1. MSDN Event Spring, 2007 Lynn Langit Developer Evangelist Microsoft Corporation http://blogs.msdn.com/SoCalDevGal

2. Next Generation Identity Management with Windows CardSpace

6. Why an Identity MetaSystem? Prevent Phishing Attacks Prevent Identity Theft Reduce User Names and Passwords Put the User in Control

8. Identity Metasystem Seven Laws User Control and Consent Minimal Disclosure Justifiable Parties Pluralism of Operators Human Integration Consistent Experience Directional Identity

9. Identity System Model User Identity Provider Relying Party Trust Identity Selector Claims Token translation

11. What is CardSpace? No Personal Data Processing Engine Replace User Names and Passwords Digital Identity in CardSpace Built on .NET Framework 3.0

12. CardSpace as a Metaphor My Business My Government My Bank My School

14. Working with CardSpace

16. Protocol Drill Down Identity Provider (IP) Relying Party (RP) Client Client would like to access a resource RP provides identity requirements: format, claims & issuer of security token 1 2 User 3 Client shows which of known IPs can satisfy requirements User selects an IP 4 5 Request to IP Security Token Service for security token providing user credentials 6 IP generates security token based on RP’s requirements with display token and proof of possession for user 7 User views token and approves the release of token 8 Token is released to RP with proof of possession RP reads claims and allows access

17. Adding Information Card Support to a Web Site

19. Participants – Identity Provider Security Token Service SSL Certificate Information Card Creation and Provisioning Examples

20. Participants – relying party Policy Code to process token SSL Certificate

21. Participants – Clients Browsers Internet Explorer, Firefox, etc. Non-Windows Rich Clients

22. Converting a Traditional Web Site to Accept Information Cards

24. Extended Value SSL Certificates Better End User feedback More Secure Implemented in Internet Explorer 7 Extends SSL

25. Card Revocations relying party Identity Provider

26. Accessing multiple web sites with a single Information Card

29. Lynn Langit Developer Evangelist Microsoft Corporation http://blogs.msdn.com/SoCalDevGal