1. IBM Software Group, Strategy © 2003 IBM Corporation Primary Objective of this Workshop: Identify where standards are needed for (privacy in) user-centric identity management  Where are standards really needed? –Standards are a means, not a primary value! –Market: Industry and/or user community must see a strong business value in supporting standards (or a significant disadvantage in no-standards) The supporter group must have sufficient market (or other) power –Interoperability: Isolated vs. many interfaces Vertical, horizontal – data, control – user, machine – design, runtime, post-mortem – … –Maturity: Experimental vs. well understood technologies Evolutionary extensions of existing accepted standards always better than new ones – “ Good thing with standards is that there are so many to pick from ” –Diversity: In some cases, diversity is better than standards Bad or immature standards are always worse than no standards …  Perfect outcome: –Prioritized, well-motivated, realistic, actionable and agreed standardization roadmap

2. IBM Software Group, Strategy © 2003 IBM Corporation DomainStakeholder/sWhy?Why not?Standards to build on Technologies to build on BodiesPriority

3. IBM Software Group, Strategy © 2003 IBM Corporation

4. IBM Software Group, Strategy © 2003 IBM Corporation Sort of an agenda for the next 50 minutes  Review most popular entries in yesterday ’ s table –Still the right topics? –IF SO … –Answer essential questions in some detail Needs volunteers to drive each –IF OK … –Get an PRIME+others group working on it Needs more volunteers

5. IBM Software Group, Strategy © 2003 IBM Corporation Data handling and obligation policy 2020 Data handling and obligation policy language 7 Obligation lang.7 Policy communication and propagation protocols 4 Extended predicates in SAML: relation, 3- valued pred's 2 Proposed Areas in need of Standards Maturity Stakeholders Value to these stakeholders Basis: related work, standards, technology, projects Body to work with Priority for PRIME

6. IBM Software Group, Strategy © 2003 IBM Corporation Private credentials 1717 Credentials formats6 Transport/exchange formats f credentials 6 Privacy-enhancing Signatures 5 Proposed Areas in need of Standards Privacy assessment 1313 Privacy threat models7 Anonymity metrics4 Common Criteria update2 Maturity Stakeholders Value to these stakeholders Basis: related work, standards, technology, projects Body to work with Priority for PRIME

7. IBM Software Group, Strategy © 2003 IBM Corporation Trust policies 6 Trust establishment3 Privacy labels, icons, classes 3 Usability User-friendly screens for describing privacy concepts etc 5 User-centric architecture for identity management 9 Proposed Areas in need of Standards Privacy compliance Data tracks, audit trails, events, etc. 5 Maturity Stakeholders Value to these stakeholders Basis: related work, standards, technology, projects Body to work with Priority for PRIME

8. IBM Software Group, Strategy © 2003 IBM Corporation Next steps 