do it. think it. blog it! ... a twisted world

« Ja... Va... | Main | JavaCard Reader... »

Friday Jan 18, 2008

DE-Federated Identity Access (DEAF)

Identity Management, and Identity Federation has been the buzzword in this space for a while now. According to the definition of "Federated Identity" on wikipedia, it has two general meanings:
  • The virtual reunion, or assembled identity of a person's user information (or principal), stored across multiple distinct identity management systems. Data is joined together by use of the common token, usually the user name.
  • The process of a user's authentication across multiple IT systems or even organisations.
now, this is great when the Legal Entity has a unique "identity" on each of the disparate systems. But when the Legal Entity who has a identity on a system is provided access to a partner site or system, there is absolutely no "Federation" possible if the Legal Entity has no identity on the partner site or system. I was involved in a brainstorming session related to shibboleth with a few technical folks from a university. What came up was the need to allow students from one university to access resources from another university. The folks I was interacting with were "sold" on the idea of federation, but lacked complete understanding of how federation really worked. Here were my concerns:
  • The user needed to have a unique identity on either systems.
  • The user needs to explicitly "federate" his identity. (If he does have a unique identity on each system)
  • If the users identity gets stolen, well, we have a much bigger issue.
(I thought) What the university really needed was implicit Federation. Whereby when a user who has authenticated himself at one university, when provided access to resources in another, should be granted access even thought the user does not have a unique identity at the other. Here's an example:
  1. University1 and University2 belong to a "defined" Circle of Trust.
  2. Student at University1 authenticates at University1.
  3. Student tries to access resources at University2.
  4. University2 Requests University1 to assert the validity of the user session.
  5. University1 Asserts that the user is "A" authenticated user, but does not actually reveal the users "handle" or "identity" in any form
  6. University2 grants the user access by just knowing that the user is a "authenticated" user at University1, without even knowing who the user actually is. (University2 provides just generic content to the user)
  7. User tries to personalize his "content" or University2 needs to provide the User "specific" content based on role the student has at University1
    • University2 would need to prompt the user for "permissions" to derive his "role" from UnIversity1
    • User grants permissions by using a digital signature of some sort.
    • University2 uses that digital signature to request University1 for the Users roles
    • University1 verifies that the digital signature matches that of the Authenticated User and grants University2 the users roles and/or "identity/alias".
    • University2 provisions a local "identity/alias" and associates it with the "role" as asserted by University1
  8. University2 can now allow the user to "personalize "content" or provide the user "content" as necessary.
I believe that with this aproach, even though a student has no "identity" on one system or university (University2 in the example I used) he/She still gets to experience the "magic" of "federation". On second thoughts, If I apply this to the examples widely used in "federation", where a airliner and a car rental company are in a circle of trust, well, I am sure that the car rental company would love to receive a new unidentified user from a "partner airline" and dynamically provision the user and sell him a product !!! it's all about making money in the bargain right ? or is it just making the user experience more enjoyable and easy ? I believe that we'd be kidding ourselves if we say that it's ONLY about "user experience" Now: The user providing his/her "digital signature" to the car rental company is another story altogether.. ;-) Comment Away Please... (Comments are active for only 30 days from the date of this posting) UPDATE : Please Read Pat Patterson's response by Clicking Here or by following the link in the 1st Comment/Trackback below.

Posted at 12:17AM Jan 18, 2008 by Rohan Pinto in Identity Management | Comments[34] | Permalink

Comments:

[Trackback] Rohan Pinto has posted an entry today entitled ' DE-Federated Identity Access (DEAF) '. This is an interesting post, but Rohan picks up a misconception from Wikipedia, and perpetuates it. I'll step through Rohan's post here: (sorry, Rohan - I copied a...

Posted by Superpatterns on September 22, 2005 at 01:25 PM EDT #

<p>Thanks for your useful info, I think it’s a good topic. So i"d like to share with you,would you like the info about the <br>
<br>
<a href="http://www.lovingorder.com/ugg-casuals-shoes-men-casuals-shoes-c-23_25.html" target="_blank">UGG Men Casuals shoes </a><br>
<a href="http://www.lovingorder.com/ugg-casuals-shoes-women-casuals-shoes-c-23_24.html" target="_blank">UGG Women Casuals shoes</a>
<p><a href="http://www.lovingorder.com/ugg-classic-short-shoes-c-1.html" target="_blank">UGG Classic Short shoes</a><br>
<a href="http://www.lovingorder.com/ugg-classic-cardy-shoes-c-2.html" target="_blank">UGG Classic Cardy shoes</a><br>
<a href="http://www.lovingorder.com/ugg-classic-crochet-shoes-c-9.html" target="_blank">UGG Classic Crochet shoes</a>
<p><br>
http://www.lovingorder.com

Posted by candy on June 01, 2009 at 01:38 PM EDT #

<p>Thanks for your useful info, I think it’s a good topic. So i"d like to share with you,would you like the info about the <br>
<br>
<a href="http://www.myuggsky.com/ugg-casuals-shoes-men-casuals-shoes-c-23_25.html" target="_blank">UGG Men Casuals shoes </a><br>
<a href="http://www.myuggsky.com/ugg-casuals-shoes-women-casuals-shoes-c-23_24.html" target="_blank">UGG Women Casuals shoes</a>
<p><a href="http://www.myuggsky.com/ugg-classic-short-shoes-c-1.html" target="_blank">UGG Classic Short shoes</a><br>
<a href="http://www.myuggsky.com/ugg-classic-cardy-shoes-c-2.html" target="_blank">UGG Classic Cardy shoes</a><br>
<a href="http://www.myuggsky.com/ugg-classic-crochet-shoes-c-9.html" target="_blank">UGG Classic Crochet shoes</a>
<p><br>
http://www.myuggsky.com

Posted by kitty on June 01, 2009 at 01:39 PM EDT #

<p>Thanks for your useful info, I think it’s a good topic. So would you like the info about the <br>
<br>
<a href="http://www.myuggsky.com/ugg-casuals-shoes-men-casuals-shoes-c-23_25.html" target="_blank">UGG Men Casuals shoes </a><br>
<a href="http://www.myuggsky.com/ugg-casuals-shoes-women-casuals-shoes-c-23_24.html" target="_blank">UGG Women Casuals shoes</a>
<p><a href="http://www.myuggsky.com/ugg-classic-short-shoes-c-1.html" target="_blank">UGG Classic Short shoes</a><br>
<a href="http://www.myuggsky.com/ugg-classic-cardy-shoes-c-2.html" target="_blank">UGG Classic Cardy shoes</a><br>
<a href="http://www.myuggsky.com/ugg-classic-crochet-shoes-c-9.html" target="_blank">UGG Classic Crochet shoes</a>
<p><br>
http://www.myuggsky.com

Posted by candy on June 03, 2009 at 08:59 AM EDT #

<p>Thanks for your useful info, I think it’s a good topic. So would you like the info about the <br>
<br>
<a href="http://www.lovingorder.com/ugg-casuals-shoes-men-casuals-shoes-c-23_25.html" target="_blank">UGG Men Casuals shoes </a><br>
<a href="http://www.lovingorder.com/ugg-casuals-shoes-women-casuals-shoes-c-23_24.html" target="_blank">UGG Women Casuals shoes</a>
<p><a href="http://www.lovingorder.com/ugg-classic-short-shoes-c-1.html" target="_blank">UGG Classic Short shoes</a><br>
<a href="http://www.lovingorder.com/ugg-classic-cardy-shoes-c-2.html" target="_blank">UGG Classic Cardy shoes</a><br>
<a href="http://www.lovingorder.com/ugg-classic-crochet-shoes-c-9.html" target="_blank">UGG Classic Crochet shoes</a>
<p><br>
http://www.lovingorder.com

Posted by candy on June 03, 2009 at 09:00 AM EDT #

<p>Thanks for your useful info, I think it’s a good topic. So would you like the info about the <br>
<br>
<a href="http://www.ugginter.com/ugg-casuals-shoes-men-casuals-shoes-c-23_25.html" target="_blank">UGG Men Casuals shoes </a><br>
<a href="http://www.ugginter.com/ugg-casuals-shoes-women-casuals-shoes-c-23_24.html" target="_blank">UGG Women Casuals shoes</a>
<p><a href="http://www.ugginter.com/ugg-classic-short-shoes-c-1.html" target="_blank">UGG Classic Short shoes</a><br>
<a href="http://www.ugginter.com/ugg-classic-cardy-shoes-c-2.html" target="_blank">UGG Classic Cardy shoes</a><br>
<a href="http://www.ugginter.com/ugg-classic-crochet-shoes-c-9.html" target="_blank">UGG Classic Crochet shoes</a>
<p><br>
http://www.ugginter.com

Posted by candy on June 03, 2009 at 09:01 AM EDT #

Hi! 2009 new Timberland Boots(http://www.timberlandsale.co.uk) are hot in selling! Come to our online Timberland Boots(http://www.timberlandoutdoor.com) and Timberland Shoes(http://www.thetimberland.co.uk) store, you will find Timberland Shoes(http://www.timberlandbootonline.com) are precisely you are longing for even in dreams.

Posted by Helen Lee on September 17, 2009 at 03:42 AM EDT #

buy cheap nokia n95 experience without nokia mobile learning is better than learning without excperi-ence. I have nokia 6300 but one lamp wait which my feet are guided; and that bose headphones is the lamp of experience. I know of no way of judging of the future but by the apple touch past. http://www.leadsoftstore.com/

Posted by GHD Straighteners on September 22, 2009 at 10:43 AM EDT #

http://www.uggca.com : ugg boots sale the UGG Classic short,ugg classic tall,ugg classic mini,ugg ultra tall ,ugg sundance,ugg sundance boots,ugg cardy,ugg cardy boots,ugg classic cardy,ugg boots

Posted by ugg boots sale,ugg boots,ugg classic mini on October 05, 2009 at 12:44 PM EDT #

http://www.fbib2b.com : Sale the nike air max 90,nike air force one,nike dunk SB,high dunk sb,mens gucci shoes,ugg classic cardy,gucci boots sale ,LV boots sale.

Posted by nike air max 90,nike air force one,high dunk sb on October 05, 2009 at 12:46 PM EDT #

http://www.b2bec21.com : nike air max 90,air max shoes,nike air max,Nike air force one,NBA shoes,NBA basketball shoes,Nike Shox shoes,nike airforce boots,ugg nightfall,ugg cardy boots,ugg boots, High dunk sb,nike dunk sb.

Posted by nike air max 90,nike air force one,nike dunk sb on October 05, 2009 at 12:47 PM EDT #

http://www.mytobling.com/

Posted by UGG BOOTS on October 12, 2009 at 12:42 PM EDT #

<p>Your blog is one of the best I've ever seen,thanks.</p>
<p>Get your <a href="http://www.ilovepuma.com/menspumafuturecatgtferrari-c-296.html/">Men's Puma Future Cat GT Ferrari</a>, good design and products for you,we show you <a href="http://www.ilovepuma.com/menspumafluxionii-c-295.html/">Men's Puma Fluxion II </a>,<a href="http://www.ilovepuma.com/menspumaspeedcatbig-c-302.html/">Men's Puma Speed Cat Big</a> ,<a href="http://www.ilovepuma.com/womenspumabayleefuturecat-c-307.html/">Women's Puma Baylee Future Cat </a>,and more <a href="http://www.ilovepuma.com/">cheap puma shoes</a> on <a href="http://www.ilovepuma.com/">www.ilovepuma.com</a>. </p>

Posted by love puma choose cheap pumas on October 19, 2009 at 01:14 AM EDT #

<p>nice tips.</p>
<p>welcome to best puma online:<a href="http://www.ilovepuma.com/">www.ilovepuma.com</a> ,</p>
<p><a href="http://www.ilovepuma.com/">cheap puma shoes</a> you could choose</p>
<p><a href="http://www.ilovepuma.com/menspumafuturecatloengine-c-298.html/">Men's Puma Future Cat Lo Engine </a></p>
<p><a href="http://www.ilovepuma.com/womenspumafuturecatloinblackredwhite-p-10925.html/">Women's Puma Future Cat</a> </p>
<p><a href="http://www.ilovepuma.com/womenspumaspeedcatbig-c-315.html/">Women's Puma Speed Cat Big</a> </p>

Posted by cheap puma from the best online on October 19, 2009 at 01:15 AM EDT #

<p><a href="http://www.pumahots.com/">Puma men shoes</a>, <a href="http://www.pumahots.com/">puma women shoes</a>, get all kinds of<a
href="http://www.pumahots.com/"> puma shoes</a> from <a href="http://www.pumahots.com/">www.pumahots.com</a>! All the cheap puma shoes, such as <a href="http://www.pumahots.com/menspumaspeedcat-c-302.html">Men's Puma Speed Cat</a> ,<a href="http://www.pumahots.com/womenspumadriftcat-c-310.html">Women's Puma Drift Cat</a>, are the top quality shoes!</p>

Posted by authentic puma shoes with free shipping on October 19, 2009 at 01:15 AM EDT #

<p>Your tips is great!</p>
<p><span class="STYLE2"><a href="http://cosyugg.com/">ugg boot on sale</a><br />
<a href="http://cosyugg.com/">cheap ugg boots</a> <br />
<a href="http://www.cosyugg.com/ugg-classic-cardy-boots-c-45.html">ugg classic cardy</a><br />
<a href="http://www.cosyugg.com/ugg-classic-cardy-boots-c-45.html">cardy ugg boots</a></span></p>
<p><a href="http://cosyugg.com/">www.cosyugg.com</a></p>
<p><a href="http://www.cosyugg.com/ugg-classic-tall-boots-c-49.html/">UGG Classic Tall boots</a><br />
</p>

Posted by cheap ugg boots on sale on October 19, 2009 at 01:16 AM EDT #

<p>It's great!</p>
<p>Good news for you ,we get more new style ugg boots for you ,<a href="http://www.cosyugg.com/ugg-classic-mini-boots-c-142.html/">UGG Classic Mini Boots</a> ,<a href="http://www.cosyugg.com/ugg-classic-tall-boots-c-143.html/">UGG Classic Tall Boots</a> ,<a href="http://www.cosyugg.com/ugg-classic-short-boots-c-139.html/">UGG Classic Short Boots</a>etc all style ugg boots are discount. <a href="http://www.cosyugg.com/">Cheap uggs boots on sale</a>,welcome to <a href="http://www.cosyugg.com/">www.cosyugg.com</a> to choose! </p>

Posted by cheap ugg boots on October 19, 2009 at 01:16 AM EDT #

nice of you! </p>
<p>Serach for your <a href="http://www.onlinepretty.com">discount nike shoes</a>? search for your nike <a href="http://www.onlinepretty.com/nba-star-michael-jordan-shoes-c-437.html">air jordan shoes</a>? Onlinepretty,Inc provide you <a href="http://www.onlinepretty.com/nba-star-lebron-james-shoes-c-428.html">Lebron James nike Shoes</a>, <a href="http://www.onlinepretty.com/nba-star-kobe-bryant-shoes-c-427.html">Kobe Bryant Nike Shoes</a> ,<a href="http://www.onlinepretty.com/nba-dwight-howard-basketball-shoes-white-and-blue-p-14907.html">Dwight Howard Shoes</a> and so on. Good quality <a href="http://www.onlinepretty.com/nba-star-michael-jordan-shoes-c-437.html">nike sneakers</a> also means <a href="http://www.onlinepretty.com/nba-star-michael-jordan-shoes-c-437.html">cheap nike shoes</a>.

Posted by nike basketball shoes on October 19, 2009 at 01:16 AM EDT #

<p>Good article!</p>
<p>You love sports shoes ,welcome to <a href="http://www.fineshox.com/">www.fineshox.com</a> ,you could see <a href="http://www.fineshox.com/">men nike shoes and nike shoes women</a> ,all products like <a href="http://www.fineshox.com/nikemensshoxshoesdreams-c-759.html/">Nike Mens Shox Shoes Dreams</a>, <a href="http://www.fineshox.com/nikeshoxshoesmonster-c-761.html/">Nike Shox Shoes Monster</a> , <a href="http://www.fineshox.com/nikeshoxshoesnz-c-772.html">Nike Shox Shoes NZ</a> and more cool <a href="http://www.fineshox.com/">nike shox shoes</a> you could choose . </p>

Posted by nike shox with all fine products on October 19, 2009 at 01:17 AM EDT #

<p>It's cool.</p>
<p>Search for <a href="http://www.uggfeel.com/">ugg boots on line</a> , we show you <a href="http://www.uggfeel.com/">cheap ugg boots</a> like <a href="http://www.uggfeel.com/ugg-classic-mini-c-32.html/">UGG Classic Mini</a> ,<a href="http://www.uggfeel.com/ugg-classic-cardy-c-30.html/">Classic Cardy boots</a> ,<a href="http://www.uggfeel.com/ugg-bailey-button-boots-c-48.html/">UGG Bailey Button Boots</a>etc and more <a href="http://www.uggfeel.com/">discount ugg boots</a> , you could choose your ugg boots on <a href="http://www.uggfeel.com/">www.uggfeel.com</a> </p>

Posted by discount ugg boots on October 19, 2009 at 01:18 AM EDT #

<p>Just wanted to say great job with the blog, today is my first visit here and I’ve enjoyed reading your posts so far<br /><A href="http://www.mytobling.com/ugg-classic-crochet-c-27.html">UGG Classic Mini Boots</A></p>

Posted by ugg on October 27, 2009 at 09:18 AM EDT #

<a href="http://www.mytobling.com/ugg-australia-boots-ultra-short-5225-in-black-p-1422.html">UGG Australia Boots Ultra Short 5225 in Black</a>

Posted by lake on October 27, 2009 at 10:28 PM EDT #

<a href="http://www.mytobling.com/ugg-australia-boots-ultra-short-5225-in-black-p-1422.html">UGG Australia Boots Ultra Short 5225 in Black</a>

Posted by kdej on October 27, 2009 at 11:07 PM EDT #

<a href="http://www.mytobling.com/ugg-australia-boots-ultra-short-5225-in-black-p-1422.html">UGG Australia Boots Ultra Short 5225 in Black</a>

Posted by kdje on October 27, 2009 at 11:14 PM EDT #

the leader
<a href="http://www.airjordancity.com">cheap jordan shoes</a> of music and dressing, but in the eyes of her twelve-year old daughter, she
<a href="http://www.airjordancity.com">michael jordan shoes</a> is "so vulgar that always wear tacky sportswear". And these "tasteless
<a href="http://www.airjordancity.com">jordan shoes</a> sportswear" are actually from the widely welcomed brand Ed hardy which is the favorite of

Posted by air jordan shoes on November 01, 2009 at 09:51 PM EST #

<p>Good work, thanks! My sister received the <strong><a href="http://www.goodmbt.com/">Mbt Health shoes</a></strong> I bought her for her birthday, she adores them. I was a little worried the calf would be tight around her legs but it hasn’t been a problem. I’ll be back before Christmas.</p>

Posted by mbt shoes sale on November 06, 2009 at 01:22 AM EST #

<p>Just wanted to say great job with the blog, today is my first visit here and I’ve enjoyed reading your posts so far<br />
<a href="http://www.topmuks.com">Mukluk boots </a>

Posted by Mukluk boots on November 06, 2009 at 01:22 AM EST #

Hey, i am very happy today, I received my <a href="http://www.goodmbt.com/">Mbt shoes</a> just now, very impressed. They are like sort of a massive slipper, soft, easy to wear and light.

Posted by mbt shoes sale on November 06, 2009 at 01:22 AM EST #

<p>Everything dynamic and very positively!<br />
<a href="http://www.goodairmax.com">NIKE </a></p>

Posted by NIKE on November 06, 2009 at 01:22 AM EST #

<p>There is nothing that touches these for just lazing around at home. Bar sleeping I don’t take mine off now that its getting colder, they are not quite as stiff as they were when they first arrived but still extremely comfortable. It would be nice if they had a little more arch support but other than that I’m very pleased. I am finding a nice <a href="http://www.goodmbt.com/">mbt shoes sale</a>!</p>

Posted by mbt shoes sale on November 06, 2009 at 01:22 AM EST #

<p>Only One word to characterize such a great post “WOW” that was a very interesting read <a href="http://www.allofadidas.com">Adidas </a></p>

Posted by Adidas on November 06, 2009 at 01:23 AM EST #

<a href="http://www.onuggshoes.com/">ugg new style</a>
<a href="http://www.openugg.com/">ugg new style</a>
<a href="http://www.uggshoesuk.com/">ugg classic lall</a>
<a href="http://www.theuggwholesale.com/">uggs on sale</a>

Posted by uggboots on November 06, 2009 at 02:09 AM EST #

Post a Comment:
  • HTML Syntax: NOT allowed

About This Weblog

Author: Rohan Pinto

Archives

« November 2009
SunMonTueWedThuFriSat
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
     
       
Today

Feeds

Search

Currently Surfing

My Bookmarks

Other Blog Links

Today's Page Hits: 454