything they touched and the number of miles of rail road miles was only 14 times.
In 1800 we started the industrial age an example of this curve is that in 1903 we had the first flight and 66 years later we were on the moon.
These changes are exponential and change all of society. This curve that we are riding - I don't see where it levels off.
The limitations are - Quantum Mechanics - The Marketplace - Human ingenuity (he sees no limits to these three)

Finally our willingness to shape culture and values. I am interested in human relationship and love and lies.
WE ARE IN A TIME OF RADICAL EVOLUTION
We are charging the shape of what it is to be human.
Fleet of technology - affect how mind, memory and metabolism works.

I spent a year with DARPA Spent Year with DARPA. They see the week link in the war fighting machine as us - humans themselves. Lets meet the first telekinetic monkey who can move objects through her thoughts.

We hook her on computer games moving a cursor with a joyce stick.
Drill hole in head near motor quartex and put in a mesh of extremely fine Wires that connect with neurons.
See the patterns in the mind when operating the joyce stick
Disconnect the joyce stick.
Just use mind to move the cursor
Hook up robot arm that moves with cursor movements.
WHY????
The defense reason that F22 is difficult to control with joyce stick. If you could control with mind <-> machine connenction. Feeding information into skull real time...blur line between made and born. That is the official reason we are doing this. The real reason is the guy who heads the lab has a daughter with ceribal palsy who can't walk on her own and what if she could control machines with her thoughts that moved he legs? This is a dramatic change in what it means to be human.
The Berry Bonds - steroid controversy - is the tip of the iceberg in terms of what does it mean to be enhanced? - what are the social implications? Should he have an asterix next to his name because he is not the same type of human being as those who's records he broke?
There will be people who are delighted to adopt these advances.
There will be NATURALS who are like todays vegetarians
The REST - for reasons of geography or economics are not enhanced and will envy and despise those who are. THIS HAS POLITICAL CONSEQUENCES.
What is driving this is GRIN - Genetics, Robotics, Information and Nanotechnology.
To be continued...

Finally, the war on spam is shifting to controlling outbound email traffic. This has profound implications for Internet service providers and for their customers. Zombie spambot attacks are being met with responses including blacklisting of users and entire ISPs. At Inbox-IT 2005 in San Jose, Scott Mace spoke with Scott Chasin, CTO of MX Logic, Inc. about efforts from Silicon Valley and Washington D.C. to control the spambots.

How can adoption rates be increased for SPF, Sender ID and DomainKeys? What role will the FTC's recently-released best practices recommendations for outbound email play? What are Port 25 blocking, subscriber reputation filtering, and acceptable use policies? What is the symbiotic relationship between service providers and the enterprise? How are enterprises liable for the spambot traffic they send out? What's the growing distinction between message submission vs. message transfer? What's the role of the IETF's RFC 2476? What is the challenge and opportunity that identity management poses for the messaging industry? Is SMTP broken? What are malicious opt-out attacks?