Project Higgins: Security and Identity Management

Open Source Initiative to Give People More Control Over Their Personal Online Information

IBM, Novell, and Parity Communications to Drive New Generation of Security Software Based on Framework by Harvard Law's Berkman Center

Armonk, NY, USA. February 27, 2006.

IBM, Novell and Parity Communications today announced that they are contributing code to an open source initiative — code-named "Project Higgins — that will spawn a new generation of security software, giving people more control over their personal online identity information. Project Higgins builds upon a concept developed by Harvard Law School's Berkman Center for Internet & Society.

Project Higgins — which is being managed by the Eclipse open source foundation — is developing software for "user-centric" identity management, an emerging trend in security software. It enables individuals to actively manage and control their online personal information, such as bank account, telephone and credit card numbers, or medical and employment records — rather than institutions managing that information as they do today. People will decide what information they want shared with trusted online websites that use the software.

This is the first user-centric identity management effort to follow the open source software model, where hundreds of thousands of developers contribute — and continually drive improvements through collaborative innovation. Being an open source effort, Higgins will support any computer running Linux, Windows or any operating system, and will support any identity management system.

"To move online security to the next level, there has to be fundamental resolve among consumers, government and business to quickly adopt a system where the individual has more control over how information about them is managed and shared," said John Clippinger, Senior Fellow for The Berkman Center. "Our aim is to construct an open and widely accessible software framework that puts the individual at the center of the identity management universe. With this framework in place, it will be easier for society to begin the migration to more secure online environments, where trusted networks can not only be easily formed, but effectively enforced. For in the end, security is not just technological, but social."

Higgins will make it simple and secure for someone to change an address across all their online accounts with a single keystroke; delegate who can see what elements of their medical records; or change a password across online banking and brokerage accounts. For example, a person can grant their insurance company broad access to their personal information and medical records, while at the same time limiting the amount of data made available to their cable company. In turn, businesses can create new channels of communication with customers — enabling information to be shared securely across networks to deliver targeted, relevant products and services.

To spur swift adoption of Higgins by the broadest community of software developers, IBM, Novell and Parity Communications are contributing software code to Higgins, and will be joined by other technology companies who are expected to participate in the project. IBM plans to incorporate Higgins technology within its Tivoli identity management software, with added support by independent software vendors and IBM's consulting services division.

A New Era of Online Services

Higgins breaks up a person's identity into pieces — or "services" — and lets computer users dictate who can access what parts of their identity information, within applicable privacy guidelines and laws. Organizations using "smart" applications, built with Higgins open source tools, can share specific identity information, such as their telephone number or buying preferences, according to rules set by the individual, or by an authorized third-party service provider acting on their behalf. Like Web services, companies will be able to build support for Higgins into their applications, websites and services, and its open approach will support any technology platform and identity management system.

The project is named after the Tasmanian long-tailed Higgins mouse. It reflects today's "long tail" of micro-markets that complement traditional industries — such as new markets revolving around online auctions — and the fact that those markets will benefit from greater online collaboration.

Over the last two years, The Berkman Center has been engaged in developing research papers and use cases on privacy and digital governance.

"The Internet has changed the way consumers think about privacy, and Higgins will help change the way people manage their personal identity information," said Dale Olds, Distinguished Engineer at Novell. "Ultimately this approach will give consumers greater control and businesses powerful new ways to interact with their customers. We view Higgins as an opportunity to combine Novell's leadership in identity and security with the power of the open source community to address some of today's toughest technological and ethical challenges."

Anthony Nadalin, Distinguished Engineer and Chief Security Architect, IBM, added: "Identity management is the next frontier for open source software. Open source ensures that there is easy access to the technology, so that developers can innovate around it. It also means that customers won't be locked into a proprietary architecture when they adopt user-centric identity management systems."

More information about the Eclipse Higgins project can be found at www.eclipse.org/higgins/.

About IBM

IBM is the world's largest information technology company, with 80 years of leadership in helping businesses innovate. For more information about IBM, visit www.ibm.com.

About The Berkman Center for Internet & Society at Harvard Law School

The Berkman Center is a research program founded to explore cyberspace, share in its study, and help pioneer its development. It represents a network of faculty, students, fellows, entrepreneurs, lawyers, and virtual architects working to identify and engage with the challenges and opportunities of cyberspace. For more information, visit http://cyber.law.harvard.edu.

About Novell

Novell, Inc. (Nasdaq: NOVL) delivers Software for the Open Enterprise. With more than 50,000 customers in 43 countries, Novell helps customers manage, simplify, secure and integrate their technology environments by leveraging best-of-breed, open standards-based software. With more than 20 years of experience, more than 5,000 employees, 5,000 partners and support centers around the world, Novell helps customers gain control over their IT operating environment while reducing cost. For more information, visit http://www.novell.com.

About Parity Communications

Parity Communications, Inc. is a start-up software company, based near Boston. The company is working in a new field called Social Commerce that is at the intersection of e-commerce, social networking, and user-centric identity. For more information, visit.www.parityinc.net.

Contact

Joe Becker
IBM Media Relations
Tel: +1 (646) 598-5102
Email: bjoseph@us.ibm.com

[Source: http://www-03.ibm.com/press/us/en/pressrelease/19280.wss. See also the transcript.]

From the Eclipse Web Site

About the Higgins Project: "Higgins is a framework that will enable users and enterprises to integrate identity, profile, and relationship information across multiple systems. Using service adapters, existing and new systems such as directories, collaboration spaces, and communications technologies (e.g., Microsoft/IBM WS-*, LDAP, email, IM, etc.) can be plugged into the Higgins framework. Applications written to the Higgins API can virtually integrate the identity, profile, and relationship information across these heterogeneous systems. A design goal is that Higgins be useful in the development of applications accessed through browsers and rich clients. Our intent is to define Higgins in terms of service descriptions, messages and port types consistent with an SOA model and to develop a Java binding and implementation as an initial reference."

Prepared by Robin Cover for The XML Cover Pages archive. General references in "XML and Security."

SEARCH Advanced Search ABOUT Site Map CP RSS Channel Contact Us Sponsoring CP About Our Sponsors NEWS Cover Stories Articles & Papers Press Releases CORE STANDARDS XML SGML Schemas XSL/XSLT/XPath XLink XML Query CSS SVG TECHNOLOGY REPORTS XML Applications General Apps Government Apps Academic Apps EVENTS LIBRARY Introductions FAQs Bibliography Technology and Society Semantics Tech Topics Software Related Standards Historic	Project Higgins: Security and Identity Management Open Source Initiative to Give People More Control Over Their Personal Online Information IBM, Novell, and Parity Communications to Drive New Generation of Security Software Based on Framework by Harvard Law's Berkman Center Armonk, NY, USA. February 27, 2006. IBM, Novell and Parity Communications today announced that they are contributing code to an open source initiative — code-named "Project Higgins — that will spawn a new generation of security software, giving people more control over their personal online identity information. Project Higgins builds upon a concept developed by Harvard Law School's Berkman Center for Internet & Society. Project Higgins — which is being managed by the Eclipse open source foundation — is developing software for "user-centric" identity management, an emerging trend in security software. It enables individuals to actively manage and control their online personal information, such as bank account, telephone and credit card numbers, or medical and employment records — rather than institutions managing that information as they do today. People will decide what information they want shared with trusted online websites that use the software. This is the first user-centric identity management effort to follow the open source software model, where hundreds of thousands of developers contribute — and continually drive improvements through collaborative innovation. Being an open source effort, Higgins will support any computer running Linux, Windows or any operating system, and will support any identity management system. "To move online security to the next level, there has to be fundamental resolve among consumers, government and business to quickly adopt a system where the individual has more control over how information about them is managed and shared," said John Clippinger, Senior Fellow for The Berkman Center. "Our aim is to construct an open and widely accessible software framework that puts the individual at the center of the identity management universe. With this framework in place, it will be easier for society to begin the migration to more secure online environments, where trusted networks can not only be easily formed, but effectively enforced. For in the end, security is not just technological, but social." Higgins will make it simple and secure for someone to change an address across all their online accounts with a single keystroke; delegate who can see what elements of their medical records; or change a password across online banking and brokerage accounts. For example, a person can grant their insurance company broad access to their personal information and medical records, while at the same time limiting the amount of data made available to their cable company. In turn, businesses can create new channels of communication with customers — enabling information to be shared securely across networks to deliver targeted, relevant products and services. To spur swift adoption of Higgins by the broadest community of software developers, IBM, Novell and Parity Communications are contributing software code to Higgins, and will be joined by other technology companies who are expected to participate in the project. IBM plans to incorporate Higgins technology within its Tivoli identity management software, with added support by independent software vendors and IBM's consulting services division. A New Era of Online Services Higgins breaks up a person's identity into pieces — or "services" — and lets computer users dictate who can access what parts of their identity information, within applicable privacy guidelines and laws. Organizations using "smart" applications, built with Higgins open source tools, can share specific identity information, such as their telephone number or buying preferences, according to rules set by the individual, or by an authorized third-party service provider acting on their behalf. Like Web services, companies will be able to build support for Higgins into their applications, websites and services, and its open approach will support any technology platform and identity management system. The project is named after the Tasmanian long-tailed Higgins mouse. It reflects today's "long tail" of micro-markets that complement traditional industries — such as new markets revolving around online auctions — and the fact that those markets will benefit from greater online collaboration. Over the last two years, The Berkman Center has been engaged in developing research papers and use cases on privacy and digital governance. "The Internet has changed the way consumers think about privacy, and Higgins will help change the way people manage their personal identity information," said Dale Olds, Distinguished Engineer at Novell. "Ultimately this approach will give consumers greater control and businesses powerful new ways to interact with their customers. We view Higgins as an opportunity to combine Novell's leadership in identity and security with the power of the open source community to address some of today's toughest technological and ethical challenges." Anthony Nadalin, Distinguished Engineer and Chief Security Architect, IBM, added: "Identity management is the next frontier for open source software. Open source ensures that there is easy access to the technology, so that developers can innovate around it. It also means that customers won't be locked into a proprietary architecture when they adopt user-centric identity management systems." More information about the Eclipse Higgins project can be found at www.eclipse.org/higgins/. About IBM IBM is the world's largest information technology company, with 80 years of leadership in helping businesses innovate. For more information about IBM, visit www.ibm.com. About The Berkman Center for Internet & Society at Harvard Law School The Berkman Center is a research program founded to explore cyberspace, share in its study, and help pioneer its development. It represents a network of faculty, students, fellows, entrepreneurs, lawyers, and virtual architects working to identify and engage with the challenges and opportunities of cyberspace. For more information, visit http://cyber.law.harvard.edu. About Novell Novell, Inc. (Nasdaq: NOVL) delivers Software for the Open Enterprise. With more than 50,000 customers in 43 countries, Novell helps customers manage, simplify, secure and integrate their technology environments by leveraging best-of-breed, open standards-based software. With more than 20 years of experience, more than 5,000 employees, 5,000 partners and support centers around the world, Novell helps customers gain control over their IT operating environment while reducing cost. For more information, visit http://www.novell.com. About Parity Communications Parity Communications, Inc. is a start-up software company, based near Boston. The company is working in a new field called Social Commerce that is at the intersection of e-commerce, social networking, and user-centric identity. For more information, visit.www.parityinc.net. Contact Joe Becker IBM Media Relations Tel: +1 (646) 598-5102 Email: bjoseph@us.ibm.com [Source: http://www-03.ibm.com/press/us/en/pressrelease/19280.wss. See also the transcript.] From the Eclipse Web Site About the Higgins Project: "Higgins is a framework that will enable users and enterprises to integrate identity, profile, and relationship information across multiple systems. Using service adapters, existing and new systems such as directories, collaboration spaces, and communications technologies (e.g., Microsoft/IBM WS-*, LDAP, email, IM, etc.) can be plugged into the Higgins framework. Applications written to the Higgins API can virtually integrate the identity, profile, and relationship information across these heterogeneous systems. A design goal is that Higgins be useful in the development of applications accessed through browsers and rich clients. Our intent is to define Higgins in terms of service descriptions, messages and port types consistent with an SOA model and to develop a Java binding and implementation as an initial reference." Prepared by Robin Cover for The XML Cover Pages archive. General references in "XML and Security."