WebサービスにおけるID管理技術とその利用事例

 2005/05/20
S A C S I S 2005
1
! ! " # $ –
!
"
#
$
%
&
'
()
*
+
,
.
/
0
#
1
2
3C N G O P 4 Q 5I M R 6 S $ K T7 J G 8O N M 9= :> AE ; < UUC= > (?@AB
C
D
D
3
4
5
6
$
7
8
E
F
G
H
I
J
K
L
M
V
W
X
V
V
D
E
YR
S
K
T
J
G
O
N
M
Z
[
I
P
K
G
K
L
M
W O P O \ I ] I P K ^U
"# $ % &) *' + (, - ) . / 0 ' 1 * 2 3 4 ,
5 6 7 ! 8 " 9 0 :# : $ ; 0 : % < &
–
_ ` a 8 bM D c bM ; < d e f 8 g h
2005/05/20
S A C S I S 2005
4
! " "#& ' ( $ ) %
) *+ , - . / 0 ' 1 *2 3 4 ,
' ( ) *
#% & ' $ ( % ) &* + '( , - ./) 0 12 3 4 567 8
=D >E 5F ?G @ A B C
ij
k
l
5
m
n
o
p
q
r
s
t
u
v
w
k
6
xy
z
{X
|
H9 : ; I <H J = K > L 8 M ? N"@ A B O.CP Q D RSE T U V W X %YZ [ \ ]^_ ` a b
cr Os d t e u W v X w W X fx yg %th i z jk[ { l | m } n ~ >  o € jpjp q q
‚ƒ
d
„
jp
…
x ‹ OŒ P y Q t A u j‰Hv S T ŠU V W X † ‡ jˆ ‰Š
–
–
–
–
–
–
–
–
' ()*
* + , % - . # / 0 1
!$ % " #& '
()*+,
"#¤ $ %
2 3 ˆ‰ 4
Š‹ 5 k (ŒA$ `  }Ž ~ 7  a 7  ' 4k U€ ‘ ’ “ ‚ƒ „ x… 8 5 † ‡
ID
ID
ID
ID
,
+
• – — ˜ A U ™ š (› œ
+
 5 ž k Ÿ ¡ ¢A£ " Ž U Id P
ID
ID
Id P
A
A
B
C
B
IdP
C
ID
A
ID
ID
B
ID
”
”
”
”
IdP
ID
ID
"#
$%
‚Ž f g ! " ! " # $ !% " ID
ID
ID
Id P
A
•
A
•
B
! "
; < 6 7 , 8 = > ? @ A
B
C
D
E
F
# $ % * + , -% = > #G $H %1 '
Ž f g & ' ( ) % . / % 2 3 %
A B C D E I
4 5 6 7 , 8 9 : !
"
ID
B
L A

ID
A
ID
B
ID
. 0 % ! " # $ % & '
1'%
. / 0 ( 1 ) 2 3 * + , - L A
ID
•
•
C
5 6 78 9 : ; < =
–
–
OASIS: Or g a n i z a t i o n f o r t h e Ad v a n c e m e n t o f St r u c t u r e d
In f o r m a t i o n St a n d a r d s
SST C : Se c u r i t y Se r v i c e s T e c h n i c a l C o m m i t t e e
SAM L : Se c u r i t y As s e r t i o n M a r k u p L a n g u a g e
4
>?@ABCDE
WPs
Proprietary
J C V s
C on s ortia
Sanction (open standardization)
S D O s
“V e n n o f I d e n t i t y , F e d e r a t i o n , a n d S e c u r e W e b S e r v i c e s ”,
G a r y E llis o n , S u n M ic r o s y s t e m s
44
>?@AFGHI
WS-Se c u r i t y
I D -F F 1 . 0
I D -F F 1 . 2
X A C M L
WS-F e d
SA M L
WS-T r u s t
X rM L
WS-P o l i c y
X K M S
X M L Si g
C 1 4 N
“V e n n o f I d e n t i t y , F e d e r a t i o n , a n d S e c u r e W e b S e r v i c e s ”,
G a r y E llis o n , S u n M ic r o s y s t e m s
X M L E n c
W3 C
O A SI S L i b e r t y
P r iv a t e
4
5 6 JK L M N O P
–
‘ ’ jw x y “”• j– — ˜ Nf g
!" # $%& ' ( )
* >+ , - ./01 2 3 456 7 8 9: ; 9)< =
? @ A B 8 9: ; )< =
4
! " "#& ' ( $ ) %
) *+ , - . / 0 ' 1 *2 3 4 ,
45
Q R S S T U ! " # $ % # & ' () * +
,-™ e . š /› U& ' 0 ! „ 1 œ2 ž3 Ÿ]^
4 5
” ¡ %¢ £ Š¤ ¥¦ § "¨ © ª j« ¬ ­ Ÿ® A H ¯ ^[
67: ° ' 0 & 8/ ± 9 . , : ² ;± ; 0 — 3 . , 1 ; 0 & ³ 3 ; 0 ´ µ * 2 ; 0 ¶ · ; 0 ( * 4 - ´ ± ´ ¸ . ; 0 ¹ - 2 4 1 , ; 0 — : ( 0
6-, + º (. ) / ; 0 & ) ' ( * ) ; 0 & · ( ) ; 0 » ˜ ˜ — ; 0 ¼ & & ; 0 º ' < ( )
–
–
–
–
SAML: Security Assertion Markup Language, SPML: Service Provisioning Markup Language,
W SS: W eb Services Security, X AC ML: E x tensib l e Access C ontrol Markup Language
4
S R V ½ ¾W T ¥¿ U ¥À H ¯ ½ Á
Æ Ç“ÂÃÈ Ä $ jº ( ) Å C D E F G H I J K L M
C D N O P Q R K L ¹ ' & STU— & 0 & & J V< Nm n É
! " # $ % & # ' $ ( ) # $ * + –
–
–
Ì%NÍ
[
Î
Ï
Ƚ
¾
н
Á
j
{ | H ÂKJ k R F l J m J
–
–
–
nH Jo k pn q r s t : 9E u P v G
n q r s wx9t : yz {
,! ) - ' . / 0 1 2 3 ! ! % 4 ) ( 1 $ " ! + Ê Ë W X C D Y Z [ \ ] ^ Z [ [ _ ` a
–
–
b
c
d
ef
g
h
i
j
567 8 9 : ;<
SST C : Security Services T ech nical C om m ittee
SAML: Security Assertion Markup Language
4
! " "#& ' ( $ ) %
) *+ , - . / 0 ' 1 *2 3 4 ,
4
W XY Z [ \ ] 8 R ^ X_ ` a Z
$ % ! & " ' # ( )* * + , - ./ 0 / 1 2 * - , - 3 4 / - , 2 * 3 4 5 - 6 7 3 8
)9 : * + , - . / 0 / 1 2 9 - ; < - 3 = 0 > - * 3 4 5 - 6 7 3 8
): : +, - . / 0 / 1 2 : - 3 = 0 > - 2 . / - 3 ? 4 > - 2 : @ - > 0 ? 0 > 4 / 0 7 .
–
–
4
bccde
$ % & ! ' " ( ! %# ) % P_ "Q R S TU ) + ( ! / !"VE E W XY Y , Z[\!] ^ 26 7 8" 3 94 5 % " / 'XY ( * ) Y * Z[\!]
+ ( , ( x^ _y !" w ‡ U q * . ˜ ¡ ¢ 0 < = "V£ ‹ ¤ ˆ ‰  ž X6 7 8 9 Z[&V£ ¥
z
I
!0
{
|
}
!"'
8
f
~
V
€
:

‚
(
q
[n?
@
ƒ"V:
+
„
(
8
9
8
9
[n…†"
!" # $ % &' ( )
*
+
(
,
(
$
.
&
/
0
1
0
2
3
!
4
5
"
6 C D7 8 9 : ;LM+ : ( N< = O > ? @ A B &C D E!"D F&E D G H I J K &
1
:
+
„
(
8
9
8
9
‡
U
7
+
e
X
C
ˆ
œ

‹

ž

D
‰
Ž
Š
‹
C
ˆ
‰
Z
\"'
(
)
*
+
(
,
(
0
{
|
}
Ÿ
^
J
K"g™$
1
&R
S
š
›
!]
^
&R
S
7
j
n
!]
^
_
"
0 ˆ ‰ Z\"Y ( 1   & € 2 3
š ‘› ’ 2!] 3 ^ "“&” • >
. / 0 – — + q
+ j q n
.‡ ˜U 7+ e !]XE
ˆ ‰ ^ Š ‹ Œ _+ ˆ  q D ‰ "Ž Š ‹ C !"g™$
*, - + EED D jC D `# k a # b Fcl !m
L j no
d O !;p q ( r e f s ghtui v" LM w Nx O y !4 5 "& C D
6 7 8 9:; < = > ? @ AB C D E F G -H I J
4
L ib e r t y
v 1 .1
h t t p : / / w w w . p r o j e c t l i b e r t y . o r g / j p / r e s o u r c e s / l i b e r t y -a r c h i t e c t u r e -t e c h -g l o s s a r y -v 1 . 1 -J P . p d f
f X [ a ^ Z 8 g h 8 i [ j k \ 8 l f g i m
xNjۋ Œ y Üќҁ‚ŸÁÓ %u Ý [ Þ y w Ç „ Ô| } 9~ÕŸÖ × Š¤ Ä Ø Ù Ú
Œ‚Z [ Æ âN"œ^Þ
Ç œß à g Ñ%} ~ Š¤ ¯ ^[ ᯠjw x y w O ŸÜ 
ID
UZ[ V \ W ] X ^ Y_
` a S :T bP Q
ID
ID
:
;
(
7
< SP
H
SP
G
SP
B
SP
E
P ‰ € '  P ' F ‚ G ƒ ( „ R w…†8 9Š ‡ ‹ ˆ
M K N L O x
SP
C
I P
SP
F
SP
A
SP
D
z
ID
P QR S T
W XY Z [ \ ] 8 R ^ X_ ` a Z
$ % ! & " ' # ( )* * + , - ./ 0 / 1 2 * - , - 3 4 / - , 2 * 3 4 5 - 6 7 3 8
)9 : * + , - . / 0 / 1 2 9 - ; < - 3 = 0 > - * 3 4 5 - 6 7 3 8
): : +, - . / 0 / 1 2 : - 3 = 0 > - 2 . / - 3 ? 4 > - 2 : @ - > 0 ? 0 > 4 / 0 7 .
–
–
4
W X Y Z D [\
]E %G Œ  ( Žn  ‘o’ “ ”p 9Kq L 9• ƒ e– = —˜ i ™ C D š› C œ w…
† ‡ , = >?‡ ? jžD@ , A % ' $ 1 $ " ? % wŸ 9STQ
J
¡
G

J
P
¢
™
£
¤
h
i
j
A % ( 2 $ 1/ ' ? ( 2 & % B / ( 0 C
–
C wcrx d y]e fgz { _ |}tBh i u d ~ D  j h D v j Pn€QL ky]l m ^ _ E ‚no p S T q _ ` a rs Bt u l s v r
QrŠ
h l ‹ƒY„
d
…
v
h
d
†
d
Bh
i
d
D
j
D
j
P
Q‡„
d
…
v
u
…
Bˆ
l
r
h
l
ƒ‰
h
d
ƒP
Qrx
y]
Œ

h
d
†
d
ŽS
T

}_
‚
, = >D Bh! ? i @ , A d % D' $ j 1 $ D " j D % E ! % ‘( F 1 4 % # ’ ? r“( 2 & ” % Brx/ ( y]0 C • -– —  ^ ˜ g ˜ }™š |}~ › œ m E n
‰Bh i q d _ D ` j a D rC
w
rt
u
l
s
v
rx
y]
z
{
|}t
u
~

h
v
n€

‚
j
Y-^
ž
\
_
-H
n‰
q
_
Ÿ
¡
i
v
n¢
€

‚i
j
£
¤
¥
|f€^ ¦  ` ³ g \ ˜ ] }^^ _ § ¨‚ © ™š |}Bh i d D j D j 9r ª« ¬ ­ ® ¯ °  y] ± ²
´h i d µ kD „ j D¶ d j f™· »¼½yŽS
§ h l ƒY¸T  }_¹ ‚ º rBh i d D j D j “ ” rB
, = >! z, ! { @ , A|}Bh
% ' $ 1 $ " i! % d ( F D 1 4 j % D , 'j $ % ( G 2 4 %n•! H % 4-q1 G 1 4 2_ $ `1 / 'a # hC d ¾ ~ ¿ n€  y] ^ _ ‚
¸ ¹ t u ~  h v :t › À d Ž­ ® Á ³ \ ] ^ _ ‚
–
–
% n o p q L ib e r ty
Liberty
( I D -F F )
/
!
"
#
$
%
& / 0 ' ( ) **+ +
, - 1.
2 3( ) 4 5 6
7 8 > 9 : ; < ? & = @ A B C D : E 4 5 6 *+
F G +H M I N 5 O 6 P J Q K R 5 L
. Z S [ \ " ] # V$ WT ^ U _ V ++W %X Y : ; . ` < a L ib e r ty
( I D SI S)
W e b
( I D-W SF)
Liberty
(SAML, SOAP, WSS, XML, etc.)
W X Y Z [ \ ] 8 R ^ X _ ` a Z r
r s t u vwx
–
ã ä j½ ¾ å g N‘ ’ jw x y w O “J K Á Ý æ
A
“G o o d -l u c k , A i r l i n e G r o u p ”
j6k l kopqNY K r m s
nt M;u vNYw m opqy j Nzk x z ^{
ef
g
;
W
X
Y
Z
o| } i
¥b ¦ c § 4d ¨e
Login:
P a s s w or d : x x x
John
 à W e l c om e J oh n1 2
Y ou ’r e s igne d on.
[Liberty Alliance
B
¥ ¦ § 4 ¨ d e
]
I
J
K
L
M
NO
P
Q
RST U V W X Y Z [N\ ] ^_ ` a M Nb c d ef g I h i
5
yv- z ~, % { {  | €} x
«© ¬
ª
B­ œ
œ
, A + ~ , A % ' $ 1 $ " + ( / F 1 A % (  ! + ~ ! % ( F 1 4 % + ( / F 1 A % (
W X Y Z [ \ ] 8 R ^ X _ ` a Z r r s t u vx
–
–
çu [ A Rèó jôé ê õ ë “Fœß G jìÁ Ý í æj¿  “î ï H ¯ t ð Î Ï N¥ñ ò %
ñýŠ¤ ò [ jöÎ Ï Á "a%÷øb þ æ
^¯ ù ú "– û Š¤ [ Ä $ ¥ O P Q Ÿü
A
°² ³± ´—* µ+ ¶, ·- —y
Fº G, - ' y»¸ šw¹
¼
½
jV¿e* T¾ + —F, -G
9® ¯ q À ž
: T ok y o, J a p a n
T EL: 1 2 3 -4 5 6
E-M a il : j oh n@ a ir . c om
=? @>
*+,-®¯
¥b ¦ c § 4d ¨e
A B C DEFG H ? @ FI J K J
B
¥ ¦ § 4 ¨ d e
yvK z L , M% N{ ‚| } ƒ x
Á «© ¬
ª
B­ œ
Á œ W X Y Z [ \ ] 8 R ^ X _ ` a Z r r s t u v„x
–
Liberty Alliance
! " #
WXYZ[\]8R^ X_`aZ
! " ! # $ % & " " " % & ' & " ( & ' & –
–
4 ID
ID
IdP
! " # $ %& '
A
ID
ID
B
ID
IdP
ID
ID
… † vx
ID
!
"#
$
!
"
#
$
%
&
'
(
)*
+
,
.
/
IdP
IdP
ID
f Ä Å _ Æ
John_Sm
ith
IdP
A B C
S P
John_A B
C
8 jg 6 8 fd f6 g
ID
&' ( )*+ , - . / 0 1 2 ! 3 4 "#+ 5 67
8 ! 9 %#$: ; <%
=
>
?
@
A
#B
C
DE
F
G
H
I
J
K
ID
S P
Äg¼ fÄÅ_Ǎ
A
S P
‰  f Ä Å _ Æ
B
4
… † v‡x ! " # $ % &' (
Ç  È d e œ É Ê Ë 9: ‰  Ì Í f Î} Ï Ð q b
SP
¢ÔY9Õy Ñ _ Ö n×` } ‰ ^  ` a :Ø
Ì YÇ  ‰ ҏÓ
½
y
]
¢
:Ç

9x
‰

Ì
;
 Ì f g _  Ù Ú 9Û Ü Yq b
Æ
!
"
#$
%& ' 12() 3* +4 5 , 6 - 7. / 0 Ç 
Ǎ
Ǎ
8 9 : ; < = > ? " @
Ǎ
Ǎ
A 1B C 4 D E F Ç 
Æ
Æ
$L 1GH
M N F'IJO P HKQ Æ
R S 5 P T 7 IdP
J o h n _ S m ith
ID
IdP S P
1
8 j g 6 8 f df 6 g
8 j g 6 8 f df 6 g
la k s k 3 8 1 k a d
9 2 k 3 z n x n x ik d
la k s k 3 8 1 k a d
9 2 k 3 z n x n x ik d
la k s k 3 8 1 k a d
J o h n _ E F G
ID
ID
John_ABC
A B C
SP
X Y Z
John_E F G
E F G
SP
ID
John_X Y Z
X Y Z
SP
WXYZ[\]8R^ X_`aZ
! " ! # $ % & " " " % & ' & " ( & ' & –
–
ˆ‰ ‰) T
*+ , - &. / 0
ID
1 . F e d e ra te
2 . Id P P r o x
3 . S in g le f e
4 . T e m p o ra
5 .
S A M
d i d e n t i t y : s i n g l e s i g n -o n
ID-F
y
ID-F
d e r a t e d id e n t it y
ID-F
ry a n o n y m o u s a c c o u n t
ID-F
ID
S i n g l e S i g n e -o
L 2 .0
1723 4 5
F 1
F 1
F 1
F 1
.1
.2
.2
.2
, - 26
n
5
ˆ‰ ‰)
1.
I D
I D -F F 1.1
8 9 : % ; < 4 5 % < = > # < ? < &@ A
BCD
E
F
G
D
E
GH
I
D
E
G% < = > GJ = : K L M N O P J = : K L !
"
#
S A M L
ID
S P
Id P
S A M L
S P
L ib e r t y
ID-F F
2 .I d P
I D -F F 1.2
$
%
&
Q32R S _ 8 29 &T5 \U VS] ` a W T5X Y U Z Vb [ E C\0c ]d e^
f8 #9 g q h r L Vsi j t k \ 8 u 9 T0l m &n o T5 U S ^ pS 2
8 9 v w
8
9
v
w
Z [ 8 9 M Nv w Id P
C ir c le
o f tru s t 1
P ro x y
S P
p ro x y )
IdP A
SP
IdP B
C ir c le
o f tru s t 2
S P
L ib e r t y
ID-F F
3 .
I D -F F 1.2
'= > ( ! ) 4 5* x+ x * y + Vb
E S T0 zS&} 2 ~ > \ k &{ | U= Vb> ! E 0  M 0
-S P
- Id P
A f f i l i a t i o n ID
Id P
Af f i l i a t i o n
SP
SP
SP
SP
ID
SP
! " # $ % &'(
ID
L ib e r t y
ID-F F
4 .
I D -F F 1.2
S P
' , 28-. 9/ i € 0 ‚]1 Y j ƒ S 2M N&„T… † M
NGO ‡ M NU Vb E S T0
k] Y€ j ƒ ƒ ^ ˆ : ‰ K &„b< L VX\ u x ]T0TX{ 28Š ‹ 9 ^si € Œ ‚ 8 9 2 &Ž  T5 U Vb E S T0
Id P
S P
Id P
Id P
! " ID
S P
ID
SP
L ib e r t y
ID-F F
5 .
I D
2 34
3458 9 3: 6 ; 7 5
S S O
S A M L v 2 .0
L ib e rty
I D -F F v 1 . 1
2 0 0 3 /0 1
S A M L v 1 .0
2 0 0 2 /0 5
L ib e rty
I D -F F v 1 . 2
2 0 0 3 /1 0
Id P
#) * $ % &'&'(
+ $ , -. / , -0 1 (
ID
S A M L v 2 .0
2 0 0 5 /0 3
W S -S e c u r i t y
S A M L v 1 .1
2 0 0 3 /0 8
2
3
&
'
/
&4
5
.
X A C M L O G
OpenGridProject(OG)
2 0 0 3 /1 Q
X A C M L 1 .0
2 0 0 3 /1 0
O p e n S A M L
(S h ib b o le th )
2 0 0 3 /1 Q
)
%nopq
Liberty
Liberty
( I D -F F )
/
O A S IS
!
"
#
&& L ' (()v )2 * . 0 + /,
S $ - A . % /
M
0 1& ' 2 3 4
5 6< 7 8 9 : = ;
$
>
8 C (
(
)
? 2
@
A B 23 4
E
)F K G L 3 M 4 N H
D
)
I
J
3
O
P
O
,X Q Y Z [ ! T" UR \ S ] T ))U #V W 8 9 , ^ : _ Liberty
(ID
S IS )
W eb
( I D -W S F )
Liberty
(SAML, SOAP, WSS, XML, etc.)
5
WXYZ[\]8R^ X_`aZ
! " ! # $ % & " " " % & ' & " ( & ' & –
–
54
ˆŠ S! ‰ " ) # $ ! # " % & $ *+ B , C-.DEF/ 0 1 G 2 ! 3!# H # , I + J 4 -K56 L 7 , 8 9 :;< = > ? @ A
–
–
 ‘‘ ’’ ““””MM N•N• 2–—l
m
C˜
‚™
j
k
š
›
œ
4
5
–—l
m
ž
Ÿ
‘
*¡
x

‘
’
“
”2
0
EM –—lN O P m Q 2¢R S£ ¤ ¥ T  U ‘ ’V “”.W ¦ X DEF § ¨ © ª G /) ¦ 0 ª Y ¨ Z ^š –—M‘ ’ “” N • š ¦ « š| Y ¦ ] ^ ª ¨ ‘ ’ ) «“” ©M ª N•¬ › ­œ ‚5® ™ Z2„b [
*¡
x
^–—M
N

¯
°
±
²
5
–
ˆŠ S ! ‰"#$7 8‹ %& Œ
'() * + ,- . / 0 1 2
ID-W S F
S P
S P
S P
8 * ?
3@ A 4 B 56C A 7 D 8 E* %9: ; / 0 5<= / 0 ! > 1 .
ID-W S F
! " Id P
D S
W S C
SP
3 .
4 Ý Þ % æ ç å á ã ß æ àé “ ê ” ? á â ã ä å æ ç è Ý « æ ë ì ÷ í ø ÷î ïð æÍ ç åÞá ã æ ù æ % ú û ü ÷ ø æ ñ éò ó ôùõ êí ö ?
Ý ý S þ ê ì í î ïð? ø æ ç ÷ ã ø á ä æ ç å á ã æ
2 . W
e b
W S P
#
$
%
&
'
(
)
* + , -. $ / ! "
0 1 !2 3 " # $ % &' ! " # $ %
D ST
I S
! " & ' ( ) *
–
= LMN> LO? P @ Q —
Tokyo
1 2 3 -4 5 6
: j oh n @ a i r . c om
5
ˆŠ S ‰ 7 ‹ Œ , - . / * + ! " , # $ % & '( ) * + * 0 0 1 2 3 4 5 6 + * + 6 75 55
ˆŠ S ‰ 7 ‹ Œ –
–
// 00 -J . ,F KLG M H N O I P Q R M S T UM Q V W X S Y L T Z S [
!
"
! " #
$ # \[]^ %
&
_ ` a b c b d e f5g h " * / 0 F G
–
–
\[]i j / 0 f5g h " * / 0 F G
5
' ( )*+, ! -." # / 0 1 2 3 $ 4 % 5& '6( 7 ) 6 7 8* + 9* : ; 3 < = , > - ? . @ / * AB+ C , ˆŠ S ‰ 7 ‹ Œ D4MNO > P E Q = R > SN? @ 2 3 Q 4 R 5 +?6 <7 6 4 7 7 F 5 G T H H = 9 > U ?L @: I > VJ K > L k A l m A n o pg h k A l q D r s t u vw x t u 5y z E
–
–
k A # $ l % & m' ( )A # ' *n + o, - . % 9{/ 0 1 | 2 8 34* } 5 ~ 6 7 5 88 '' $$ ## 99 ## :< +J % ) & # '' (* ); # '# 8 * +< , - & . '% =( ) #K ' * @+ , - . % =A >=?C D @G L AM NBCO P D QE F R 7G H I 7
SS TT TT %; & #' 8 ( <) # ' & '* (+ ), - # .' % U* + , - . % ` a BVS T T W X F BbcG Y Z E [SF G) J H # \ ] I ) < 7% T ' , < : ) # ' * % T ' * ) < ^ ) _7
5
ˆŠ S ‰ J Ž Id P
Discovery
S ervice
D isco very Service
Q uery Resp o n se
D isco very Service
Q uery
V
W
Pr i n c i p a l
Service Request
R
U
Service Resp o n se
S P
WSC
P erso n a l P ro f il e
Q uery
S
T
P erso n a l P ro f il e
Q uery Resp o n se
AP
WSP
P erso n a l
P ro f il e
5
0 1 2 3 4 5 6 + * + 6 75 ˆŠ S ‰ 7 ‹ Œ W X Y~ A
 '€ ‚ ƒ Z [{ | \ „ ] …^ R † _ ‡ `^ ˆ ") E
‰)abOŠ %9'
!
‹
Œ

Ž

ƒ
8
*
p
‘
’
c
d
e
€  ‚ ' ‚ “ { | „ ,” • 5 ! K– — [
–
–
–
–
–
€€  ‚‚ '“… † ‚ “ { { | | „ „ ,”˜• 8 ™ * K5J ‚ š 5› _ ^ b œ [
5
WX YˆŠZ[\S ]‰ 7 ‹ Œ CoolToys.com
Jane
Co
o
lTo
Tra
nsa
ctio
n
Hmm… J a n e
$ 3 0 0
$5
, 23
Ap
p
5. 0
3
rov
ed
co m
0
$30
W
al l et
WSP
ys.
!" # $ %
&*+ ' , ()- . S P
I nt er ac t i o n S v c
5
n,+‘
’
$
&
“
•
•
! " #$ % & ' (
•
/8 0 91 32 :3/4; 2 5 31 67< 3=> ? @ A B C D ' E FG H E I4 J K L M N O P Q R S 6
7T
! " # $ % & ' ( ) * +, •
•
. / 01 2 3 4 ' ( 05 6 7 8 9 ! " 07 8 9 # $ % : ; +
ˆ‰‰ ˆŠ
S
‰
”
•
•
–
)A * +,B ,C -D . /5 6 E0 FG12* 2 3 HIJ
45 6 78 9: ;A<= B 1>KLM45/ 6 N 78O(
9? @
P / Q R 12 3 )
* +S 2 , 5 6 E FG! HJTUS
2
V
WX
N
Y
Z
[
\
(
"
#
$
%
&
!
$
'
(
)
*+
,
-.
/
01*G 2 H 03I 4 -5 6 7 89 : ; < *= > ? @ A B @ C < D E F )> * +,, <] 1`^ fX _ _` * Ka2 HIJP
b 5 6 E FGcd WK[2 e` \ f ( _ gh i j / (
–
–
–
–
4
ˆ‰ ‰ 8 — 8 < ˆŠ S ‰
I D -F F : J a n e
ID
It’s J a n e
=>?
@
05
6
A
B
C DEG H I J F+ 0
S P
Id P
S P/ W S C
W S P
W S P
ID-W S F : J a n e
W S P
Jane
IdP
ID -F F
D S
*UV
W3:X I[\]K*Y ZM LN 8 *^ 9
F_` a T DS
S P
J a n e
W S P
ID -W S F
W XY Z [ \ ] 8 R ^ X_ ` a Z
!" "" " ! % # &$ % & ' & " ( & ' & –
–
Liberty
ID-S IS
Id e n t i t y S e r v i c e In t e r f a c e S p e c i f i c a t i o n
J ! " # $ %& ' ( )
• Liberty
W eb
*
+ , - . k5 %/6 E FG 0 1 l ' mno
2 3 4 p nq r s A B ct u v w x y
– Personal Profile
X M L
zeh i 4r k5{F9{|6 E {|FG5 6 E FlG€  ‚ nop nqG} r 6 s ~ A (
B
cƒ
?
„
…
e
6 ~ (
h i 4r k5{F9{|6 E {|FG5 6 E FlG† 9‡ ˆ ‰ nFŠ ˆG}A
B
h
i
4
r {F9{| {| k55 6 6 E E FGFG l no Ž F9‹ G5 6Œ E (
F
G
A
B
h
i
4r
{F9{| 5 6 E k5FG6 E FG l G} 6  ~ (
A
B
5
6
E
F
G
A
B
h
i
4r {F9{| 5 6 E FG G} 6 ~ (
– E m p loy ee Profile
– C ont ac t B ook
– Presenc e
– G eo-L oc at ion
X M L
X M L
X M L
X M L
5
Liberty
˜ ™ š ›œ  ž Liberty
Liberty
( I D -F F )
/
O A S IS ! " #
$S - A . % /
&
M & L ' (()v )2 * . 0 + /,
0 1& ' 2 3 4
5 6< 7 8 9 : = ;
$
>
8 C (
(
)
? 2
@
A B 23 4
E
)F K G L 3 M 4 N H
D
)
I
J
3
O
P
O
,X Q Y Z [ ! T" UR \ S ] T ))U #V W 8 9 , ^ : _ Liberty
(ID
S IS )
W eb
( I D -W S F )
Liberty
(S A M L , S O A P , W S S , X M L , e tc .)
‡ Ÿ z ¤ ¡ ¥¢ £
2005/05/20
S A C S I S 2005
56
‡ Ÿ z ¡ ¢ £ ¤ ¥
‘ ’ V “ ” t • ) * – — ˜ ™ š›
–
–
œ  " ˜™
) 2 3 ! " # $ % & ' ( ) * + , - . * žŸ ž ¡ ¢£ ¤ ¥
–
–
¢ £ 78 ¦ ‡ ¦
5 6 6$ 7 /8 * 9 0 :; 123 <=
> $ "5 $ 4 25 ?
!
"#
$%
&
'
(
)
*
+
,
@ A B 5 B 6 C 7 D 8E 9F : A ;= D E +G = < = > ? @ A B C D 1EF G H H H I
5 C J H KF LM N O P Q LR S T U VW X Y Z ;[\
]5 A^ = _I F U ` D a bH ;c d e f gh i j k + < = > ? @ I
3q l r s r ;tL u vm n- w G RgxS Ty z { o k p | } ~  €;[\

gh
i
jJ K L = <k B+ <= E > F D;?= ? M @ I IH H L = N C D
q r s r ;Z ‚ ƒ R „ k Z … † ‡ ˆ ‰ e f Š‹Œ ? @ I –
–
–
–
–
§ ¨ ¢ £ ©ª « ¬ ­ t ¦+d
§
¨
¦©
ž
ª
¡
ž
«
©
£
¬
­
®
¯
°
£
d
*
±
²
±
£
³
´
«
µ
¦
ª
£
¬
f
¯
¶ ) 3 d d £ ¬ ¶ ¦¡ ¢ ¨ £ ) © · § ´ ¡ © ª ¦£ 3 « ´ ¡ ¸ ž ¢ ž ¹ £ ¡ © º £ d ª ª « § © ¡ ¸ ž ¢ ž ¹ 1­ ® ¯
» ¼ ½ ¾ ° £ ¿ À _ Á Â Ã Ä Å Æ ! " #$ %
šOa"  u b * gǎ G   ' $ t ‘’ “ ” •–—
–
–
–
–
–
‡ Ÿ z ¡ ¤ ¥
‘ ’ V “ ” t • ) * – — ˜ ™ š›
–
–
œ  " ˜™
) 2 3 –
! " # $  ! & ' * ( )ž Ÿ * ž' ¡( ¢ £ + ¤ , ¥ - . / , - –
¦ ‡ f 0 1® 2 ¯ #3 t 4 5 6 °±
pÏЈ Fr 915ÑÒÓ6 E FG È ; Ô Õ l Ö no1p nq× r s@ ZØ Ù É 14Ê Ë 9‰ Z É Ì Í Î
Þ ÑŽl Ú } Û ß à Q{| “ ÜQ InoÝ A á r B âF– 7㠗 ä [ å \ Å æ X ® ç è é é ê 5 6 E F
G
V « ¤ Q7 t • Q8 R9 1Ñ2 : #Òë;<ì ] ^ í î ï ð
ñâo6 ò ö )÷ á *r GF– 5 — 6 ó E FGh
ô i WõQ Rò ë [ ì \ ø ù ú û ü WØ Ù
ýQ 6 R no1Û9<þOÔ
@
ã
j
/
®
ç
è
é
m
:
_
Ö
[
\
Ò{F
â
F
r
G“
Q
Ino
á
Š
‰
n
6
gÛ
:
[
\
4r– {F—9{|
{| –_ — Ö  s no{FGˆ O câoG 6 ‰ Fà Ž Š ‰ e
–
–
–
–
–
–
–
–
–
4
¢ £ 78 ¦ ‡ f 7 y ² { Ÿ z ¡
( ) * + , - . / 0 1 23 4 ! 56 " 7 #8 9:$% ; < => ?& '2@A
'
BCVWDCE X F GHY'ZI '9[ \J K ]' ^ _ L`abcM dN ^O _PQR e E S ATf g U
h`pi `Zq # 9[$ j k Vlm : = ! " Z 9n o “
”
o p q r s = t u @ s = K A v o p q r
³ _ ´ X g µ R ( ) Q * + , W r 3 4 56 7 8 G- . / 0 1 2s Ut u 6 ) ( a b ? @ A B vw c*x ž · ª « ¦´ ¹ £ 2 !
¦´ ž ª ¦e "
y z ! L " { # $ | %OW X P }7 Q ~ RS *TU| h € V W L X  Y f ZL [ \
–
–
–
–
]k ^ l R_m n` a bTc de 0 W X Y f g h _ i j S d
o p q r s = t u @ s = K A v o p q r
³ _ ´ Xg µ R Q W
5
¢ £ 78 ¦ ‡ f 7 y ² { Ÿ z ¡
‚ ƒ > „ F D …w x F D E 6 v E A B y z { | } :~ ,  –
–
–
+Œ ,  € , n \ ‚ƒ „ S … † %‡ˆ 8 ‰ S 1 Š o p ‹
5R%—A Ž F :˜   n™ š y f‘ ’ '‚ƒ“ y ‘ ’ ›‚ƒ › ” 8 8 S a %‹• –
Œœ A  g F n A D = J A C I : y ‘ ’ %& ' ” 8 † fžŸ f¡
¢ˆ 8 ‰ S £ ¤ m X ‚ƒ ˆ 8 ‰ S ¥ ¦ ‚§  n
‡ Ÿ z ¡ ¤ ¥
‘ ’ V “ ” t • ) * – — ˜ ™ š›
–
–
œ  " ˜™
! " # $ " % " ! & '
(0 %) . " 1 * " + 2 3 ,,4- $* $+ . 5 . ! & / /
* žŸ ž ¡ ¢£ ¤ ¥
–
–
: B 2 C : IS P
¢ £ † ‡ ‡ ˆ ‰ Š ‹ Œ  Ž  r ¶  ‘· 3 4
“
–
–
”
N‚©N > ~ : ª« ¬ ­ # ¨ G $¨ = ‚® ƒ *T ¯ ° ¥ ¦
‡ Ÿ z ¡ ¤ ¥
‘ ’ V “ ” t • ) * – — ˜ ™ š›
–
–
œ  " ˜™
! " # $ " % " ! & '
(0 %) . " 1 * " + 2 3 ,,4- $* $+ . 5 . ! & / /
* žŸ ž ¡ ¢£ ¤ ¥
–
–
›¸¹¸º » ¼ ½ ® ¯ t =>?‹€>@ ŠA €˜B ™ C š 1D #E F
–
–
–
–
-.; < /= 0 >?@1 2 A B3C D 4 5 E6 7 8 9 :
F
G
H
I
J
K
L
M
NOP
Q
H
I
› œ <G R0 S ž T ( ;Ÿ( U 1¡¢V W £¤XY Z¢ [ƒ \¡¢] £¥^J¦ \_ # `
&
a
9
:
#
$b
c
d
?
D
W
Y
Z
e
$f
g
^h
i
#
`
H § ¨ I© ª« ¬ ;S ­ £V® r ¯ B ° ± ª˜ ~ ² ³ ~ 1
jkl
Z
m
n
>o
p
m
n
$q
r
>'
(
s
t
8
u
v
w
q
r
  ' ´ = µ ‘” ¶  · + W ¸
–
G
?
–
–
–
¹ ~ ² ºªc d » ¼ ½ ¾ £ ¿ À Á  à ;Ä Å I
›¸¹¸º »J ¼K L ½ M NOPQ ® ¯ R tS T #U V ¢ £ 0 1 2 #W X YZ[ \ ] ^ _ 6 ` 7 8 9 : ;< =
DVR
P 2 P
> ? @ AB 8 C ? D ? œ
T-
sdDd
U
í ð
!
"
#$
X Y ID
xy
DVR
(
, P K I,
DVR
&'( )( ) % &'&( )( ) * + , - + .
(
TV,
,
)
)
WK X Y L Z [ M\ ] 8N Á ˆŠ  S ‰Ã¾ ¿ F Ä G Å À›¸¹¸º » ¼ ½ ® ¯ t
E TS I
L ib e r ty A llia n c e
TV-A n y t i m e F o r u m
2 " 3 4 5 " Z [ \ ] " _ Z [ \ ] " ^
SP006-3
E x c h a n g e o f
Pe r s o n a l
Pr o f i l e
(
2 0 0 5 /0 8
)
E T S I T S 1 0 2 8 2 2 -6-3:
" B r o a d c a s t a n d O n -l i n e
S e r v ic e s :S e a r c h , s e le c t,
a n d r ig h tfu l u s e o f c o n te n t
o n p e rs o n a l s to ra g e
s y s t e m s ( " T V -A n y t i m e
P h a s e 2 ");
P a r t 6: D e l i v e r y o f m e t a d a t a
o v e r a
b i -d i r e c t i o n a l n e t w o r k ;
S u b -p a r t 3: E x c h a n g e o f
p e r s o n a l p r o file s " .
E F G H > AI 7 B J K L
4
Æ Ç( È
–
–
–
–
! " #
ÉÊMN
! " # $ # % & ' ( ) ( * ' + ' , - ' . / / 0' 1 2
34
5
6
7
89
:
;<
=
8>
?
8@
A
B
C
D
EF
G
H
I
J
K
L
M
K
N
O
P8Q
RSTU
V
W
X
!
Y
Z
[
\
/
]
^/
Z
_. // $] ` a b b b c 1 b d ec "_ b # ` b" # b ## " # b_ $ #b ! f 3)f 1 gc. / /] a $b c b " be! ce ! Sh _ % 0f a f f g ig j $ )( * g k l q mn # b r o ! g # e c b _ c c $ b X ! cs % c ^g 2) n ) 1 fc c 2 p c 1 & b # c c b cb 1 c # ( . / / 0 c c 1 $ # # # b # b # " . / / 0 c a b e # c b c # ! !
g # % ca ` qc. / t u 1 v2 w m& b $ ! a b 1 # c g % a . _ $ ! 1 c " x ! ` # 2 p 1 b 1 )1 c% ! b c z { y e ! e ! b . / / - ! /, , . # " b e ! . # $ e ! # c 1 y % ! b c z { ! " # $ # c 1 y e !
Ë Ì !) " # ! $ * ) % + & ' & ( , ( - .
'' (( (( 9/ 0 4 1 : 2 3 4 5 6 7 8
' ( ( ;<= > ? ;@ A B C D E
5
fR f_ ^ V 8 h Ï g f [ 8 f Í S_ Î8 Z [ VJ 8 Š g [ Ð k Ñ g Î 8 ‡ ¿ ¿ Ò
ÓÔ Õ Ö × J‡ ¿ ¿ Ò ØÙÚ Ò ÇÓ
Call for Papers
A CM
CCS 2 0 0 5
W ork sh op
on D i g i t al I d en t i t y M an ag em en t
November 11, 2005,
H i l t on A l ex a n d ri a M a rk C en t er, A l ex a n d ra , V A
Û ) ©Ü Ý Þ ( Ã ß à
ç i i 8 á èéêâ ë ì7 8 èí㠙ä î ïå ðæ ñ
ò X] _ \ _ \ Z [ j Ð g µ ^_ Y ` \ a g óÎ
2 0 0 5 /0 5 /2 0
S A C S IS 2 0 0 5
7 6