A question I've been getting lately is "what does an Identity Hub look like?" As regular readers will know, the Identity Hub/Identity Bus is a topic we've talked a lot about recently (click here if you're not familiar with the topic). So far, though, there's nothing even close "in the field." There are a couple of things, both still theoretical at this point, that encompass some of the functionality, though. One I've mentioned before and one I should have.

I told you a bit about the Identity Oracle ("How the identity oracle could solve the privacy problem") last fall. It’s the concept that the Burton Group’s Bob Blakley has proposed – primarily as a privacy-protecting scheme, but with implications for the Identity hub. In essence, the Oracle takes a question/request from a party that’s looking to acquire information then formulates a reply based on identity data it has at its command. The best example is a person wishing to purchase an alcoholic beverage, the seller queries the oracle which replies either “yes” or “no” that the potential purchaser satisfies the requirements (both legal and financial, and possibly social) to complete the transaction. All without revealing any specific data. This is, in effect, a data transformation – the entity’s age, place of residence, credit score/bank balance - perhaps religious preferences – are transformed into a simple yes/no response. That’s one aspect of what I envision the Identity Hub doing.

Beyond data transformation, though, there’s also protocol transformation. This is something the Concordia Project is involved in.

Last week at the Internet Identity Workshop I had the privilege of sitting in a session on Concordia presented by the “protocol princess” herself, Eve Maler (her day job is Technology Director at Sun, but that’s so mundane) and realized that this was a step on the road to the protocol transformation part of the Identity Hub. Concordia (born from the Liberty Alliance, but now operating independently) doesn’t create products or specifications. What it does, so far, is to create “use cases.” Then members can build or modify products and services that solve the problems described in a use case.

As the Project defines itself:
“Project Concordia is a global initiative designed to drive interoperability across identity protocols in use today. It does this by soliciting and defining real-world use cases and requirements for the usage of multiple identity protocols together in various deployment scenarios, and encouraging and facilitating the creation of protocol solutions in the appropriate homes for those technologies.

Dave Kearns is a consultant and editor of IdM, the Journal of Identity Management.