No Sheep

Assuring Identity Remotely

// August 1st, 2005 // Technology Bits

We are currently reassessing our credentialling process and in the course of my research here, I was reading Citizen & Commerce Certificate Policy Version 1.0 which states:

The identity may be established in any of the following manners:
(1) The identity may be established through in-person appearance at the credential provider, or its agent, with physical credentials (e.g., driver’s license or birth certificate). Collection of certified mail is one example of in-person appearance at an agent of the credential provider.
(2) The identity may be established using procedures similar to those used when applying for consumer credit and authenticated through information in consumer credit databases or government records, such as:
• the ability to place calls from or receive phone calls at a given number; or
• the ability to obtain mail sent to a known physical address.
(3) Where an ongoing business relationship with the credential provider or a partner company (e.g., a financial institution, airline, or retail company) exists, the identity may be authenticated through information derived from the business relationship such as:
• the ability to obtain mail at the billing address used in the business relationship; or
• verification of information established in previous transactions (e.g., previous order
number) ; or
• the ability to place calls from or receive phone calls at a phone number used in
previous business transactions.

The second option fits nicely in with a solution we are preparing to present for our campus and online education.

I’ll be posting more on this soon, for now we are calling our plan: “The Modified Tilley Hat Method”.

authorization, credentials, identity, identity management, level of assurance

Related items

• Augmented Reality Games
• SunGardHE Case Study: Luminis Portal for Alumni at Plymouth State
• 10 Good PHP Principles from Nettuts
• Silverback – Usability Testing
• Teleport For Mac