The document discusses user-centric identity and managing identity for accessing online resources and services. It explores questions around the roles of institutions and service providers in verifying and managing user identity. While OpenID can play an important role in allowing users to manage their own digital identity, challenges remain around balancing user control with institutional responsibilities. JISC is undertaking various projects to review identity management approaches and technologies.

1. OpenID and User-Centric Identity: It’s All About Me
Nicole Harris, JISC Executive
Joint Information Systems Committee

2. An Apology
Today, I will be saying very little about OpenID
Joint Information Systems Committee

3. What are we talking about?
Identity 2.0??
Joint Information Systems Committee

4. “in Identity 2.0, usage of identity more closely resembles today's offline
identity systems, but with the advantages of a digital medium. As with a
driver's license, the issuer provides the user with a certified document
containing claims. The user can then choose to show this information
when the situation requires.”
Burton Group
Joint Information Systems Committee

5. What are we talking about?
The multiple identity problem?
Joint Information Systems Committee

6. Multiple Identities
Joint Information Systems Committee

7. Joint Information Systems Committee

8. Joint Information Systems Committee

9. Joint Information Systems Committee

10. Joint Information Systems Committee

11. Approaches to managing multiple affiliations
and lots more……
Joint Information Systems Committee

12. Identity 2.0 Is Too Ill-Defined for Imminent Deployment
Gartner, 9th August 2006
Joint Information Systems Committee

13. We are talking about…
What services are users accessing?
Who is responsible?
Joint Information Systems Committee

14. Access and Identity Within the UK
User Centric Identity??
Devolved Authentication
Single Central Identity Provider
Joint Information Systems Committee
Service Provider Credentials

15. Managing Identity or..
Joint Information Systems Committee

16. Managing Resource Access
Joint Information Systems Committee

17. What’s the difference?
Joint Information Systems Committee

18. It’s All About Me
Joint Information Systems Committee

19. What is my Identity? Personal Information
27th April 1977 n.harris@jisc.ac.uk
Victoria
07734 058308
Joint Information Systems Committee

20. What is my Identity? Stuff I like
Joint Information Systems Committee

21. What is my Identity? Stuff I am Allowed to do
Joint Information Systems Committee

22. Disconnecting Identity from Resources
Joint Information Systems Committee

23. Can I manage my own identity?
Joint Information Systems Committee

24. Can I manage my own identity?
Joint Information Systems Committee

25. Can I manage my own identity?
Joint Information Systems Committee

26. Redefining the institutional role as identity provider and service provider for
students
Joint Information Systems Committee

27. The role of the broker
Joint Information Systems Committee

28. Direct Relationship between User-Institution-Resource
Joint Information Systems Committee

29. No Direct Relationship Between User-Institution-Resource
Joint Information Systems Committee

30. Questions
When is it better for the institution to physically host the resource for an end-user? Institution
provided blogs, wikis, google video etc.?
When is it better for the institution to manage an identity for the end-user? (registration /
revocation).
When is it better for the institution to verify identity for service providers? (authentication)
When is it better for the institution to broker access to resources for the end-user (authorisation
process)? Can this be disaggregated from all service providers?
Do we have the infrastructure to allow institutions to broker access against a user-managed
identity?
Where will this be important?
Who benefits, and where?
Joint Information Systems Committee

31. So, OpenID?
Important role to play in providing the
infrastructure to allow us to move
forward.
Better than e-mail verification.
Role for institutions as an OpenID
provider?
Links to ‘policy-lite’ approaches.
Single digital identity very important.
Great for people without an identity
provider.
Joint Information Systems Committee

32. What is JISC Doing?
Full review of access and identity management against the Information Environment.
Identity Project: reporting soon. Focus on current landscape within institutions.
OpenID / external identity provision study to be commissioned.
Identity Metasystems study to be commissioned.
Personalisation study.
E-Portfolio work: ULN??
Importance of links to repositories work.
Users and Innovation Programme.
Joint Information Systems Committee

33. Contacts
n.harris@jisc.ac.uk
j.farnhill@jisc.ac.uk
www.jisc.ac.uk
Joint Information Systems Committee