Archive

Posts Tagged ‘mobile phones’

IIW XIII: Yubico

October 20th, 2011

Brief introductions. Yubico offers Yubikeys that help with authentication: low cost and simple! Acts as a keyboard, enters user password and 32 character passcode. Easier than smart cards (insert into USB port, push a button).

Lots of users: 1M users + 16k customers in 95 countries. Use cases: Google for internal staff, PayPal, Fedora, lastpass. Yubico is self-service: hardware sales on web store, free and open source server components and virtual appliance for remote access (enterprise-class VPN.

Versions of Yubikey: regular: one-time password, OATH (works with OTP – one-time passcode, not same as oAuth) standard, Static password, and Challenge response key. Secure life cycle: “trust no one.” Secure your servers.

Key is robust: sealed, simple. Accidentally went through a washing machine for several weeks and worked fine.

Future vision: one key for all Internet: YubiCloud validation service, 3rd party single sign-on and SAML. High security, Easy to use, Low cost. Plans to work with mobile phones via nearfield communications (NFC).

Demo (with keys) and questions. Here’s a video on how Yubico is working with Google Apps in Sweden. They’re working on supporting Google Apps here soon. Here’s a page where you can test your key.

tools , , , , , , , , , , , , , ,

11 Identity Trends

January 31st, 2011

Salvatore D’Agostino at DigitalIDNews posted an article earlier in January, 11 identity trends to watch in 2011, in which he pointed out that despite the proposed National Strategy for Trusted Identities in Cyberspace and the Federal Identity, Credentialing and Access Management Guidance (Draft, PDF), ”national ID programs, social networking, mobile and e-commerce are all moving out on their own.” The author’s list (with my emphasis) includes:

1. Mobile identity always has been and will continue to be the biggest game in town. Each year nearly 5 billion smart card technology subscriber identity modules are sold. And as smart phones grow in sophistication and as a result occupy an increasing percentage of user screen time they will become the most important area in the identity marketplace.

2. None of the Facebook, Google, OpenID, triad will actually manage to issue trusted identities in 2011 and consumers will continue to fail to realize they are the product and not the customer for these and many other identity providers.

7. The User Managed Access work of the Kantara Initiative will gain support as it addresses the overarching requirement of the need for user control of personal information in the era of shared infrastructure.

9. Consumers will demand the adoption and benefits of commercial off-the-shelf application software to provide privacy and identity protection of data at rest and in motion via encryption and secure channels in their day to day communications with banks, health care organizations, and other organizations even in those states where it is not mandated.

11. Identity theft and fraud will continue to grow and be subsidized by consumers via premiums, user fees and interest rates without the mandate for strong interoperable identities. And while the National Strategy for Trusted Identities will talk the talk it remains to be seen if it can walk the walk.

Coaching moment: As passive customers of digital services, we are prone to greater influence and manipulation by the system, for the benefits of the system and not for ourselves. If we wish to empower ourselves–and the commercial marketplace generally–with better and more trustworthy practices, we will need to be active and even vocal supporters of the alternatives that lead us in that preferred direction. This isn’t as scary as it might seem. It just means making certain choices more mindfully, more aware of the cost of “free.”

future, records, tools , , , , , , , , , , , , , , , , , , , ,

Your Network, Your Reputation

August 3rd, 2009

With the rapid growth and use of social networks like MySpace, Facebook, Twitter, and many others, there’s a growing interest by service providers, marketers, and hosting companies in mapping this fertile ground. Your network (online and in person) is where your reputation resides. What does your network say about you?

What to Measure?

What to Measure?

IBM (a company with more than 38,000 patents) published a paper called Social Ties and Their Relevance to Churn in Mobile Telecom Networks in which the authors point out that it’s not the individuals that are important. It’s their relationships. From the abstract, “Exploring the nature and strength of these ties can help understand the structure and dynamics of social networks and explain real-world phenomena, ranging from organizational efficiency to the spread of information and disease.”

The bottom line here is that if enough of your friends don’t like something, there’s a tipping point where people start changing to something else. In the case of mobile phones, for instance, lots of people will get a new phone when their provider becomes a problem, and their friends agree about that problem.

There are two parts to this issue. First: whether you are a leader or a follower. Marketers and advertisers really care about leaders because they will influence their friends to do (or not do) something. Second: the mapping process can get rather personal. The IBM paper above looks at the “aggregate” or group behavior of a network. However, tools can be tuned or created to be very specific about your network: whom you see, how often, and who else they’re connected to.

In the case of politics where transparency is informative, you can see nice, detailed visualizations of networks at work around TARP (the government’s Troubled Asset Relief Program, or “bank bailout” money), federal funding earmarks, or health care. But what about when it gets personal?

Coaching moment: Records of your relationships and your network are everywhere: in your social networks, in your email, on your phone, records of bridge tolls, and more. The mapping technology doesn’t yet work in real-time, but it’ll happen. By itself, this isn’t the major concern for me. The really big problem lies in the fact that we don’t have rules for how this information can or should be used.

Our corporations do not have the same concerns, priorities, or moral compass that people do. Corporations are motivated by what the company can do that is profitable and makes their shareholders happy. There are no laws or other forms of guidance about what proper social behavior is, largely because as a society or a culture, we’ve never talked about it.

I suggest now is a good time to start talking. With your friends. What do you want in an Information Policy Platform?

friends/family, history, records, tools , , , , , , , , , , , , , , , , ,

Switch to our mobile site