noakes

Managing Online Identity: 

Managing Online Identity John Noakes Microsoft Ltd 8 November 2001 jnoakes@microsoft.com

What If You Could… ?: 

What If You Could… ? Access the entire Internet with one password Buy anything instantly Be alerted to the things you care about Change your address in one place Use a single calendar across your work and family

How Would That Change Your Business?: 

How Would That Change Your Business? Reach new customers Provide better service Create revolutionary new applications Gain competitive advantage Differentiate your company .NET My Services creates the opportunity to do things that couldn’t be done before

Why are MSFT doing this?: 

Why are MSFT doing this? Users use multiple computing platforms Inconsistent, impersonal, user not in control These platforms often don’t work well together

What is ?: 

What is ? .NET is a platform of middleware designed to facilitate a next-generation user experience on the Internet It allows people to use multiple web sites at one time and gives the programmer the facilities to build applications and web sites that integrate and present themselves on multiple devices

Shorter Description…….: 

Shorter Description……. .NET is Microsoft’s platform for a new computing model built around XML Web Services Microsoft Corporation Annual Report, 2001

How do you build it?: 

How do you build it?

So, what’s a “Web Service”?: 

So, what’s a “Web Service”? Think of a web service as like a web site without a user interface, that serves programs instead of people. Instead of getting requests from browsers and returning web pages in response, a web service receives a request formatted in XML from an application, performs a task, and returns an XML-formatted response."

What is a “.NET Web Service?”: 

Digital Safe Deposit Box “Any time, any device” Web sites Web services Applications Access with User’s permission What is a “.NET Web Service?” Private & Secure

User-Centric Web Services: 

User-Centric Web Services

Not Just Users…: 

Not Just Users…

.NET Alerts: 

.NET Alerts .NET My Services Outbid on an auction Bank account is overdrawn Plane is late Appointment has been canceled

User Authentication Is Crucial: 

User Authentication Is Crucial Authentication “Who are you?” Present credentials Verify credentials The process of uniquely & securely identifying a user (before determining what they can do) Passport is an authentication system Extends single sign-in to the Internet Running at very high scale since 1999 Over 200 million accounts Over 3.5 billion authentications each month Over 75 partners live, 300 more implementing

Remaining ChallengeBridging Islands of Authentication: 

Remaining Challenge Bridging Islands of Authentication Passport  Enterprise Need separate credentials today Unlikely to converge to single system Enterprise  Enterprise Need separate credentials today Unlikely to converge to single system Passport  Operator Need separate credentials today Unlikely to converge to single system 3. 1. 2. Trust between organisations is critical to accelerate XML Web services adoption Enterprise Operator Enterprise

Trust Principle: Privacy: 

Trust Principle: Privacy End user has control over their data and who can access it Microsoft will not use .NET My Services or Passport data for any secondary purposes We will not rent, sell, or market based on it Commercial platform operators have same privacy, security, operational bar as Microsoft Partners own their data, customer relationships MS applications, services play by same rules

Passport Internet-wide Authentication Service: 

Passport Internet-wide Authentication Service Operational Infrastructure World-wide data centres 24x7 Availability Massive Scale Challenges Operational Excellence Lives Outside of the Firewall Disaster Recovery Denial-of-Service Attacks

Authentication Techniques Supported by Passport: 

Authentication Techniques Supported by Passport Credentials Today Username / password / PIN Phone Number / PIN Credentials Planned in 2002 Digital Certificates Smart cards Biometrics (fingerprint, retina, voice) Devices Today Any device with a Web browser Cell phones (WAP) Windows rich-client applications

Facts About Passport: 

Facts About Passport Users choose what data is shared with partners Partners do not share their data with Passport Passport collects a limited set of user information and guards that information with an industry leading privacy policy Passport does not track what users do on the web Microsoft will not use Passport information to market to customers Passport is not required to use Windows XP MSN sites play by the same rules as other partner sites

Benefits for Consumers: 

Benefits for Consumers Single sign-in Only one user name and password to remember Common experience on all participating web sites Anytime, anywhere, any device Personalisation associated with user, not device Authentication from PC, PocketPC, cell phones Privacy and security Users in control of their information Users have the choice to be authentication without sharing any personal information Faster & easier online purchasing

Benefits for Partners: 

Benefits for Partners Enables deeper relationships with customers Single click log-in removes registration barriers Passport identifies a customer consistently across multiple Web sites Authentication for additional services Lets partners focus on core competencies Microsoft manages evolution of new technologies (mobile devices, smart card, biometrics) Microsoft supports users (password resets) Saves money

Information held in a Passport Account: 

Information held in a Passport Account Required to create Passport – part of core profile *Attributes may be expanded over time BUT Passport does not currently store more than this Optional core profile data Optional when payment data is added

Slide22: 

FUTURE Future Features… Personas Enabling users to adopt different roles or persona’s Group management Enables Passport IDs to be associated with groups Delegated Administration Owner of group can control membership Allows businesses or orgs to have their own Passports as .NET identity for their employees/members Windows XP Integration Seamless Passport Auth at Windows login Kerberos authentication integration

Passport Usage Today: 

Passport Usage Today Over 270 signed and implementing 77 total live today 64 live express purchase 13 live Single Sign In (SSI) Some examples: 800.com 800Flowers.com Starbucks.com Expedia.com Office Depot OfficeMax McAfee.com Radio Shack Victoria’s Secret Catalog Buy.com

Launch: 

Launch UK companies working with Microsoft on .NET and Passport

Today: 

Today Today, Microsoft is the only operator of Passport Passport Authenticated Users Passport Trust Broker Partner Site Partner Site Partner Site

Passport Federation in 2002: 

Kerberos-based federated authentication network Partner Authenticated Users Enterprise Authenticated Users Passport Federation in 2002 In 2002, Microsoft, enterprises, and online partners can be part of the federated Passport network Passport Authenticated Users Passport Trust Broker

Enables An Internet Trust Network: 

Kerberos standard provides opportunity for other networks to peer with Microsoft Passport Enables An Internet Trust Network Trust Relationship Kerberos-peered authentication networks

Open Access: 

.NET My Services Open Access Any OS: Windows, Windows CE, UNIX, Mac, Palm, etc. Any language: C, C++, VB, Pascal, Cobol, Java

What are we saying to smart card companies?Make money with : 

What are we saying to smart card companies? Make money with Support Windows 2000 / XP to drive adoption of Smart Cards Support Passport to drive increased sales of Smart Cards Participate in the industry opportunity that .NET provides to increase revenue by creating additional products and services

What is available when?: 

.NET My Services SDK .NET My Services test data centre live .NET My Services data centre live What is available when? Deploy Passport; Learn XML Web Services Begin with .NET My Services SDK (local environment) Begin with .NET Alerts SDK preview (includes alerts emulator) Develop to .NET Alerts SDK – live service .NET My Services test cloud

Your Opportunity: 

Your Opportunity Great building block services available today Adopt .NET Passport for authentication Use .NET Alerts for customer engagement Use .NET My Services SDK available now Solutions that couldn’t be built before Opportunity for a new wave of “killer apps” Users will pay for valuable services Leverage Microsoft’s investment and bet The code you need to get started is available today!

Software You Can Use Today: 

Software You Can Use Today .NET My Services SDK .NET Alerts SDK Download from www.betaplace.com .NET Passport SDK http://msdn.microsoft.com/myservices

So, finally, let’s have a look at what web services may look like in the future…….Demo : 

So, finally, let’s have a look at what web services may look like in the future……. Demo

Slide34: 

© 2001 Microsoft Corporation. All rights reserved.