June 2007 - Research on Security and Identity Management (by Marco Casassa Mont) -

On Identity Information and “Sticky Policies” …

A recent post by Paul Madsen ( Stuck on Band-Aids, 'cause Band-Aids ... ) highlights an “extreme” (and curious) case where user consent and user control is required to deal with “personal information”. Without going for these extreme situations … more...

Published 06-30-2007 4:10 PM by marcocasassamont

Identity = Data + Policies

A few years ago I wrote a HP Labs Technical Report titled “Identity Management: On the "Identity = Data + Policies" Model” , reflecting some R&D work and thinking done at HP Labs. In this paper I was arguing that the current Identity Management model...

Published 06-28-2007 1:21 PM by marcocasassamont

PRIME (Privacy for Identity Management in Europe) Whitepaper v2 available …

The PRIME Whitepaper v2 is now available online : “The EU PRIME project demonstrates the viability of privacy-enhancing identity management. By this we mean identity management solutions that manage the individual's online identity and that also empower...

Published 06-27-2007 12:46 PM by marcocasassamont

Known Unknowns: OpenId, InfoCard/CardSpace, Liberty Alliance ID-FF/SAML, …

Many attempts have been made to compare emerging “solutions” for web single-sign-on, federation and exchange of identity attributes: OpenId, InfoCard/CardSpace, Liberty Alliance ID-FF/SAML, etc. However, most of these comparisons (including recent posts...

Published 06-25-2007 6:34 PM by marcocasassamont

HP Identity Center

HP has recently announced the creation of the “ HP Identity Center ”: “HP Identity Center helps you to optimise and automate the management of people, processes, security and compliance. HP Identity Center is a comprehensive identity and access management...

Published 06-23-2007 8:07 AM by marcocasassamont

The European e-Identity Conference 2007: Presentations available online …

A few relevant/interesting tracks (with presentations available online): Security issues in social networking Security issues in reputation systems Authentication, Interoperability e-ID/Government Schemas Industry & Standards IdM related aspects http...

Published 06-22-2007 8:09 AM by marcocasassamont

HIPAA Audit and “Shock Waves” on Health Care IT …

A recent ComputerWorld article discusses the outcome of an audit of a US Hospital and the implications this might have in the Health Care industry: “An audit of Atlanta’s Piedmont Hospital that was quietly initiated by the U.S. Department of Health and...

Published 06-20-2007 9:14 AM by marcocasassamont

Concordia Project Workshop: on Interoperability and Harmonization of Different Identity Standards and Protocols ...

I’d like to bring to your attention the upcoming Concordia Project Workshop (June 26, San Francisco, Burton Catalyst pre-conference session 2007): “This workshop is aimed at defining and understanding deployer needs with regards to interoperability and...

Published 06-19-2007 3:34 AM by marcocasassamont

Policy 2007

I am just back from IEEE Policy 2007 (Bologna, Italy, 13-15 June 2007). It has been a very interesting workshop where various aspects of policies and policy management have been discussed along with their implications for IT, identity management, access...

Published 06-19-2007 3:19 AM by marcocasassamont

Privacy Management: A Reality Check …

Ben Laurie and Kim Cameron have been recently posting on their respective blogs ( links.org , identityblog.org ) about potential violations of identity laws, related privacy issues (on linkability), etc. This discussion was triggered in the context of...

Published 06-05-2007 7:27 AM by marcocasassamont

June 2007 - Research on Security and Identity Management (by Marco Casassa Mont)

Syndication

Recent Posts

Tags

Blogroll

Archives