Panel: Federation, Policy, and Trust Management

1
Panel Federation, Policy, and Trust Management
Tim Moses, Entrust Khaja Ahmed Microsoft Michael
Barrett AMEX and Liberty Alliance Jim Hurley
Aberdeen Group October 15, 2003
2
Overview

• Panelists will examine and analyze the interplay
  between policy and federation as it applies to
  different business relationships, and the role
  that trust management will play in federations.
  Attendees are encouraged to participate.

3
Scope

• Business model
• Strategy
• Procedures
• Operations

Federation
Policy
Management
Trust
4
Usage

• Federation
• Crosses functional, company, legal, and national
  boundaries
• Policy must be
• Accessible in native languages
• Portable from business strategy through IT
  operations
• Consistent
• From human readable to digital instructions
• Time and location invariant
• Reliable assertions that can be tested
• Trusted possesses integrity between cooperating
  parties

5
Policy Federation
Human readable policy
Human readable policy
Digital encoding
Digital encoding
Assertion testing
Assertion testing
6
Extended Value Chains
7
Technology Related Questions

• Applications and data
• Legacy, historical, new, connectors, custom,
  packaged?
• Hard-wired policy versus- exposed policy with
  machine-level agent-monitoring?
• Language-to-machine policy?
• Audit and reporting tools
• Push, pull, when, and for what?
• Risk
• Operations analytics, and management of risk?
• Procedures efficiency, speed, innovation?
• Integrity at DCE nodes
• DAC privilege model?