Updated: 23.6.2002; 12:30:36 GMT.

Security weblog



daily link  Saturday, May 11, 2002

Paper: Enterprise Identity And Access Management

Business has always been about creating relationships with various communities and it is widely appreciated that that customer relationships are one of the most valuable asset in business. Character of relationships has, however, changed.

First, the relationships span beyond the enterprise boundary and form the basis of extended business processes that connect the enterprise with the wider business ecosystem. Second, their nature is becoming more dynamic and often of an ad-hoc character, which reflects the nature of dynamic business models. Thus to be successful, businesses today must maintain a network of dynamic relationships between customer, supplier, partner and employee communities. Third, the number of relationships is much bigger than anytime in the past.

Since these changes are being enabled by technology, IT infrastructure to support these requirements is an important factor for execution of business strategy.

  10:47:44 PM  permalink  
Identification As A Means To An End

"The computer industry's *big question* today is "how do we de-centralize applications without losing control of security and privacy?" and the related question of "how can we manage the exponentially growing complexity of computer systems and software as our user base roams beyond the firewall?"

What is becoming clear is that the answer lies in Identity-Centric computing, and the design and build-out of a Digital Identity Infrastructure. Once again existing dominant companies are panicked and some will die while the answer is sorted out. And once again, new un-heard of companies will develop dominant positions around dealing with these questions." [DIW]

I agree and at the same time I don't agree. I agree that identity infrastructure is the necessary condition for the decentralisation to work and as such it will be the criteria to sort out future winners. This, however, applies only to infrastructure. And that's the problem. People do not pay for the infrastructure, they pay to get their job done or to get it done better.

People do not buy infrastructure, they buy applications.

And digital identity infrastructure is an infrastructure, infrastructure to ship identificators and some personal meta-data. In this respect, client-server, peer to peer or identity-based are all the same - without meaningful applications they are useless. They may be important for IT-minded people such as me or Phil, but it is good not to forget that all of them are a means to an end, not the end itself.

Therefore, I would say that talking about move from "The Application is Center" to "Identity is Center" is a bit audacious.

  8:29:36 PM  permalink  

Andre is contemplating reputation as a part of one's identity:

"While reputations have historically been somewhat vague and subjective, in the digital world they are likely to become more objective, binary and long-lasting (all the more reason to take them seriously). Biologically, time is a built-in eraser, allowing us to forget and move on. In the digital world however, where memory is cheap and caching the norm, our reputations are likely to become more persistent, at least in the areas in which the law has not intervened (e.g. driving tickets are erased every three years and bad credit every seven).

Probably more important, in the digital world, our various reputations which are today disconnected are likely to become more connected. If not by us, then by others. "

Unlike in the physical world, cyberspace is currently designed in such a manner that our trails (what we say and what others say about us) don't wash away during the time. That has several implications some of which are that digital world is much more unforgiving to the mistakes and its inhabitants and visitors have broad opporunities to nose into our private space.

This could be resolved by using anonymous, pseudonymous identification or time-triggered destruction of data where appropriate. Unfortunately, these solutions are this is an issue that is technically hard and are awfully political.

  7:42:25 PM  permalink  

Loads of links at the Digitlidworld's Eric Norlin's weblog.  10:17:40 AM  permalink  

"Quadrasis, a business unit of Hitachi, introduced a developer tool for building SAML support into connectors that work with its Security Unifier. The product is similar to enterprise application integration software in that it provides a routing and transformation hub and a set of connectors that allow disparate security systems such as authentication systems, single sign-on software and encryption products to work together."

[NWFusion through DI]

  10:08:54 AM  permalink  

 
May 2002
Sun Mon Tue Wed Thu Fri Sat
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 31  
Apr   Jun

Misc

About
Reading list
Resources
Contact me

News

SANS NewsBites
Crypto-gram
UKCrypto
Information Security
all.net
Objectwatch
CBDi Forum

Channels

Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Better Living Through Software (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Content Wire - Digital Copyright (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. DeveloperWorks.com - Security Articles (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Dictionary.com Word of the Day (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Digital Identity (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Digital Identity World (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Financial Applications Security Weblog (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Joel on Software (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Jon's Radio (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Line56: B2B News (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. O'Reilly Network ONJava.com (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Onlineblog.com - Guardian Online's weblog (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. RISKS Digest (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Scripting News (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. SecurityFocus (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Web Services Architect (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. WebServices.Org (rss)
Radio UserLand users: click to subscribe. Other folks: use the RSS link to acquire this channel. Wired News (rss)




jenett.radio.simplicity.1.3R
Radio Userland


Copyright 2002 © Jiri Ludvik.
Last update: 23.6.2002; 12:30:36.