
Digital Identity
Description
Alles über E-Books | Antworten auf Fragen rund um E-Books, Kopierschutz und Dateiformate finden Sie in unserem Info- & Hilfebereich.
More details
Other editions
Additional editions

Content
- Intro
- Table of Contents
- Foreword
- Preface
- Who Should Read This Book
- Conventions Used in This Book
- Comments and Questions
- Safari Enabled
- Acknowledgments
- Introduction
- Business Opportunity
- Digital Identity Matters
- Using Digital Identity
- The Business Context of Identity
- Foundational Technologies for Digital Identity
- Identity Management Architectures
- Defining Digital Identity
- The Language of Digital Identity
- Identity Scenarios in the Physical World
- Identity, Security, and Privacy
- Digital Identity Perspectives
- Identity Powershifts
- Conclusion
- Trust
- What Is Trust?
- Trust and Evidence
- Trust and Risk
- Reputation and Trust Communities
- Conclusion
- Privacy and Identity
- Who's Afraid of RFID?
- Privacy Pragmatism
- Privacy Drivers
- Privacy Audits
- Privacy Policy Capitalism
- Anonymity and Pseudonymity
- Privacy Principles
- Prerequisites
- Conclusion
- The Digital Identity Lifecycle
- Provisioning
- Propagating
- Using
- Maintaining
- Deprovisioning
- Conclusion
- Integrity, Non-Repudiation, and Confidentiality
- Integrity
- Non-Repudiation
- Confidentiality
- Cryptography
- Secret keys
- Public key cryptography
- Hybrid key systems
- Public key cryptosystem algorithms
- Message Digests and Hashes
- Digital Signatures
- Digital Certificates
- Certificate Authorities
- Certificate Revocations Lists
- Public-Key Infrastructures
- Going Further
- Conclusion
- Authentication
- Authentication and Trust
- Authentication Systems
- Cookies
- ID and Password
- Password management
- Password reset
- Challenge-Response Systems
- Digital Certificates
- Biometric Devices
- Smart Cards
- Authentication System Properties
- Practicality
- Appropriate Level of Security
- Locational Transparency
- Protocol Insensitivity
- Appropriate Level of Privacy
- Reliability
- Auditability
- Manageability
- Federation Support
- Conclusion
- Access Control
- Policy First
- Responsibility
- Principle of Least Privilege
- Accountability Scales Better than Enforcement
- Authorization Patterns
- Mandatory and Discretionary Access Control
- User-Based Permission Systems
- Access-Control Lists
- Role-Based Access Control
- Abstract Authorization Architectures
- Digital Certificates and Access Control
- Conclusion
- Names and Directories
- Utah.gov: Naming and Directories
- Naming
- Namespaces
- Uniform Resource Indicators: A Universal Namespace
- Cool URIs Don't Change
- Directories
- Directories Are Not Databases
- An Example Directory
- Enterprise Directory Services
- Domain Name System
- RMIRegistry
- X.500: heavyweight directory services
- LDAP
- Aggregating Directory Information
- Metadirectories
- Virtual Directories
- Conclusion
- Digital Rights Management
- Digital Leakage
- The DRM Battle
- Apple iTunes: A Case Study in DRM
- Features of DRM
- DRM Reference Architecture
- Trusted Computing Platforms
- Specifying Rights
- XrML
- Conclusion
- Interoperability Standards
- Standards and the Digital Identity Lifecycle
- Integrity and Non-Repudiation: XML Signature
- Confidentiality: XML Encryption
- Authentication and Authorization Assertions
- Example SAML Use Cases
- Identity Provisioning
- SPML Requests and Responses
- Representing and Managing Authorization Policies
- Conclusion
- Federating Identity
- Centralized Versus Federated Identity
- The Mirage of Centralized Efficiency
- Network Effects and Digital Identity Management
- Federation in the Credit Card Industry
- Benefits of Federated Identity
- Digital Identity Standards
- Microsoft, IBM, and the WS-* Roadmap
- OASIS
- Liberty Alliance
- Internet2 and Shibboleth
- The Future of Federation Standards
- Three Federation Patterns
- Pattern 1: Ad Hoc Federation
- Pattern 2: Hub-and-Spoke Federation
- Bank of America: a cautionary tale
- Scenario 3: Identity Network
- Addressing the Problem of Trust
- A Secure, Protected Environment
- The Future of Federated Identity Networks
- Conclusion
- An Architecture for Digital Identity
- Identity Management Architecture
- The Benefits of an Identity Management Architecture
- Success Factors
- Roadblocks
- Identity Management Architecture Components
- Conclusion
- Governance and Business Modeling
- IMA Lifecycle
- IMA Governance Model
- Initial Steps
- Creating a Vision
- IMA Governing Roles
- Primary Roles
- Supporting Roles
- Resources
- What to Outsource
- Understanding the Business Context
- Business Function Matrix
- Creating the Business Function Matrix
- IMA Principles
- Conclusion
- Identity Maturity Models and Process Architectures
- Maturity Levels
- The Maturity Model
- Level 1: Ad Hoc
- Level 2: Focused
- Level 3: Standardized
- Level 4: Integrated
- The Rights Steps at the Right Time
- Finding Identity Processes
- Evaluating Processes
- A Practical Action Plan
- Filling the Gaps with Best Practices
- Conclusion
- Identity Data Architectures
- Build a Data Architecture
- Processes Trump Data
- Processes Link Identities
- Employee Provisioning
- The Identity Data Inventory
- Data Categorization
- Identity Data Audit
- Identity Mapping
- Process-to-Identity Matrix
- Identity Data Structure and Metadata
- Exchanging Identity Data
- Principles for Identity Data
- Conclusion
- Interoperability Frameworks for Identity
- Principles of a Good IF
- Contents of an Identity IF
- Standard Status
- Listing Standards
- Example Interoperability Framework
- A Word of Warning
- Conclusion
- Identity Policies
- The Policy Stack
- Attributes of a Good Identity Policy
- Determining Policy Needs
- Business Inspired Projects and Processes
- Security Considerations
- Meeting External Requirements
- Feedback on Existing Policies
- Writing Identity Policies
- Policy Outline
- An Identity Policy Suite
- Naming and Certificates
- Passwords
- Encryption and Digital Signatures
- Directories
- Privacy
- Authentication
- Access Control
- Provisioning
- Federation
- The Policy Review Framework
- Assessing Identity Policies
- Enforcement
- Procedures
- Conclusion
- Identity Management Reference Architectures
- Reference Architectures
- Benefits and Pitfalls
- Reference Architecture Best Practices
- Using a Reference Architecture
- Components of a Reference Architecture
- Technical Position Statements
- Making Decisions About Technical Positions
- Consolidated Infrastructure Blueprint
- Goal State CIBs
- System Reference Architectures
- Conclusion
- Building an Identity Management Architecture
- Scoping the Process
- Which Projects Are Enterprise Projects?
- Sequencing the IMA Effort
- A Piece at a Time
- Conclusion: Dispelling IMA Myths
- Index
System requirements
File format: ePUB
Copy protection: Adobe-DRM (Digital Rights Management)
System requirements:
- Computer (Windows; MacOS X; Linux): Install the free reader Adobe Digital Editions prior to download (see eBook Help).
- Tablet/smartphone (Android; iOS): Install the free app Adobe Digital Editions or the app PocketBook before downloading (see eBook Help).
- E-reader: Bookeen, Kobo, Pocketbook, Sony, Tolino and many more (not Kindle).
The file format ePub works well for novels and non-fiction books – i.e., „flowing” text without complex layout. On an e-reader or smartphone, line and page breaks automatically adjust to fit the small displays.
This eBook uses Adobe-DRM, a „hard” copy protection. If the necessary requirements are not met, unfortunately you will not be able to open the eBook. You will therefore need to prepare your reading hardware before downloading.
Please note: We strongly recommend that you authorise using your personal Adobe ID after installation of any reading software.
For more information, see our ebook Help page.