Phil Windley

NOVEMBER 27, 2023

As Jamie points out: "Digital identity [is how we] prove who we are to others."​ This statement is particularly resonant as we consider not just the role of digital identities in enhancing personal agents, but also their crucial function in asserting ownership of our creations in an AI-dominated landscape.

Authentication 40

Authentication Artificial Intelligence Healthcare Licensing 40

Phil Windley

FEBRUARY 14, 2024

And if you wanted to buy beer, the company would have to proof the identity of the person to ensure they're over 21. They don't have to maintain federation relationships with numerous identity providers. Tags: identity ssi zero+trust zero+data authorization verifiable+credentials

Data 66

Data Examples Airlines Licensing 66

Phil Windley

JANUARY 16, 2018

Identity in real life is much richer than online identity, flexibly and conveniently solving all kinds of thorny problems. Now with Sovrin, we can bring those rich identity transactions online. Here's the abstract: Digital identity is one of the oldest and hardest problems on the Internet. This is finally changing.

Internet 103

Internet Insurance Authentication Network 103

Phil Windley

FEBRUARY 1, 2022

In IRS Using Facial Scanning , I reported on the IRS’s move to use the identity proofing and authentication services from ID.me One of the controversial aspects of ID.me’s service is an identity proofing service that matches a selfie to the uploaded picture of a government credential. for logging into their online services.

Course 98

Course System Report Guidelines 98

Phil Windley

MARCH 1, 2023

Still we can look at the direction in which digital identity is evolving to get an idea what's coming—even if we can't predict the timing. You're asking them to change the fundamental means that they use to form, manage, and use online relationships. identity providers. Summary: I've had a busy month. And became Sybill.

Social 53

Social Operating Systems Authentication Banking 53

SecureWorld News

SEPTEMBER 25, 2021

In a blog post, Neel Mehta, Information Security lead for Google, explains how a hacker has managed to break certificate code parsing to invade email inboxes and infect users with malware. This is the first time TAG has observed actors using this technique to evade detection while preserving a valid digital signature on PE files.“.

Google 60

Google Malware Analysis Windows 60

Kitaboo

MARCH 21, 2024

These platforms provide a cost-effective means to tailor your eReader application to your brand’s identity, such as your logo, motto, colors, and overall design. This move reinforces your brand identity and creates a seamless brand experience for your readers. to the search bar on your eReader app.

eBook 78

eBook Tools Education Report 78

Phil Windley

FEBRUARY 15, 2022

Summary: Self-sovereign identity must be the foundation of Web3 because it is the means for framing ourselves in the digital world and taking action with our peers. The tools people have to participate in these territories, browsers and password managers, let us visit those territories, but we ourselves cannot be visited.

Exercises 65

Exercises Tools Architecture Virtualization 65

Phil Windley

JUNE 26, 2023

Earlier this month Amazon launched Amazon Verified Permissions , a "scalable permissions management and fine-grained authorization service for the applications that you build." Photo Credit: Puzzle Pieces from Erdenebayar (Pixabay Content License) Tags: access+control amazon openid abac identity This was a fun project.

Policies 52

Policies Resources Applications Construction 52

Phil Windley

FEBRUARY 12, 2021

You open up your password manager (a few clicks) and fill the username and only then does it show you the password field 1. Some places do this well, merely hiding the password field using Javascript and CSS, so that password managers can still fill the password even though it's not visible. Others don't.

Authentication 144

Authentication Banking Mobile Airlines 144

Phil Windley

JANUARY 20, 2023

While I appreciate the sentiment, I think reality is much more nuanced than that because identity management is about relationships, not identities (whatever those are). In self-sovereign identity (SSI), the tools that support that are wallets and agents. For people, these will be personal.

Authentication 52

Authentication Social Google Enterprise 52

Phil Windley

NOVEMBER 9, 2020

Recently, I've been making the case for self-sovereign identity and why it is the correct architecture for online identity systems. In Relationships and Identity , I discuss why identity systems are really built to manage relationships rather than identities. In the figure, Alice has an SSI wallet.

Authentication 59

Authentication Architecture System Network 59

Phil Windley

AUGUST 17, 2017

Summary: We cannot decentralize many interesting systems without also decentralizing the identity systems upon which they rely. We're finally in a position to create truly decentralized systems for digital identity. Most interesting systems have an identity component. The problem with decentralized identity is even more acute.

System 92

System Examples Internet Security 92

Phil Windley

JULY 5, 2021

But what if, in some future world, the root certificate authority of the identity documents I use for banking, shopping, travel, and a host of other things decides to revoke my identity for some reason? Note that this doesn't mean Alice has to code or even manage all that. Tags: identity ssi didcomm ssiot.

Architecture 98

Architecture Internet Programming Travel 98

Phil Windley

OCTOBER 5, 2023

My new book, Learning Digital Identity , talks about the concept. Anonymous Credential Proofs: VCs can be designed to be presented anonymously, allowing users to prove a claim about themselves without revealing their identity. Tags: zero+data identity verifiable+credentials zero+trust

Data 65

Data Storage Security Authentication 65

Galido

APRIL 2, 2019

A unique designed logo sets a lasting impression on the customer and it works as a tag for your company. To make the name of your brand, its identity, prominence, and recognition product quality, and delivery is as important as a unique logo is. Brand Identity. Logos are an effective tool to create your brand identity.

Company 94

Company Tools Strategy Industry 94

Phil Windley

JUNE 14, 2021

DIDs and DID-based Communication or DIDComm form the second layer of the SSI stack, providing a secure communications layer for the exchange of identity information via verifiable credentials. Identity systems provide the means to remember, recognize, and rely on other parties in a relationship. Autonomic Identifiers.

Internet 69

Internet Authentication Network Security 69

Linux Academy

FEBRUARY 1, 2019

Learn how to create, configure, and manage resources in the Azure cloud, including but not limited to: Managing Azure subscriptions. Creating and managing alerts. Deploying and managing virtual machines. Managing AD Identity Protection and objects. Managing AD Identity Protection and objects.

Course 80

Course Training Storage Microsoft 80

Dataconomy

MARCH 11, 2024

Ivanti, with headquarters nestled in Utah, is a major player in the IT security sector, offering its systems management and security software to an impressive roster of 40,000 clients. These range from heavyweight organizations to government bodies scattered across the globe, as boasted on its website.

Chemicals 50

Chemicals Security System Financial 50

Phil Windley

NOVEMBER 22, 2022

Subjects have few tools for managing these relationships because each one is a little different from the others, not only technically, but procedurally as well. Tags: identity agents ssi autonomic+identity. There is no common protocol or user experience [from one administrative system to the next].

Healthcare 66

Healthcare Insurance Authentication System 66

The Verge

JUNE 24, 2020

You won’t be asked to confirm your identity with Face ID or a passcode by default, but you can turn off the so-called “Express Mode” for additional security. But for now, automakers will need to provide NFC tags, and you’ll need to tap them directly. Apple says the feature will support the older iOS 13 as well.

Wireless 134

Wireless Apple Video Examples 134

Phil Windley

SEPTEMBER 5, 2017

Summary: For Sovrin to become a global, public utility that helps everyone create and manage self-sovereign identities, it must be independent and self-sustaining. For Sovrin to achieve its goal of providing self-sovereign identity for all, the Foundation and the Network have to be independent and self-sustaining.

Network 50

Network Open Source Financial Government 50

Phil Windley

MARCH 7, 2022

That's why, when you open a bank account, they ask for numerous identity documents. The tradeoff between privacy and authenticity is informed by the Law of Justifiable Parties (see Kim Cameron's Laws of Identity ) that says disclosures should be made only to entities who have a need to know. That is a different discussion.

Authentication 59

Authentication Banking Examples System 59

Phil Windley

DECEMBER 2, 2020

Summary: Self-sovereign identity offers much more than just better ways to log in. The identity metasystem is really a sophisticated messaging system that is trustworthy, secure, and extensible. Figure 6: Alice uses a specialized wallet to manage the vendors of things she owns (click to enlarge). Here's s simple example.

Internet 87

Internet Security Examples Authentication 87

Phil Windley

MARCH 14, 2022

Summary: Provisional authenticity and confidentiality can help us manage the trade offs between privacy and authenticity to support online accountability along with functional privacy. That's why, when you open a bank account, they ask for numerous identity documents. Escrow services could be regulated as fiduciaries to increase trust.

Authentication 52

Authentication Banking Data Examples 52

A Screw's Loose

AUGUST 28, 2012

He was kind enough to place things like MDM (Mobile Device Management) and MAM (Mobile Application Management) in the diagram for us. I sent Gunnar a note after reading his post where I posited that we could replace identity in the middle of his venn diagram with MIM (Mobile Information Management).

Policies 64

Policies Mobile Enterprise Enterprise 64

Phil Windley

APRIL 18, 2023

Some of the following is excerpted from my new book Learning Digital Identity from O'Reilly Media. But regardless, PBAC systems, with good policy stores, can manage policies and the information needed to build the authorization context much more easily than you'll usually find in a system for managing OAuth scopes.

Resources 40

Resources Policies Applications Examples 40

Phil Windley

MARCH 27, 2023

This article is adapted from Chapter 12 of my new book Learning Digital Identity from O'Reilly Media. Rather than using certificates, it manages keys automatically and beneath the covers, so it’s as user-friendly as possible. Tags: fido identity authentication passkeys This is how they work.

Authentication 40

Authentication Security Transportation Web Services 40

Phil Windley

FEBRUARY 27, 2018

The Sovrin Foundation is much more than an advocacy organization for self-sovereign identity. Managing the release process that prepares code for Stewards. Tags: sovrin cto announcements. Implementing a Sovrin RFC and Improvement Project process. Supporting steward onboarding and operation.

CTO 40

CTO CTO Hire Open Source Network 40

Phil Windley

AUGUST 25, 2022

The India Times interviewed Manish Tiwary, country Manager for Amazon's India Consumer Business. I spend most of my time right now writing about open networks for identity as I wrap up my forthcoming O'Reilly book. Tags: ecommerce protocol ondc beckn vrm. ONDC wants to level that playing field. Will the big platforms play?

Network 52

Network Government Video System 52

Phil Windley

APRIL 4, 2023

Consider the following policy 1 : Managers in marketing can approve transactions if they are not the owner and if the amount is less than their approval limit. Photo Credit: Information Desk Charleston Airport from AutoRentals.com ( CC BY 2.0 , photo is cropped from original) Tags: identity abac access+management pbac pip

Policies 52

Policies Examples System Resources 52

Scott Lowe

OCTOBER 26, 2012

As I mentioned earlier, the identical key value is what tells the switch which interfaces belong in the same bundle. To add a port to that VLAN, so that traffic across that port is tagged for the specified VLAN, use the tagged ethernet <interface> command. Otherwise, a port carries only untagged or tagged traffic.

Vmware 108

Vmware Virtualization Groups Network 108

Phil Windley

AUGUST 30, 2021

Centrally managed social plans misfire, Scott argues, when they impose schematic visions that do violence to complex interdependencies that are not—and cannot—be fully understood. Tags: legibility decentralization security flying identity university. Scott In this wide-ranging and original book, James C.

System 90

System Social Authentication Software 90

A Screw's Loose

APRIL 10, 2013

To put it quite simply, the dilemma is represented by the fact that two people buy almost identical salads although one has nuts in it. The piece that is missing is the one of identity and access management (IDAM). They set up an identity system that allows them to issue a certificate to each user per device.

Data 51

Data Mobile Enterprise Enterprise 51

Phil Windley

MAY 28, 2021

I won't get into the details around how this is done securely, but you can read far more detail at The Architecture of Identity Systems if you're curious. SSI wallets and agents provide a good user experience for managing relationships, storing credentials, and responding to proof requests. Tags: ssi identity x.509

Banking 137

Banking Licensing Architecture Security 137

Phil Windley

MARCH 7, 2020

I've spent my career in the identity industry and there's a issue, privacy, where the discussion is much the same. Make a system that respects privacy and is a better identity system. They'd be cheaper to operate, safer, and cleaner and the capital cost would be managed alongside the other large capital costs of housing.

Financial 59

Financial .Net Construction System 59

Phil Windley

AUGUST 2, 2022

We met with some people on Microsoft's identity team including Kim Cameron , Craig's longtime friend and Microsoft's Chief Identity Architect. During the meeting someone, a product manager, said something stupid and you could just see Craig come up in his chair. Tags: identity iiw novell kynetx utah.

Meeting 52

Meeting Microsoft Industry Development 52