Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Setting the record straight on Sxip and patents

Sxip to offer non-assertion statements
Security: Identity Management Alert By Dave Kearns , Network World , 07/18/2007
Kearns
Sign up for this newsletter now!

Dave Kearns provides the information you need to evaluate, install and maintain your corporate identity management system.

  • Share/Email
  • Comment
  • Print

Recently there was a minor flap over patent issues and user-centric identity systems. Someone had discovered that Dick Hardt and Sxip Identity had applied for some U.S. and U.K. patents covering identity systems that appeared to cover technology used in the OpenID system.

Now anyone who knows Dick or has worked with Sxip is well aware that this company is no Eolas (the folks who claim a patent on browser plug-ins), nor is there any indication that Sxip wants to quietly have people adopt a standard that it later claims is covered by its intellectual property (IP).

Sxip does own quite a bit of IP related to its Sxip Access product, and a lot of the OpenID system could be said to derive from the Sxip model. It could be said, in fact, that Hardt “invented” the three-part identity system of Identity Provider, User and Relying Party (RP, or Identity Consumer).

Since OpenID is, at least nominally, an open source project, patent issues are red flags to many of its proponents.

So it’s with a real sense of relief that I can report that Hardt stated to me unequivocally, “We will issue non-assertion statements similar to other respected corporate patent holders [e.g., Sun and IBM] as specifications we participate in are finalized.”

He went on to note that, “We have been open to spec developers and the core OpenID community that we hold patents in this area.” Evidently it’s not the OpenID stakeholders raising a potential stink, but those whose interests lie in other identity systems and methods.

This seems like a good time to give you an interim report on Sxipper, Sxip’s well-designed Web-based single sign-on solution plus (SSO+). The “plus” is a form-filling tool that allows the first visitor to a form to map the fields and send the resulting semantic map back to the Sxipper site. Subsequent Sxipper-enabled visitors to that form will see their own data automatically populated into it.

The project is still listed as beta software and is undergoing seemingly endless “updates” (which are very quietly and automatically installed. I wish other software vendors would adopt Sxipper’s update methodology!). But, for me, it’s the most-compelling reason to install Firefox as your primary browser. Sxipper has improved greatly in usability and functionality since I started using it last fall and now I’d be severely impacted if it were no longer available to me. It’s really the best, if not the first, user-centric identity tool.

Dave Kearns is a consultant and editor of IdM, the Journal of Identity Management.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comments (4)
Login
Forgot your account info?

I think you've got the history a bit wrong here...By Chuck Mortimore on July 25, 2007, 12:28 amThe original SXIP 1.0 protocol still had massively centralized trust. You were required to trust a single centralized Rootsite, controlled by Sxip, that was used...

Reply | Read entire comment

3-part ID modelBy David Kearns on July 23, 2007, 11:01 amPat, Robin - Now guys, you know I respect your opinions, but neither the SAML model nor Kerberos is anything like the 3-part user-centric model hat is OpenID....

Reply | Read entire comment

"Invention" of IDPBy Robin Wilton on July 23, 2007, 6:08 amPat's counterexample can also be significantly pre-dated if you consider that architectures such as Kerberos, RACF Passtickets and others all embody the same principle:...

Reply | Read entire comment

RE: Setting the record straight on Sxip and patentsBy Pat Patterson on July 21, 2007, 10:04 pm"It could be said, in fact, that Hardt 'invented' the three-part identity system of Identity Provider, User and Relying Party (RP, or Identity Consumer)." - come...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Network World,to go. Wherever you are. Breaking news delivered to your mobile device. Select the hottest topics in networking and start receiving Network World on your mobile device today.