- 10 IT security companies to watch
- Mobile phone chargers are energy vampires
- Smartphone smackdown: Storm vs. iPhone
- Video game collisions I'd like to see
- Court slams door on sale of spyware
Dave Kearns provides the information you need to evaluate, install and maintain your corporate identity management system.
I first came across Paul Trevithick from participating in conversations with the Identity Gang. I knew Trevithick was involved with a group called socialphysics.org, but hadn't paid a lot of attention to what that group was doing (mea culpa).
Last week, at the Internet Identity Workshop, I listened as Trevithick presented a session on the Higgins Trust. It's not a philanthropic society but a framework that can be used to build user-centric, identity-enabled services and applications.
Higgins was originally proposed as the Eclipse Trust Framework, a project of the Eclipse Foundation. For those unfamiliar with Eclipse, it's self-described as "an open platform for tool integration built by an open community of tool providers." That is, it's an open-source development environment for developing open-source applications. That seems self-referential but, in fact, you could use the environment to develop completely closed, proprietary systems - it would just take much longer and be more difficult.
Higgins isn't an application, nor is it a service or a protocol. Rather, it's a description of an architecture - a framework - that, if implemented would provide an abstraction layer to make it easy to manage identity information (including rich profiles, presence, etc.) and social networks across multiple heterogeneous (new or existing) computer mediated "contexts." I put contexts in quotes because the Higgins-specific meaning is somewhat different to the one I usually use in this newsletter, but not a lot. As Trevithick used it, he meant any kind of group, such as a project team, department, association, informational network, family, customer group or supplier network within which you (and, therefore, your identity) could exist.
Picture, perhaps, a virtual directory (or join engine) for all those contexts, and you'll be close to the meaning as SocialPhysics sees it. The framework envisions context provider plug-in implementations that could range from directories such as LDAP servers, identity management systems, mailing list and social networking systems, to collaboration spaces such as file repositories and other shared spaces, to communications networks such as e-mail, instant messaging or voice. That's a vision that goes even further than most of the virtual directory frameworks I've come across.
Dave Kearns is a consultant and editor of IdM, the Journal of Identity Management.
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment