Top Banner
us, our organizations & the evolving social web NTEN, Webinar June 30, 2010 Kaliya Hamlin, Identity Woman “saving the world with user-centric identity” www.identitywoman.net @identitywoman Sunday, August 1, 2010
62
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Us our Organizations and the Evolving Web  v2

us, our organizations & the evolving social web

NTEN, Webinar June 30, 2010

Kaliya Hamlin, Identity Woman“saving the world with user-centric identity”

www.identitywoman.net

@identitywoman

Sunday, August 1, 2010

Page 2: Us our Organizations and the Evolving Web  v2

Outline for Talk

Context * My Organizations - IIW, She’s Geeky, Planetwork, & tool use* The ASN Vision - civil society & the distributed social web* The User-Centric Identity Vision

The User-Centric Identity Results* OpenID* Information Cards* OAuth* Discovery* Connect

Looking Ahead* Trust Frameworks* Vendor (Organization) Relationship Management* Personal Data Banks* National Strategy for Trusted Identities in Cyberspace

Sunday, August 1, 2010

Page 3: Us our Organizations and the Evolving Web  v2

Confession Time

I struggle with constituent identity management.

IIWX INTERNE T IDENTIT YWORKSHOP May 17-19 2010

Sunday, August 1, 2010

Page 4: Us our Organizations and the Evolving Web  v2

Twitter Lists for events Eventbrite lists of attendeesSuccesses on Social Web

Sunday, August 1, 2010

Page 5: Us our Organizations and the Evolving Web  v2

The Trouble with Facebook• rooted in networked individualism not built for groups and

communities

• it is like being in a room with everyone you ever met all the time

• the company has violated the social contract with users & communities several times

• Making the pages people follow public without warning

• Making the “friends” people have public without warning

• It is pushing people to share more information then they realize to monetize

• Against the Terms of Service to not use one’s real name and have multiple personas

Sunday, August 1, 2010

Page 6: Us our Organizations and the Evolving Web  v2

One of the 10 most influential people in the industry told me last week, over email, that I had to get in line. They demanded that I apologize to Zuck now that he held his “we can do better” press conference, and that I had to turn my Facebook page back on.

Walking around the D conference I felt like Serpico. It feels like I crossed the Blue Line, where technology executives don’t get into big public fights that are bad for business. There are a lot of folks who are getting rich selling Facebook shares on SecondMarket today, and there are many more people–including friends of mine–who have a large percentage of their net worth in Facebook shares.The sad part about the situation is that the person who sent me the email demands has massive influence over the industry, the people I work with. He could buy and sell me many times over. In short, this power broker could make my life and career in technology miserable.

In fact, he could probably get me fired… and he let me know that in so many words.

He insisted that Facebook is the future of the internet, and remembering the “Mark Cuban” rule I volleyed back that if Facebook’s closed ecosystem–that is pissing in the pool of internet users–is the future I don’t want any part of it. He wouldn’t have to get me fired–I would retire before seeing Facebook become the internet.

We built the internet on open standards and carring for users. Zuckerberg and Facebook are trying to reverse open standards, is stealing every startup idea to put into his closed ecosystem and screwing our collective users. He’s screwing all businesses by screwing over the entire userbase.

http://calacanis.com/2010/06/04/steve-jobs-mark-zuckerberg-and-serpico/Sunday, August 1, 2010

Page 7: Us our Organizations and the Evolving Web  v2

(Online)Social Networks Serving Communities

August 2004, NTEN-SF Social Networking panel

I advocated for people to: ★ understand your community use-cases/narratives★ focus on the usability of tools★ consider using open source software★ think about adopting user-centric identity tools★ consider network formation across organizations

Sunday, August 1, 2010

Page 8: Us our Organizations and the Evolving Web  v2

Augmented Social Network: Building Identity and Trust into the Next Generation Internet

Presented in June 2004 at the Planetwork conference Published in August 2004 in First Monday asn.planetwork.net

Sunday, August 1, 2010

Page 9: Us our Organizations and the Evolving Web  v2

The ASN had three main objectives.

1. To create an Internet-wide system that enables more efficient and effective knowledge sharing between people across institutional, geographic, and social boundaries.

2. To establish a form of persistent online identity that supports the public commons and the values of civil society.

3. To enhance the ability of citizens to form relationships and self-organize around shared interests in communities of practice in order to better engage in the process of democratic governance.

Sunday, August 1, 2010

Page 10: Us our Organizations and the Evolving Web  v2

The four main elements of the ASN are:

1.Enabling individuals online to maintain a persistent identity as they move between different Internet communities, and to have personal control over that identity.

2.Interoperability Between Online Communities

3.Brokered Relationships.

4.Matching technologies need to be broad and robust enough to include the full range of political discussion about issues of public interest.

Sunday, August 1, 2010

Page 11: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 12: Us our Organizations and the Evolving Web  v2

OR

Sunday, August 1, 2010

Page 13: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 14: Us our Organizations and the Evolving Web  v2

SHARED VISION for people’s identity on the scale of the web.

Sunday, August 1, 2010

Page 15: Us our Organizations and the Evolving Web  v2

Freedom and

Autonomy for People

Sunday, August 1, 2010

Page 16: Us our Organizations and the Evolving Web  v2

Open Standardsare Essential

Sunday, August 1, 2010

Page 17: Us our Organizations and the Evolving Web  v2

No One Dominant Player

Sunday, August 1, 2010

Page 18: Us our Organizations and the Evolving Web  v2

There will be a Big Bang

With all new technologies there is a point at which new things start happening that the creators of the technology did not envision:

this is the Big Bang in identity.

Sunday, August 1, 2010

Page 19: Us our Organizations and the Evolving Web  v2

Big Co.

Web 1.0 Web 2.0

Sunday, August 1, 2010

Page 20: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 21: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 22: Us our Organizations and the Evolving Web  v2

The issue at hand is fundamentally about FREEDOM:

* the freedom to choose who hosts your identity online (with the freedom to set up and host your own),

* the freedom to choose your persona – how you present yourself, what your

* gender is,* your age, * your race, * your sex,* where you are in the world.

A prime example of WHY these freedoms are vital is the story of James Chartrand – you can read for yourself her story of being a “him” online as a single mother seeking work as a copy editor. Having a male identity was the way she succeeded.

Sunday, August 1, 2010

Page 23: Us our Organizations and the Evolving Web  v2

Laws of Identity

Kim Cameron in May 2005

Sunday, August 1, 2010

Page 24: Us our Organizations and the Evolving Web  v2

1.User Control and Consent

2.Minimal Disclosure for a Constrained Use

3.Justifiable Parties

4.Directed Identity

5.Pluralism of Operators and Technologies

6.Human Integration

7.Consistent Experience Across Contexts

Sunday, August 1, 2010

Page 25: Us our Organizations and the Evolving Web  v2

Identifiers ClaimsSingle String Pairs

Identifiers link things together and enable correlation.

They can be endpoints on the internet.

A claim is by one party about another or itself.

It does not have to be linked to an identifier.

Proving you are over 18 for example and not giving your real name.

Key Terms

Sunday, August 1, 2010

Page 26: Us our Organizations and the Evolving Web  v2

Key Terms

Sunday, August 1, 2010

Page 27: Us our Organizations and the Evolving Web  v2

TextText

+?

Sunday, August 1, 2010

Page 28: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 29: Us our Organizations and the Evolving Web  v2

Information Cards

Sunday, August 1, 2010

Page 30: Us our Organizations and the Evolving Web  v2

OAuth

Sunday, August 1, 2010

Page 31: Us our Organizations and the Evolving Web  v2

The user belongs to two different sites.

OAuth

Sunday, August 1, 2010

Page 32: Us our Organizations and the Evolving Web  v2

How can the user move photos from photo site to the social network site without giving away the password

for the photo site to the social network site?

Sunday, August 1, 2010

Page 33: Us our Organizations and the Evolving Web  v2

The user asked if they want to share - then redirected to the site to give their permission

Sunday, August 1, 2010

Page 34: Us our Organizations and the Evolving Web  v2

The photo site gives the social network site a token to the social network that gives it access to their account.

Sunday, August 1, 2010

Page 35: Us our Organizations and the Evolving Web  v2

A data tunnel is created between the user’s accounts on both sites

Sunday, August 1, 2010

Page 36: Us our Organizations and the Evolving Web  v2

A user posts photos and they can flow from one to the other - and they didn’t give away their password.

Sunday, August 1, 2010

Page 37: Us our Organizations and the Evolving Web  v2

Discovery

Sunday, August 1, 2010

Page 38: Us our Organizations and the Evolving Web  v2

Discovery = Patterns +

Interfaces + Descriptors

Sunday, August 1, 2010

Page 39: Us our Organizations and the Evolving Web  v2

XRDS --> XRD-Simple --> XRD (within XRI spec)

Evolution of Discovery

Sunday, August 1, 2010

Page 40: Us our Organizations and the Evolving Web  v2

Application of

XRI/XDI

Sunday, August 1, 2010

Page 41: Us our Organizations and the Evolving Web  v2

OStatus isn't a new protocol; it applies some great protocols in a natural and reasonable way to make distributed social networking possible.• Activity Streams encode social events in standard Atom or RSS feeds.

• PubSubHubbub pushes those feeds in realtime to subscribers across the Web.

• Salmon notifies people of responses to their status updates.

• Webfinger makes it easy to find people across social sites.

Sunday, August 1, 2010

Page 42: Us our Organizations and the Evolving Web  v2

“Connect”

Sunday, August 1, 2010

Page 43: Us our Organizations and the Evolving Web  v2

Users take actions on your siteUsers come to your site to consume your unique content. They take actions like commenting, reviewing, making purchases, rating, and more.

Users share with friends, who discover your siteWith Facebook Connect, users can easily share your content and their actions with their friends on Facebook. As these friends discover your content, they click back to your site, engaging with your content and completing the viral loop.

Social features increase engagementCreating deeper, more social integrations keeps users engaged with your site longer, and more likely to take actions they share with their friends. (For example — don't just show users what's most popular on your site, but what's most popular with their friends on your site.)

Sunday, August 1, 2010

Page 44: Us our Organizations and the Evolving Web  v2

The response is a JSON object which contains some (or all) of the following reserved keys:

• user_id - e.g. "https://graph.facebook.com/24400320"• asserted_user - true if the access token presented was issued by

this user, false if it is for a different user• profile_urls - an array of URLs that belong to the user• display_name - e.g. "David Recordon"• given_name - e.g. "David"• family_name - e.g. "Recordon"• email - e.g. "[email protected]"• picture - e.g. "http://graph.facebook.com/davidrecordon/picture"

The server is free to add additional data to this response (such as Portable Contacts) so long as they do not change the reserved OpenID Connect keys.

OpenID Connect(under consideration)

Sunday, August 1, 2010

Page 45: Us our Organizations and the Evolving Web  v2

Organizations Responsibility to their Constituents

• Help them understand how linkable their actions are on the web

• using the same e-mail address in multiple contexts means those context are linked

• sharing information on facebook means “all your friends” can see it

• support people understanding how to create/manage persona’s - like a twitter handle

• support trusted forums/spaces where you know the people there belong

Sunday, August 1, 2010

Page 46: Us our Organizations and the Evolving Web  v2

Trust Frameworks

Sunday, August 1, 2010

Page 47: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 48: Us our Organizations and the Evolving Web  v2

Google

PayPal

Equifax

Yahoo!

AuditorsPolicy Repository

for

Trust Frameworks

ICAM John Steensen

OCLC

XAuth

PBS Kids

Levels of Assurance

Identity Providers

Levels of

Protection

Relying Parties

OtherAuditor

Open Identity Exchange

OtherAuditor

Relying Party

Relying Party

Sunday, August 1, 2010

Page 49: Us our Organizations and the Evolving Web  v2

National Strategy for Trusted Identities in Cyberspace

Identity Ecology

Diverse providers of identities and attributes

Transactions online are more trustable

Government working with industry for open standards

Sunday, August 1, 2010

Page 50: Us our Organizations and the Evolving Web  v2

Project VRM - 4th Parties

http://bit.ly/VRM4thParty

Sunday, August 1, 2010

Page 51: Us our Organizations and the Evolving Web  v2

EmanciPay is a relationship management and voluntary payment framework in which buyers and sellers can present to each other the requirements and options by which they are willing to engage, or are already engaging. These include:■ choices concerning payment (though not payment itself)■ preferences■ policies

EmanciPay makes use the r-button (two red "magnets") to signal the presence of willingness-to-engage on either or both the buy and sell sides

ListenLog, or Listen Log is a form of Media Logging. It is required for EmanciPay to work. EmanciPay is a new business model for otherwise free media goods -- one that sharply reduces the frictions involved in paying for media. By increasing the number of people who pay for free media, PayChoice also helps stigmatize non-payment for those goods.

Sunday, August 1, 2010

Page 52: Us our Organizations and the Evolving Web  v2

What does Organization Relationship Management look like?

join in at projectvrm.org

Sunday, August 1, 2010

Page 53: Us our Organizations and the Evolving Web  v2

Coming soon!

Personal Data Banks

Sunday, August 1, 2010

Page 54: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 55: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 56: Us our Organizations and the Evolving Web  v2

Personal Data Stores/ User Data Banks

APPLICATIONS

EXCHANGE

REFINEMENT

STORAGE

ID + ENCRYPTION

DATA + META DATA

SOURCES

$

Invention Arts Stack for User Data BanksSunday, August 1, 2010

Page 57: Us our Organizations and the Evolving Web  v2

Context Enginesfor

Purpose Driven Apps

Kynetx.com

Sunday, August 1, 2010

Page 58: Us our Organizations and the Evolving Web  v2

Sunday, August 1, 2010

Page 59: Us our Organizations and the Evolving Web  v2

We are still missing a Vision for Communities and Groups across contexts

Sunday, August 1, 2010

Page 60: Us our Organizations and the Evolving Web  v2

TECHNOLOGY

LEGAL

SOCIAL BUSINESS?

There are still a lot of questions:

Sunday, August 1, 2010

Page 61: Us our Organizations and the Evolving Web  v2

Internet Identity Workshops

East Coast #1 - September 9-10, Washington, DC

Europe #1 - October 10-11, London, UK

#11 - November 9-11, Mountain View, CA

www.internetidentityworkshop.com

Sunday, August 1, 2010

Page 62: Us our Organizations and the Evolving Web  v2

Kaliya Hamlin @identitywoman

Sunday, August 1, 2010