1. Higgins 1.1 Architecture Diagrams

2. Higgins Client Higgins 1.0 and 1.1
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
Internet Explorer
Firefox
HSS Manager
HSS Launcher
Higgins Browser Extension
IE MIME-type Handler
Higgins Browser Extension
Firefox Addon
Higgins Selector Switch (HSS)
Higgins GTK/Cocoa Selector
Higgins RCP Selector
Higgins AIR Selector
Microsoft CardSpace
OpenInfoCard
Target Platforms: Windows, Mac OSX, Linux V

3. Selector Switch Details

4. Browser communications (Windows) [simplified]
Internet Explorer
Firefox
MIME-type handler
(hbxie.dll)
Add-on
(hbx)
Socket communication
Socket communication
Selector Switch
(higgins-ss.dll)
Connector
Connector
Connector
Connector
Socket communication
Dynamic Linking
Socket communication ??
AIR Selector
CardSpace
Higgins
RCP Selector
Other
Selector v2

5. Higgins Selector Switch
Higgins 1.1: Selector Switch (platform/browser independent)
Selector Manager App
Installer
Browser
Local App
Key
Browser <object> tag Extension
Additional Browser Extension
Higgins Component
Higgins Selector Switch
Non-Higgins Component
Connector
Connector
Connector
Connector
Plug-in (Provider)
Higgins Selector Switch
Provides a common API to Identity Selectors
Provides UI to change default selector
Exposes “hss.dll” API
Selector launcher: Incorporates either TCP Socket Server or invokes a selector-specific launch DLL
Windows Control Panel app
Calls hss.dll to display Selector Switch UI
HBX for IE (hbxie.dll – activeX)
Mime type handler
Handles application/x-informationCard
Calls Selector Switch: getDigitalIdentity
Replaces IE’s existing handler
Higgins Browser Helper:
One or more additional helper objects provides these functions (relying on hss.dll API to access required IAS services):
Installs a mouse button that launches the default Selector
Address bar character handler (for XRI support)
HTML auth support
Form fill support
Screen scrape support (maybe)
Higgins Installer for Windows:
ehiggins.msi, whiggins.msi, chiggins.msi
This installs: bhxie.dll, hbhie.dll, hss.dll and hss.exe AND one of the three Higgins selectors
Remote
Local
Higgins Web- based Selector (AIR)
Higgins Eclipse-based Selector
Higgins Client-based Selector
CardSpace™ Selector
Local TCP
Local or Remote v4

6. Higgins: 1.1 Selector Switch for IE/Windows
Windows Control Panel app
(hss.cpl)
Higgins Installer for Windows
Internet Explorer 7
Local App
Key
HBX for IE
(hbxie.dll)
Higgins Browser Helper for IE (hbhie.dll)
Higgins Component
Higgins Selector Switch (hss.dll)
Non-Higgins Component
Connector
Connector
Connector
Connector
Plug-in (Provider)
Higgins Selector Switch
Provides a common API to Identity Selectors
Provides UI to change default selector
Exposes “hss.dll” API
Selector launcher: Incorporates either TCP Socket Server or invokes a selector-specific launch DLL
Windows Control Panel app
Calls hss.dll to display Selector Switch UI
HBX for IE (hbxie.dll – activeX)
Mime type handler
Handles application/x-informationCard
Calls Selector Switch: getDigitalIdentity
Replaces IE’s existing handler
Higgins Browser Helper:
One or more additional helper objects provides these functions (relying on hss.dll API to access required IAS services):
Installs a mouse button that launches the default Selector
Address bar character handler (for XRI support)
HTML auth support
Form fill support
Screen scrape support (maybe)
Higgins Installer for Windows:
ehiggins.msi, whiggins.msi, chiggins.msi
This installs: bhxie.dll, hbhie.dll, hss.dll and hss.exe AND one of the three Higgins selectors
Remote
Local
Higgins Web- based Selector (AIR)
Higgins Eclipse-based Selector
Higgins Client-based Selector
CardSpace™ Selector
Local TCP
Local or Remote v3

7. HBX + Selector Switch for IE/Windows v10
This installs: all Higgins Selector Switch components AND one of the three Higgins selectors
Calls higgins-ss.dll to display Selector Switch UI
Windows Control Panel app
(hss.cpl)
Higgins Installer for Windows
Handles application/x- informationCard
Calls Selector Switch: getDigitalIdentity
Replaces IE’s existing handler
Internet Explorer 7
Local App
HBX for IE
(hbxie.dll - activex
Mime type handler)
Higgins Browser Helper for IE [planned]
(hbhie.dll)
One or more additional helper objects provides these functions (relying on higgins-ss.dll API to access required IAS services):
Installs a mouse button that launches the default Selector
Address bar character handler (for XRI support)
HTML auth support
Form fill support
Screen scrape support (maybe)
Higgins Selector Switch
(higgins-ss.dll)
Provides a common API to Identity Selectors
Provides UI to change default selector
Exposes “higgins-ss.dll” API
Selector launcher: Incorporates either TCP Socket Server or invokes a selector-specific launch DLL using a connector
Connector (s)
CardSpace™
Browser Extension -> Higgins Extension
Rename ISS Client UI -> I-Card Selector;
Attach RPPS Web App as just a “binding” for RPPS; Parity-> Party
Attached Remote Token Service To ISS (at long last)
Remote STS connects to I-Card Selector Service, not to I-Card Provider
Higgins Client- based
Higgins Eclipse-based
Higgins Web-based Identity Selector
I-Card Selector (in AIR)
Local computer/device
Selector specific connector to plugin selector to higgins-ss.dll
Remote/hosted (some selectors)
I-Card Mgr
Higgins Web-based Selector includes a hosted I-Card Manager component and a hosted Selector Service.
Selector Service 7

8. Browser communications (Windows)
Internet Explorer 7
Firefox
MIME-type handler
(hbxie.dll)
Add-on
(hbx)
Socket communication
Socket communication
Selector Switch
(higgins-ss.dll)
TCP Server
Selector switcher
Connector
Connector
Connector
Connector
Socket communication
Dynamic Linking
Socket communication ??
AIR Selector
CardSpace
Higgins
RCP Selector
Other
Selector v2

9. Selector Switch System Core
Windows Service
(higgins-ss-service.exe)
Start TCP Server
Selector Switch
(higgins-ss.dll)
Get/Set configuration
Windows Control Panel
Application
(hss.cpl)
Switcher UI

10. Architecture of process boundry communications between AIR Support modules
Internet Explorer 7
Entry point 1
Dynamic Linking
Invoke (Create Process)
Pipe communication
Invoke (Create Process)
Socket Communication
MIME-type handler
(hbxie.dll)
Socket Communication
Connector for AIR
(Air.exe)
Connector for AIR
(CardSelector.exe)
Socket Communication
Selector Switch
(TCP Server, Pipe comm, Switcher)
(higgins-ss.dll)
Connector for Higgins RCP
(HigginsRCP.exe)
Higgins RCP Selector
(eclipse.exe)
Dynamic Linking
Dynamic
Linking
Dynamic Linking
(Start TCP Server)
Connector for CardSpace
(CardSpace.exe)
CardSpace
(infocardapi.dll)
Read/Write
Control Panel App
(hss.cpl)
Configuration
(conf.xml)
Host process
(ss-runner.exe)
Invoke (Create Process)
(Using permissions
of current user)
Windows Service
(higgins-ss-service.exe)
Start ss-runner and
restart it
(if error was occurred)
Entry point 2
Entry point 3
(Started by OS as local service)
Registration of connectors. Save configuration about itself
(during installation or by user manually)

11. Model of message exchanges in AIR Support
1. User clicked on log-in button
Entry point 1
Internet Explorer 7
Selector
16. Submit
2. Get necessary data from browser and preparing «xml request»
MIME-type handler
(hbxie.dll)
15. Return Token
through socket
7. Set connector filename and path to selector (optional)
11. Set necessary data from «xml request»
3. Send «xml request»
through socket
8. Invoke Connector with args (filename and path)
10. Invoke Selector
Selector Switch higgins-ss.dll
14. Return Token
13. Return Token
(use I/O stream
redirecting - pipes)
Connector
TCP Server
PipeSrv
Entry point 2
6. Return configuration of def sel
12. Return Token
9. Send «xml request»
(use I/O stream redirecting - pipes)
4. getDefaultSelectorConfig()
4. Return list
of selectors
1. User opened app
Switcher
Core
3. Check Selectors
(find new and
remove deleted)
2. Check Selectors
3. Run TCP Server
Control panel
app (hss.cpl)
1. Start of higgins-service
Host process
(ss-runner.exe)
Windows Service (higgins-ss-service.exe)
2. getAvalSelectors()
5. setDefaultSelector()
(if user changed)
3.1 (6). Read configuration
or write
(if found new selector
or remove selector)
Blue
Red
Turquoise
Violet
- Actions connected
with «Entry point 1»
with «Entry point 2»
with «Entry point 3»
with installing
of connector
Entry point 3
(Started by OS)
5. Read configuration
(not used yet)
3.2 Read
conf.xml
(information about all installed
connectors and selectors)
Registry
(Windows)
Other system storages of data
(Linux, Mac)
1. Installing of connector (set data about connector)

12. Web Proxy Solution

13. Non-Higgins Component New /Modified Component
Web Proxy Solution
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
Web Browser
Web Proxy
Higgins Server V

14. AIR Client and Server Solution

15. AIR Client and Server Solution 1.1M1+
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
Browser
(IE6+ or Firefox2+)
Client Application
HSS Manager
HSS Launcher
HBX
Higgins Selector Switch (HSS)
AIR Selector
Higgins Server V
Target Platforms for client portion: Windows, Mac OSX

16. Higgins Server 1.1M1+ Component Set
AIR Selector
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
I-Card Service Web App
I-Card Service
User Profile
I-Card Registry
I-Card Selector Service
User Profile Provider org.eclipse.higgins.userprofile.idas
Local STS
Remote STS
Identity Attribute Service (IdAS)
Hibernate Context Provider
org.eclipse.higgins.idas.cp.hb V
Data Source (e.g. Database, Directory)‏
Utility

17. I-Card Selection Service (ISS) 1.1M1-M5 Component Set
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
I-Card Selector Service (ISS)
org.eclipse.higgins.iss
CardSpace ISS Provider
org.eclipse.higgins.iss.cardspace
I-Card Registry Component Set
STS Client
Local Binding
Remote Binding
STS Component Set
Remote STS V

18. I-Card Registry 1.1M1+ Component Set
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
I-Card Registry
CardSpace Personal Provider icard.provider.cardspace.personal.db
CardSpace Managed Provider
icard.provider.cardspace.managed.db
JDBC
JDBC
I-Card
Store
I-Card
Store
Cache Service
Cache Service V

19. Local STS 1.1M1+ Component Set
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
STS Server
STS Mapping Extension
org.eclipse.higgins.sts.server.mapper.appliesto
STS Token Extension
org.eclipse.higgins.sts.server.token.handler
STS Mapping Extension
org.eclipse.higgins.sts.server.mapper.extension
STS Token Extension
org.eclipse.higgins.sts.server.token.self
STS Mapping Extension
org.eclipse.higgins.sts.server.mapper.polling
STS Token Extension
org.eclipse.higgins.sts.server.token.encrypt
STS Token Extension
org.eclipse.higgins.sts.server.token.identity
STS Base64 Extension
STS Token Extension
org.eclipse.higgins.sts.server.token.compound
STS Binding
STS Token Extension
org.eclipse.higgins.sts.server.token.saml
STS XML Security Extension
STS Common V

20. Utility 1.1M1+ Component Set
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
Cache Service
Util IdAS CP
Cache Provider
Util JScript
Configuration
Util SAML
org.eclipse.higgins.util.saml
Configuration Handler
org.eclipse.higgins.configuration.xml
Util Socket
org.eclipse.higgins.util.socket
Registry
org.eclipse.higgins.registry V

21. Unified Selector

22. Unified Selector
We’ve learned a great deal about building selectors by rapidly building three different flavors
We need to converge on a single architecture
Need to define common component APIs (service descriptions)
Implementations in C++ and Java
Some with multiple protocol bindings (e.g. SOAP, HTTP, etc.)

23. Unified Selector – Phase 1
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
Higgins Selector Switch
Selector UI
 OR 
Local I-Card Service
Higgins Server
External STS IdP V
Target Platforms for client portion: Windows, Mac OSX, Linux

24. Unified Client Solution – Phase 2 Local I-Card Service (Component Set)
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
Local I-Card Service
Synchronizing Card Store
To external STS IdP
Higgins Server V

25. Non-Higgins Component New /Modified Component
Unified Client Solution – Phase 2 Synchronizing Card Store (Component Set)
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
GTK/Cocoa Selector
Synchronizing Card Store Adapter
Synchronizing Card Store Controller
Higgins Server (Card Sync Web App)
I-Card
Cache V

26. Unified Selector Phase 2 Server Mods
Unified Selector or AIR Selector
Unified Selector
Key
Component
Non-Higgins Component
Local Different Process
Local Same Process
Remote
Plugin
New /Modified Component
Component Set
I-Card Service Web App
I-Card Sync Web App
I-Card Service
User Profile
I-Card Registry
I-Card Selector Service
User Profile Provider org.eclipse.higgins.userprofile.idas
Local STS
Remote STS
Identity Attribute Service (IdAS)
Hibernate Context Provider
org.eclipse.higgins.idas.cp.hb V5
Data Source (e.g. Database, Directory)‏
Utility

27. Other Diagrams

28. Solutions Deployment Internet Key: Identity Providers Web apps
Web 2.0 and Enterprise Apps
Personal Data Services
Data Contexts
Banking Site
Social Network Site
RDF Semantic Web Repository
OpenID Provider
Higgins
I-Card Service
RDF Data Source
eCommerce or Community Site
LDAP Directory
SAML Enterprise Directory
Social Network Site
Identity Attribute Service
STS IdP RP
LDAP Server
Linked Data Server
OpenSocial
STS IdP RP
SAML2 IdP
IdAS Client
XDI Service
LDAP
Linked Data
Linked Data
Linked Data
LDAP
RDF
Internet
IdAS
RDF CP
Social Networks
Social Networks
IdAS Client
IdAS Client CP
Open Social
Key:
Other Local Apps & Bots
Key:
Browser
Higgins Identity Selector
Local App
IdAS Client
XDI4J
Enterprise Directories
Enterprise Directories
Enterprise Directories
Other…
Selector Switch
Selector Switch
Higgins Extension
Extension
Browser
Computer or mobile device
Higgins 1.0
Higgins X.X
3rd Party

29. Higgins Framework Identity Selectors Identity Selectors
Identity Providers
Relying Parties
Identity Selectors
Identity Providers
Relying Parties
Apps and Services
(Higgins & third-party)
Identity Selectors
Identity Providers
Relying Parties
“Upper” Higgins Framework
Cards, Tokens and Protocols Framework
Plug-ins
Protocol Provider-Plugins
Implement RP protocols
CardSpace
OpenID
I-Card Provider-Plugins
Implement card types
Managed
Personal
Relationship
Token Provider-Plugins
Implement security tokens
SAML
UN/PW
Kerberos
X509
Idemix
“Lower” Higgins Framework
Identity Attribute Serviee and the Context Data Model
Plug-ins
IdAS Context Providers-Plugins
Connect to existing data sources
LDAP
XML File
RDF
Open Social
Others…

30. Context Data Model Specifications
Identifiers (UDIS)
Discovery (UDI Resolution)
Ontology (HOWL)
UDI (Universal Data Identifier)
Higgins XRDS Service Endpoints
Higgins Context Descriptors
[Planned]
Higgins Ontology Language (HOWL)
OpenID
Cool URIs
XRI
XRI
XDI
WS-Addressing
RDFS / OWL
Key:
W3C
OASIS
De facto
v10