Archive for March, 2010 Authenware Joins Openid Foundation
Total Page:16
File Type:pdf, Size:1020Kb
Archive for March, 2010 Authenware Joins OpenID Foundation Posted at 4:44 pm on March 12, 2010 by jfe Authenware today announced its membership in the OpenID Foundation – an industry organization aimed at protecting identities and intellectual property through the bolstering online security. Through its membership, Authenware becomes part of a community of IT powerhouses that seeks to collectively build awareness of the emerging digital security pandemic. “The exploitation of security vulnerabilities creates a major obstacle for the expansion of the Internet as a trusted vehicle for communication and commerce,” said Tom Helou, president of Authenware. “For such a reason, we sought membership within the OpenID Foundation and are proud to partner with a broad spectrum of online leaders who share our values of security, privacy and strong identification.” This entry was posted on Friday, March 12th, 2010 at 4:44 pm and is filed under News, Press Releases. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site. theSocialWeb.tv on the launch of the Open Identity Exchange Posted at 11:48 am on March 9, 2010 by Chris Messina theSocialWeb.tv visits Citizen Space in San Francisco during the RSA Conference to sit down with Don Thibeau of the OpenID Foundation and Drummond Reed of the Information Card Foundation to discuss the launch of the Open Identity Exchange, the result of a year-long collaboration between the two foundations. John McCrea and Chris Messina dive into the details of this announcement and what it means for the social web. From openid.net/2010/03/ 1 25 November 2010 You can also download the video to watch it later. Tags: Don Thibeau, drummond reed, information card foundation, oix, Open Identity Exchange This entry was posted on Tuesday, March 9th, 2010 at 11:48 am and is filed under News. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site. NTT docomo is now an OpenID Provider Posted at 8:35 am on by Nat Sakimura The largest mobile operator in Japan, NTT docomo, which covers approximately 50% of Japanese population, started offering OpenID authentication on March 9. Every docomo user has an identifier called i-modeID. Using this, users can single sign-on to mobile sites using docomo handsets, making one-click payment and other authenticated actions. These kind of features fueled the great success of mobile commerce in Japan. However, this success has not been extended to the non-docomo handset world of the PC. For the PC, docomo offered a separate identifier called “docomo ID”. As it remained independent of “i-modeID”, it did not enjoy the same kind of popularity. This situation was remedied today by linking the two different identity systems with OpenID. As of today, a user can login to a site using “docomo ID” as an OpenID, then the site can obtain “i-mode ID” that is linked to the “docomo ID” transparently. It is expected that the payment on the PC sites through “i-mode payment service” would accelerate content sales through PC. Some technical idiosyncrasies NTT docomo published the docomoID Authentication Technical Specification on their web site. As an OP Identifier, one should specify “https://i.mydocomo.com/“. As a normal claimed identifier, one should specify “https://i.mydocomo.com/id/{user_unique_identifier}” where {user_unique_identifier}” is a random alpha-numeric string that is unique to the user-realm pair. One peculiar feature of docomo’s implementation is that, to provide “i-mode ID” to the content providers, content providers should call a very simple GET API after they obtained the OpenID Assertion. The decision seems to have been made to avoid the transmission of i-mode ID through browsers, which may act as a man-in-the-middle attack point as users’ PC environment is not particularly safe. Using OAuth for this purpose seems to have been an option, but docomo seems to have decided that requiring it on top of OpenID to the content providers seemed to be a little too demanding. Thus, they devised this extremely simple API. Together with it, docomo also From openid.net/2010/03/ 2 25 November 2010 defined a kind of contact service API, which allows the content providers to send mail [*1] to the user’s mobile phone without sharing the mail address. According to their official page, there are 55,692,500 docomo subscribers as of February, 2010. Japan’s population over 15 as of Feb. 1, 2010 is 110,470,000. [*1] Currently, this “contact service” is currently limited to send a mobile site URL Tags: adoption, japan, mobile, nttdocomo This entry was posted on Tuesday, March 9th, 2010 at 8:35 am and is filed under Case Studies, News. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site. Government of Japan started accepting OpenID Posted at 5:09 am on by Nat Sakimura Ministry of Economy, Trade and Industry of Japan (METI) launched a site called “IdeaBox“, which solicits ideas for IT Policy widely. At the site, people can propose, discuss, and vote on policies. METI positions it as a network- based committee which is open to public. A similar site was operated last year from October to November and attracted over 1700 policy idea. This version of IdeaBox, launched Feb 23, accepts OpenID so that one can login with the account from mixi, Yahoo! Japan, Livedoor and Google. It has various other social components so that one can also tweet about it directly from the site, bookmark it on delicous and hatena bookmark, etc. This initiative will run through March 15. Site Address: http://open-meti.go.jp/ From openid.net/2010/03/ 3 25 November 2010 Tags: japan This entry was posted on Tuesday, March 9th, 2010 at 5:09 am and is filed under Case Studies, News, government. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site. Open Identity Exchange Commences Open Government Pilot National Institutes of Health Posted at 7:01 am on March 3, 2010 by jfe Washington, D.C. — March 3, 2010 —The Open Identity Exchange (OIX) www.openidentityexchange.org, a non-profit organization dedicated to supporting an Internet- scale trust ecosystem, announced today it will commence work on an open government pilot under the requirements set forth by the ICAM Trust Framework Adoption Process (TFAP) established by U.S. General Services Administration (GSA). The National Institutes of Health (NIH) will serve as lead agency using open identity technologies to support a number of services, including customized library searches, access to training resources, registration for conferences, and use of medical research wikis, with strong privacy protections, all designed to ensure accessible and transparent communication between the government agency and U.S. citizens. The OIX has been certified by the GSA as a Trust Framework Provider. This permits the OIX to issue certifications to Identity Providers who choose assessors and certification models, including the audited self-certification model championed by the OpenID Foundation. As lead government agency, the NIH is ready to move into production status with OpenID credentials for existing, pilot-status and future applications using NIH Login (now known as iTrust/NIH). From openid.net/2010/03/ 4 25 November 2010 “The NIH has played a critical role pioneering the use of open identity standards for open government,” said Don Thibeau, chair of the OIX. “We want to acknowledge the critical role the agency has played as a pioneer in the government’s use of open identity standards. The impact of the NIH iTrust pilots is reflected not only in the formation of Open Identity Exchange in the marketplace but also in the groundbreaking leadership NIH has demonstrated in new public sector applications.” “This pilot supports and illustrates the value of the President’s open government initiative. We believe deeply in using electronic identity technologies to enable communication between government entities and citizens,” said Dr. Peter Alterman, Senior Advisor to the NIH Chief Information Officer for Strategic Initiatives. “By doing so, we are sending a strong message to citizens that we care deeply about their security and privacy.” This entry was posted on Wednesday, March 3rd, 2010 at 7:01 am and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site. Open Identity Exchange Launches at RSA Posted at 6:56 am on by jfe Washington, D.C. and San Francisco — March 3, 2010 — Industry leaders Google, PayPal, Equifax, VeriSign, Verizon, CA, and Booz Allen Hamilton today announced at the RSA Conference 2010 the formation of the Open Identity Exchange (OIX) www.openidentityexchange.org, a non-profit organization dedicated to building trust in the exchange of online identity credentials across public and private sectors. With initial grants from the OpenID Foundation (OIDF) and Information Card Foundation (ICF), OIX has been approved as a trust framework provider by the United States Government to certify online identity management providers to U.S. federal standards for identity assurance. Trust frameworks are a new way for one site to trust the identity, security, and privacy assurances from another site (the “identity provider”) acting on behalf of a user. Google, Paypal, and Equifax are the first three identity providers certified by OIX to issue digital identity credentials that will be accepted for privacy-protected registration and login at U.S.