Liberty Alliance Publishes Guidelines for Identity-Based Mobile Services
Liberty Alliance Delivers Mobile Business Guidelines for Federated Identity Deployments
Liberty's Open Standard Paves the Way for Identity-Based Mobile Services
Cannes, France. February 25, 2004. 3GSM World Congress.
The Liberty Alliance today released its second business guideline document, outlining near-term market opportunities and business requirements for federated identity in the mobile market. The document examines how mobile operators, equipment providers, content and service providers as well as vendors and users can take advantage of the growth and demand for mobile services, and in turn, how Liberty's open standard can enable secure delivery of Web services.
"Federated identity has the potential to bring mobile networks and personalized services to the next level," said Paola Tonelli, member of the Liberty Alliance management board and senior director of industry advocacy at Vodafone. "However, federated identity is about more than just technology. The best practices and business guidelines that Liberty is delivering can help companies overcome some of the more complex challenges associated with federated identity deployments, such as privacy and security issues."
The mobile business guidelines, a Tier 2 document in Liberty's evolving library of business guidelines for federated identity deployment, expands on Liberty's Tier 1 overview delivered July 2003. Additional Tier 2 guidelines are in development with expected delivery later this year.
Benefiting the Mobile Ecosystem
Federated identity, which securely links and manages identity information among different systems, offers a number of benefits to the mobile industry:
For service providers, it helps authenticate who the user is, what he or she can access, and at the user's request, quickly gather preferences to deliver personalized services.
For operators, it provides an open framework for identity data roaming within and across global networks, allowing them to easily deliver revenue-generating services to more customers.
For consumers and businesses, it means they have access to valuable low-cost services from any operator while still retaining control of their information.
Liberty Alliance enables these and other benefits, and is the only complete federated identity framework being implemented across the mobile ecosystem today. Liberty's global member base collectively represents more than 200 million mobile subscribers, more than half the world's mobile devices, 80% of all SIMs and 55% of the mobile network infrastructure.
"Liberty Alliance has what it takes to become the chosen identity standard for mobile deployments," said Timo Skytta, vice president of the Liberty Alliance and senior manager at Nokia. "The active participation and support of several top mobile industry companies makes Liberty standards a natural fit for this space."
Liberty Alliance standards interoperate across systems, have privacy-enhancing features built into the protocols, and provide a business framework under which parties can interact with reduced risk.
The mobile guidelines, a valuable resource to those incorporating federated identity into their systems, addresses the following business issues that must be considered during planning and deployment:
- Establishing mutual confidence and minimum quality standards
- Developing a comprehensive risk management strategy
- Defining liability and dispute resolution mechanisms
- Complying with agreed-upon standards and relevant legislation
In addition to the issues referenced above, the mobile business guidelines also highlight the immediate market opportunities for federated identity and Liberty's open architecture. Specifically addressed are Liberty's benefits in the remote payment (i.e., e-commerce) and access control markets (i.e., home banking or VPN access), which require a stronger authentication mechanism than provided by passwords.
The guidelines show how businesses can use Liberty's federated identity model to improve authentication and security for almost half of what current authentication methods cost. Finally, the paper provides insight into how operators can use Liberty's specifications to open new revenue streams from trusted partners.
To see a complete copy of Liberty Alliance's mobile business guidelines document, please visit: http://www.projectliberty.org/mobile/Liberty_BusinessGuidelines_Mobile_Deployments_Whitepaper.pdf. This is an evolving document so if you are interested in providing input or feedback, please contact firstname.lastname@example.org.
About the Liberty Alliance Project
The Liberty Alliance Project is an alliance of more than 150 companies, non-profit and government organizations from around the globe. The consortium is committed to developing an open standard for federated network identity that supports all current and emerging network devices. Federated identity offers businesses, governments, employees and consumers a more convenient and secure way to control identity information in today's digital economy, and is a key component in driving the use of e-commerce, personalized data services, as well as web-based services. Membership is open to all commercial and non-commercial organizations.
If you are interested in seeing the full list of Liberty Alliance members or are interested in becoming a member, please visit us at www.projectliberty.org.
Tel: +44 20 7611 3598
Tiffany van Gorder
Tel: +1 415 984 6192
Prepared by Robin Cover for The XML Cover Pages archive. See other details in the news story "Liberty Publishes Federated Identity Documents on Mobile Deployments and Identity Theft." General references in "Liberty Alliance Specifications for Federated Network Identification and Authorization."