IBM and Novell Monday announced their support for an open source project aiming to give users more control over how information such as passwords and financial details are shared across multiple Web sites.
The two companies, along with Parity Communications, will contribute code to Project Higgins, a concept developed by Harvard Law School's Berkman Center for Internet and Society. The project is managed by the Eclipse open source foundation.
The future application is envisioned to allow users the simplicity, for example, of changing their address across multiple Web accounts. Users would control their own information rather than external organizations, IBM said, setting rules for how much personal information businesses such as an insurance company or bank would see.
The Higgins code will support Linux, Windows and other operating systems, IBM said. IBM said it will incorporate Higgins into its Tivoli management software with support from other software vendors.
On the same front, Microsoft is marshaling support for InfoCard, its proprietary version of a secure identity manager that is scheduled to ship with its next-generation OS, Windows Vista, this fall. InfoCard is a second thrust by Microsoft, which failed to see wide implementation if its Passport authentication program.
But the task of identity management is daunting because of regulatory requirements of different governments, said proponents of the Higgins project.
"We don't believe that one single company, vendor or expert can solve this," said Dan Bailey, an IT safety and security architect at IBM.
The open-source community will be able to use the Higgins code to develop their own specific clients that implement a service-oriented
architecture and Web services approach to identity management, Bailey said.
Supporters of Higgins hope that Web site developers will realize the value that a structured identity application brings users
and make their sites compatible with Higgins' APIs.
Bailey said the Higgins code should be released by year-end, and IBM will incorporate the code into its Tivoli Access Manager
and Tivoli Identity Manager software.
Project Higgins is a welcome initiative, but the announcement seems to make light work of the vast procedural and business
issues involved with implementation, said Graham Titterington, principal analyst at Ovum.
"My impression of the tone of it is there is an awful lot of bridges you've got to cross and a whole lot of work to be done,"
Titterington said.