Liberty Alliance Project

1
Liberty Alliance Project

• Putting Identity to Work
• Oslo Deployment Workshop
• 17 October 2006

2
Goals for Today

• Share with you todays news on Norway SIG
• Provide overview and update on Liberty Alliance
• Discuss Libertys ongoing initiatives, with focus
  on government-related activities
• Demonstrate cross-market, cross-border momentum
  behind Liberty Federation Web Services
• Leave you with understanding on how your
  organization can contribute to Libertys output

3
What is the Liberty Alliance?
The Liberty Alliance is the only global body
working to define and drive open technology
standards, privacy and business guidelines for
digital identity management
4
Who is the Liberty Alliance?

• Global collection of diverse member organizations
  representing leaders in IT, mobility, government,
  manufacturing, finance and consumer services
• 145 total members Management Board and Sponsor
  members include

5
Who is the Liberty Alliance?

• Global collection of diverse member organizations
  representing leaders in IT, mobility, government,
  manufacturing, finance and consumer services
• 145 total members Management Board and Sponsor
  members include

6
Libertys Focus

• Liberty Alliance delivers real word solutions to
  solve
• real world identity problems
• Liberty helps organizations build a foundation
  for trust -- critical for the overall success of
  identity-based services and efficiencies

Technology Standards and Guidelines
An Ecosystem of Interoperable Products Services
Trust
Business and Privacy Guidelines
7
Functional Work Areas

• Technology Specifications
• Development of Liberty Federation, Web Services,
  Strong Authentication frameworks implementation
  guidelines
• Driven entirely by real-world business use cases
• Federation Deployment Enablement
• Liberty Interoperable certification program
• Business Guidelines Legal Templates based on
  real-world deployment experiences
• User Groups public forums for best practice
  sharing, etc.
• Market Development
• Special Interest Groups focused on vertical and
  horizontal solutions, including ID Theft
  Prevention, eGovernment, eHealth, Open Source,
  Norway Market, Japanese Market and Payment
• Liberty Deployment Workshops putting Liberty
  members with know-how in front of companies
  seeking advice and expertise
• Sponsored market research education based on
  member input

8
Federated eCitizen Use Cases
9
Without federated identity
A use case without federated identity A parent
registers one of his children in a national
school he/she uses a government identification
number and a password which may be different for
each ministry or agency
Logon to the Ministry of Education to register
the child Logon to the Ministry of Interior
obtain child's birth certificate Logon to the
Ministry of Finance obtain proof of place of
residence Logon to the Ministry of Social Aid
if family eligible for social aid Logon to
Ministry of Interior proof of legal
guardianship

• All information must be duplicated,
• the citizen registers 5 times, may use 5
  different identifications and passwords

10
Without federated identity
A use case a citizen changes his/her name
without federated identity
Logon to the Ministry of Interior change of
name
change of records Logon to the
Ministry of Finance change of fiscal identity

change of marital status Logon to the
Ministry of Social Aid if eligible for social
aid Logon to Ministry of Health change of name
for same social security number Logon to Ministry
of Defence change name for same ID

• All information must be duplicated,
• the citizen registers 5 times, may use 5
  different identifications and passwords, and in
  some cases may have to do two to three different
  transactions within one ministry or agency

11
With federated identity
Citizen connects once through any government
authority Automatically recognized by other
government services
Citizen authenticate to any government authority
One sign-on opens all connected services within
the circle of trust

• Citizen connects to any government authority
  within the circle of trust of public services.
  Automatic update through integration between
  agencies

12
Functional Work Areas

• Technology Specifications
• Development of Liberty Web Services, Strong
  Authentication frameworks implementation
  guidelines
• Driven entirely by real-world business use cases
• Federation Deployment Enablement
• Liberty Interoperable certification program
• Business Guidelines Legal Templates based on
  real-world deployment experiences
• User Groups public forums for best practice
  sharing, etc.
• Market Development
• Special Interest Groups focused on vertical and
  horizontal solutions, including ID Theft
  Prevention, eGovernment, eHealth, Open Source,
  Norway Market, Japanese Market and Payment
• Liberty Deployment Workshops putting Liberty
  members with know-how in front of companies
  seeking advice and expertise
• Sponsored market research education based on
  member input

13
Liberty in the Public Sector
14
(Government) Challenges with Identity

• Ease-of-use
• Multiple single-purpose identity credentials
• Difficult to keep track of credentials
• Privacy issues
• Internet usage may proliferate digital identity
  dissemination
• Must preserve privacy while sharing information
• Need solid ways to establish proof of digital
  Identity
• Authentication must be done securely
• Cost of managing multiple identity credentials

15
Liberty's Answer

• Provide the benefits of Internet technology
  without compromising security or control
• For the citizen/ business
• Single sign-on
• More control over privacy
• Ease of dealings with Administrations
• For the civil servant
• Easy to access many applications
• A global view of the civil servant credentials
• Civil servant empowerment
• For the government
• Better and more services, new revenue
  opportunities, cost efficiency
• Better security at lower cost
• Enhance relationships with citizen/business

16
Public Sector Members in Liberty

• Sponsor
• French, NZ and United States Federal Governments
• UNINETT
• Affiliate Government Agencies
• Denmark Ministry of Science Innovation,
  Austrian Office of CIO, Finland Board of Taxes,
  Bronnoysund Register Centre, Sunderland City
  Council, US Dept of Defense
• Hong Kong Post Office Canada Post
• Other Affiliate Members of note
• 10-15 Universities leading work on ID Theft
  Prevention, Public/Private partnerships and
  standards harmonization

17
Leveraging Experience eGovernment SIG

• Liberty Alliance as a forum
• Meet with other governments industry
• Exchange experiences
• Learn from each other
• With widespread adoption of Liberty
• Re-use and adopt applications developed by other
  governments and industry
• Avoid re-inventing wheels for the 219th time

18
Liberty Cooperation in eGovernment

• Member of EAP, HITSP, ICTSB
• Cooperation agreement with FIDELITY project
• Presented at GUIDE, MODINIS and SURF meetings
• Frequent speaker at variety of industry events on
  global basis
• Public Policy Expert Group representatives
  engaged with EU and national governments

19
Libertys Focus on Policy Documents

• Privacy and Security Best Practices
• Operational guidance to promote privacy-friendly
  deployments
• Deployment Guidelines for Policy Decision-Makers
• Covers privacy security concerns from CPO point
  of view
• Circles of Trust Legal Framework
• Implications of EU Data Protection and Privacy
  Act
• Security Privacy Implementation Guidelines
  document
• Technical guidance to promote privacy-friendly
  deployment of Liberty-enabled products

20
Liberty Freedom of Choice

• Choice of solutions from many vendors
• Open Source Software implementations
• Conformity with widely accepted industry
  standards
• Public specifications, with unrestricted access
  for everybody, create an even playing field
• Liberty Alliance standards create opportunities
  for local industry and small businesses

21
eGovernment Adoption

• Widespread adoption on global basis over 120
  million citizen identities managed worldwide
• Austrian, Finland, French, Italian, New Zealand,
  Norwegian, US eCitizen eAuth implementations
• Strong adoption at local/regional level, too
  (e.g., City of Sunderland / NERSC)
• Administrative adoption also prevalent
• Cross-departmental as well as employee/soldier
  management

Full list of eGovernment adoption statistics
case studies https//www.projectliberty.org/about
/adoption_egov.php
22
Summary / Membership Details
23
Liberty - The Nucleus for Identity

• Liberty is becoming a center point for all things
  identity
• Committed to facilitating solutions of all
  needstechnical, business and policy
• Enables our members to maximize centralize
  standards investments
• Long-term stewardship for all activities related
  to our members business objectives
• Many new initiatives and programs are proposed
  regularly to address further aspects of identity

24
Membership Benefits

• Early access influence
• Early access to emerging Liberty output creates
  competitive advantage in product, service and
  application development
• Libertys structure enables rapid development of
  specifications that meet the business and
  technical requirements of your company and/or
  your customers
• Influence where Liberty allocates marketing
  resources for tradeshows, market research, etc.
• Network with other thought leaders in identity
  management and web services

• Liberty is a unique forum where business,
  technical and policy thought leaders network on
  common mechanisms for identity web services

• Tangible value ROI
• Reduced fees for Liberty Interoperable testing
  program
• Access to members-only analyst briefings and
  reports
• Leverage Libertys presence at leading industry
  tradeshows and events

25
Thank You!

• Enjoy your time today
• Ask questions, engage with speakers
• Contact for further discussions
• Andrew Shikiar, Membership Director
• andrew_at_projectliberty.org
• 1.310.314.2131

http//www.projectliberty.org