<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Alison Pope</title>
	<atom:link href="http://alisonpope.me.uk/feed/" rel="self" type="application/rss+xml" />
	<link>http://alisonpope.me.uk</link>
	<description>"Don't stop me now...I'm having such a good time..."</description>
	<lastBuildDate>Fri, 05 Mar 2010 23:00:24 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Alice in Wonderland (2010)</title>
		<link>http://alisonpope.me.uk/archives/2010/03/1006/</link>
		<comments>http://alisonpope.me.uk/archives/2010/03/1006/#comments</comments>
		<pubDate>Fri, 05 Mar 2010 23:00:18 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Journal]]></category>
		<category><![CDATA[film review]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/archives/2010/03/1006/</guid>
		<description><![CDATA[	Build worlds, tell stories &#8230; that&#8217;s what I love about cinema and that is what Tim Burton delivers in his vision of Alice in Wonderland. This is a visual feast with director Tim Burton painting with light and colour and imagination tumbling from the screen through the rich art design and numerous small touches of [...]]]></description>
			<content:encoded><![CDATA[	<p><p style="clear: both">Build worlds, tell stories &#8230; that&#8217;s what I love about cinema and that is what Tim Burton delivers in his vision of Alice in Wonderland. This is a visual feast with director Tim Burton painting with light and colour and imagination tumbling from the screen through the rich art design and numerous small touches of detail. It works as both a genuine source of wonder and as an intriguing critical text rattling along at a rollicking pace full of incident and adventure whilst leaving me thinking about it long after I&#8217;d left the cinema. </p><p style="clear: both">This is also one of the first 3D films I&#8217;ve seen (and I haven&#8217;t seen the all conquering Avatar) that begins to use the depth provided by 3D to pull you into the screen not just extend outwards and uses the extra dimension to add to the narrative rather than merely decorate it. Perspective is put to powerful use to convey the sense of expectation that Alice feels crushing her at decisive moments. For this is a story of a girl coming to terms with the pain of grief and growing up within a society that doesn&#8217;t suit her.</p><p style="clear: both">The world can be complex, difficult and emotional something we explore through fairytales and deconstruct through allegory (except when we are criticising it directly: &#8220;Do you know what I fear most&#8221;/&#8221;The decline of the aristocracy?&#8221;). The turbulent world of childish emotions come together better in the surreal juxtapositions of Wonderland than the social critique does as one weakness of the film is this it is a rather simplistic and cartoonish treatment of Victorian society. It is hard to contrast fact and fantasy in the same way as Pan&#8217;s Labyrinth does for example, which uses it&#8217;s alternative world to throw reality into ever darker relief. This gives the latter film a far more darker and tragic edge, whereas here you get the impression all that is glossed over in favour of the fun stuff as Wonderland spills so far into Alice&#8217;s reality it is hard to tell the difference. </p><p style="clear: both">For me more Labyrinth and less Narnia would have given the film a bit more edge without spoiling the fun and it works best when it does so. So this is another slight criticism as Burton&#8217;s originality gets a bit threadbare in the middle section as he draws upon The Chronicles of Narnia, The Lord of the Rings and The Wizard of Oz to line up his plot pieces and you begin to start mapping Wonderland to these other imaginary worlds rather than be immersed in it. In one scene the White Queen throws ingredients into her potion pot, (some buttered fingers, two spoonfuls of wishful thinking) and you get the same impression the film is being put together in the same way for a while. </p><p style="clear: both">On the acting side this is a richly talented cast but many of the characters seem less filled in, sketched to provide colour and nudge the plot along, or act as canvases on which to project these themes and <a href="http://www.imdb.com/name/nm1985859/">Mia Wasikowska</a> does a good job to not let the eponymous lead become a total cipher. The exceptions are Burton&#8217;s close collaborators Johnny Depp who plays the Mad Hatter and Helena Bonham Carter who plays the Red Queen. The depth of their working relationship with Burton is clear as both have a great time with their characters pulling them in all sorts of directions from the outrageously funny to the touchingly poignant.</p><p style="clear: both">I never thought I&#8217;d criticise a film for being too feminist but Alice&#8217;s proto-independepence at the end is too complete to be swallowed. More successful is the narrower gaze Wonderland throws over just how awful a family can seem to a teenage girl by being &#8216;made to be&#8217; by others whilst wrestling with her own raging feelings. The two sisters, the Red Queen and the White Queen both come across responses to this. Both are petulant children and the former chooses &#8220;fear over love&#8221; rather than face her insecurities about her &#8216;grotesque&#8217; appearance, whilst the latter elects to abdicate all responsibility in the hope that the trippy vacuity of drugs and longing for a champion will abdicate her from responsibility. Neither is perfect and when they clash the film sides with one, but you can&#8217;t help feeling that the strong willed Alice who rejects the social determinism of her class is much more like the other.</p><p style="clear: both">All of these thoughts and themes swim in and out of focus giving this film a long and provocative aftertaste but mostly, whilst I was watching, I just thought how fantastic and entertaining it all was. This Alison was definitely filled with wonder.</p><p style="clear: both"></p><br class="final-break" style="clear: both" /></p>
 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2010/03/1006/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Federating the Next Generation: Day 2 Closing Keynote</title>
		<link>http://alisonpope.me.uk/archives/2009/11/998/</link>
		<comments>http://alisonpope.me.uk/archives/2009/11/998/#comments</comments>
		<pubDate>Tue, 24 Nov 2009 13:06:52 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Professional]]></category>
		<category><![CDATA[fam]]></category>
		<category><![CDATA[fam09]]></category>
		<category><![CDATA[he]]></category>
		<category><![CDATA[iam]]></category>
		<category><![CDATA[rhul]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/archives/2009/11/998/</guid>
		<description><![CDATA[	Nate Klingenstein from Internet2 is going to bring us to a close with a &#8216;cynical&#8217; keynote.

	Today&#8230;

	Concept has been proven
Many successful federations covering a variety of sectors and applications
Note the rise of consumer federated identity e.g. Google, Facebook
Scaling internationally and across sectors is a big challenge.
Getting the Discovery, Trust and User Experience problems right is only [...]]]></description>
			<content:encoded><![CDATA[	<p>Nate Klingenstein from Internet2 is going to bring us to a close with a &#8216;cynical&#8217; keynote.</p>

	<h4>Today&#8230;<br />
<ul></h4>
	<p><li>Concept has been proven</li><br />
<li>Many successful federations covering a variety of sectors and applications</li><br />
<li>Note the rise of consumer federated identity e.g. Google, Facebook</li><br />
<li>Scaling internationally and across sectors is a big challenge.</li><br />
<li>Getting the Discovery, Trust and User Experience problems right is only going to get harder as these federations scale.</li><br />
<li>Ongoing protocol wars &#8211; these will end &#8230; someday but not anytime soon&#8230; Goal of the Shibboleth project has been to insulate users from these protocols.</li><br />
<li>Levels of Assurance and Attribute support are another long running problem.&#160; Need to reconcile tension between enterprise and consumer identities.</li><br />
</ul></p>
	<p>The anecdote of the <a href="http://en.wikipedia.org/wiki/Cardiff_Giant">Cardiff Giant</a> .. fakes can be popular and travel faster than the truth.&#160; Fake identities and identity theft is a growing problem.</p>

	<h4>The Consumer Factor</h4>

	<p>Why have consumer organisations jumped into federated identity &#8230; because it is lucrative.&#160; Double click and personalised advertising is still most of Google&#8217;s income.&#160; Second generation is email companies like Gmail and hotmail and now Facebbok and Twitter are becoming the largest repositories of personal information and have been very successful at monetising this.&#160; They have also done a great job of raising user expectations that everything should be free and easy and powered by ads.</p>

	<p>Universities and Identities</p>

	<p>Universities house both applications and identities and are the natural home for much user data.&#160; We may outsource the systems that run these but we are not going to outsource the business capability &#8211; it is too core.&#160; We also host a number of applications but increasingly not all of them will be locally hosted.</p>

	<p>The Important Players in Academic Identity<br />
<ul></p>
	<p><li>Government</li><br />
<li>Faculty</li><br />
<li>Applications</li><br />
<li>Users</li><br />
</ul></p>
	<p>&#8220;These groups will collectively shape identity in learning over the next 10 years&#8221;.</p>

	<p>Nate is now unpicking the different perspectives and goals these groups might have.</p>

	<p>Governments want strong data protection, assertion and protection of digital identity.</p>

	<p>Faculty want good learning resources by the easiest possible route, but they also want undivided attention &#8211; do they want social networking in the classroom?&#160; Tension between both stronger <span class="caps">IPR</span> and freely circulated intellectual property.&#160; Functional <span class="caps">IPR</span> is essential to the cretaion of knowledge &#8211; probably not in current form though.&#160; The incentives for creating knowledge are less than previously.</p>

	<p>Commercial applications want a user base to make money from, licensing fees and advertising is a nice plus.&#160; Other applications aren&#8217;t really sure what they want but would be happy to be helped with the username/password problem.&#160; They talk vaguely about security and usability.&#160; <span style="font-weight: bold;">However Identity Services are critical &#8211; indeed, foundational &#8211; for &#8220;cloud computing&#8221;</span>.&#160; Whatever the cloud is one thing your organisation needs to do is have good identity management and federating of that identity.</p>

	<p><span style="font-weight: bold;">Users want <span class="caps">CONSISTENCY</span>. </span> There is agreement that users want consistency, but huge disagreement as to what that consistency should be.&#160; There more screaming there is hopefully the faster this will get resolved.&#160; Users get confused.&#160; They like buttons.&#160; They do get the concept of work and personal personas and are able to switch between them &#8211; they may not want these to be converged.&#160; Privacy and security are very important to users &#8211; particularly in countries where privacy laws are weaker.</p>

	<p>Consumer Identity Today&#8230; Facebook Connect or Facebook/Twitter.&#160; Facebook Connect is the most successful consumer identity and is built on a proprietary protocol via a single identity provider. Their inducements for applications are sweet.&#160; The key component of both is the news stream.&#160; Type pad have been collecting stats on the consumer identities used to login to their service &#8211; and they offer a lot!&#160; 73% are still using their legacy Typepad ID.&#160; However in the last month over 62% of new signups have used one of the consumer federated identities on offer.&#160; MAny consumer applications seem to be promoting three 1. Their own profile 2. Facebook Connect 3. Twitter with other offerings shoved under more&#8230;</p>

	<p>Convergence between Academic Identity and Consumer Identity?</p>

	<p>Google Apps is an example of this.&#160; Every Google Apps domain is an OpenID provider.&#160; Shibboleth access into Google Apps.&#160; Users are being &#8216;trained&#8217; in their consumer habits &#8230; to click on Facebook.&#160; Others will be pushing for their buttons to be more prominent.&#160; We don&#8217;t have a <span class="caps">BUTTON</span> we can put on this landscape (seems like this comes back to Rhy Smith&#8217;s work on the Publisher Interface Study and the need for an academic identity &#8216;brand&#8217;).</p>

	<p>Assurance is gravitating to the lowest common denominator.&#160; Non-bouncing email address is the lowest consumer identity provider level of trust.&#160; We need to have modernisation of these systems and their Level of Assurances (LoA).&#160; We aren&#8217;t sure what peer validation of identity like in Facebook provides in terms of assurance.</p>

	<p>Consumer world is rapidly realising that attributes are the key.&#160; We are going to have to solve the attribute aggregation problem.</p>

	<p>There are multiple convergence options<br />
<ul></p>
	<p><li>separate identities, applications, personas</li><br />
<li>side by side with extended discovery</li><br />
<li>attribute plumbing from campus to consumer providers (Google keen here)</li><br />
<li>outsource entirely</li><br />
</ul></p>
	<p>Nate is whizzing through this now as he runs out of time.&#160; There is a lot of big ideas and jey concerns in here so this presentation is definitely worth revisiting and reflecting on.</p>

	<p>How to prepare for the future?<br />
<ul></p>
	<p><li>Be protocol agnostic.</li><br />
<li>Expectations and functionality are driven by commercial and consumer identities.</li><br />
<li>Users and Governments are unlikely to influence change</li><br />
<li>Faculty will use best tools available</li><br />
<li>Applications like money</li><br />
</ul></p>
	<p>If we want something more benign we have to consider the motivations of these key players and push them towards an outcome we think will be better.&#160; Nate is not sure what this better outcome is yet but does say that whatever happens <span class="caps">DISCOVERY</span> is the key control point.&#160; We need some sort of eduID although opinion divided here, but we must proactively consider partnerships with other identity sources.</p>

	<p>Our current course is excellent.&#160; Our infrastrucutre will be key to most possible convergence routes and will be useful.&#160; Hence why this is a paranoid/cycnical presentation but not a downbeat one.</p>

	<p>Phew interesting/exciting stuff but that was rapid and brain is definitely full now.&#160; Need a lie down/sleep on the train.</p>

	<p>So question how does all this relate to Microsoft&#8217;s Forefront/Generva.&#160; Basically not sure lies behind the huge Forefront Marketing wall that Microsoft have built up.&#160; Internet2 is doing some interoperability testing with Microsoft&#8217;s stack.&#160; Microsoft wants to get into doing this attribute plumbing.</p>

	<p>This was a really interesting event with some good keynotes and mix of parallel sessions, opportunities for discussion and a lot of fun.&#160; Thanks <span class="caps">JISC </span>&#8230; now to go back and wonder what to think and do about it all.</p>
 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/11/998/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Federating the Next Generation: Day 2 Session 2</title>
		<link>http://alisonpope.me.uk/archives/2009/11/996/</link>
		<comments>http://alisonpope.me.uk/archives/2009/11/996/#comments</comments>
		<pubDate>Tue, 24 Nov 2009 12:07:57 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Journal]]></category>
		<category><![CDATA[fam09 fam iam rhul he]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/archives/2009/11/996/</guid>
		<description><![CDATA[	Looking at Privacy and Consent Management in the second parallel session.&#160; From an SPs perspective first Fiona Culloch from Edina.

&#8220;A Catastrophic Success at keeping personal information private&#8221;

Most IDPs only give a small set of very opaque attributes to SPs.&#160; The vision for federation was as a route for passing all sorts of attributes between different [...]]]></description>
			<content:encoded><![CDATA[	<p>Looking at Privacy and Consent Management in the second parallel session.&nbsp; From an SPs perspective first Fiona Culloch from Edina.<br />
<br />
&#8220;A Catastrophic Success at keeping personal information private&#8221;<br />
<br />
Most IDPs only give a small set of very opaque attributes to SPs.&nbsp; The vision for federation was as a route for passing all sorts of attributes between different providers.&nbsp; Technically this is possible.&nbsp; In policy terms personal data has stayed on the old road.&nbsp; The IDPs never get asked; the SPs think it&#8217;s too hard so nothing happens!!<br />
<br />
From a federation approach technical architects and legal tend to thing that too much will be given/demanded.&nbsp; There are few if any <span class="caps">IDP</span>/SP voices in the conversation.&nbsp; It&#8217;s hard to engage with them all &#8211; there are too many entities so the traditional answer is to go via representative forums.&nbsp; <br />
<br />
SP forums could broker requirements.&nbsp; SPs know what attributes they want to know.&nbsp; These are vertifical forums so divorce applications from infrastructure and could cross national boundaries.<br />
<br />
<span class="caps">IDP</span> forums could determine feasibility and implement.&nbsp; This had to be invented for Eduserv, who is kind of a meta-IDP.&nbsp; It would be useful to broaden that out.<br />
<br />
Joint forums would allow bottom up progress and experiment, agree, pilot, deploy, scale rather than just sit around theorising (although as pointed out the downside of this is it mean work!!)<br />
<br />
How to release data whilst staying <span class="caps">DPA</span> compliant?<br />
<br />
Technical fix is user consent at run time.<ul><li>Adds complexity to user interface</li><li><span class="caps">IDP</span> must still create defauly Attribute Release Policy (ARP) and face quasi-legal questions</li><li>SPs must handle revocation</li></ul><span class="caps">DPA</span> does allow release of data if necessary for the purpose it was collected for.&nbsp; Consent is not the only possible way or even the best way.&nbsp; If you are going to do this it&#8217;s a good idea to have a Data Processor Agreement between the <span class="caps">IDP</span> and SP.&nbsp; Most IDPs and SPs have a legal relationship in any case &#8211; via licenses, so add some <span class="caps">DPA</span> clauses to it.&nbsp; You have agreement and the <span class="caps">IDP</span> is covered against misbehaviour by the SP.<br />
<br />
Is there an opportunity to put <span class="caps">DPA</span> terms into the <span class="caps">JISC</span> model license??<br />
Can <span class="caps">JISC </span>Collections define recommended ARPs for each SP or banding of SPs?&nbsp; Only realistic if the <span class="caps">IDP</span> forum existed.<br />
<br />
In Computing Regulations we could add <span class="caps">DPA </span>&#8220;Purposes&#8221; to serve as user notification of fair processing.&nbsp; In practice vague is good.&nbsp; [What about exceptions and exemptions though.&nbsp; How would we record if a user didn&#8217;t want to agree to any or all of the <span class="caps">DPA</span> purposes in the regulations.&nbsp; This is the click through consent management problem magnified to the institutional level.&nbsp; If we are concerned about run time consent click through then should we not be concerned about policy click through?]<br />
<br />
Seems there are a lot of IDPs in the room interested in participating in such a forum.<br />
<br />
Now Robin Wilton Director of Future Identity Ltd and Director of Privacy and Public Policy at Liberty Alliance is going to provide further thoughts on privacy and consent.<br />
<br />
Who is Evan Ratliff??&nbsp; No googling&#8230;.<br />
<br />
Liberty Alliance conceptual model of identity and privacy &#8211; the &#8216;onion model&#8217; (this makes me think of my housemate and Shrek &#8211; layers donkey!!)<br />
<ul><li>Basic Identitifer Set (BIS) at the core provides proof of uniqueness</li><li>Next layer is other Personally Identifying Information (PII) e.g. Address</li><li>The next ring is attributes.&nbsp; Example is blood type &#8211; a person only has one but it by no means uniquely identifies them.</li></ul>Credentials encapsulate data from multiple layers.&nbsp; Credentials are not privacy neutral as they tend to reveal more than just the attribute required for a claim and they tend to make transactions &#8216;linkable&#8217;.<br />
<br />
Privacy enhancing systems should (must) be better at attribute level disclosure or better still yes/no answers to attribute related questions &#8211; &#8220;the <a href="http://www.springerlink.com/content/hk1p8r133867x402/">Psychic ID</a>&#8220;<br />
<br />
&#8220;Privacy is about disclosure not secrecy&#8221;.&nbsp; A &#8216;segment&#8217; of the onion may correspond to a particular segment or contextual use.&nbsp; Privacy concerns arise when attributes appear out of context.&nbsp; Privacy may be described as about contextual integrity.<br />
<ul><li>Privacy is not a state but a relationship</li><li>These relationships are contractual<br />
</li><li>It is highly asymmetric and involves conflicting interests and motivations</li><li>It is highly contextual &#8211; and context changes.</li><li>We have social relationships and networked relationships but these are not the same.<br />
</li></ul>What are the implications for consent?<br />
<br />
If we aren&#8217;t talking about the same things what are we talking about?&nbsp; We are only gradually developing a shared vocabulary for digital identity, trust and online privacy.&nbsp; <a href="http://www.encore-project.info">EnCoRe Project</a> (LSE and HP) is looking at Ensuring Consent and Revocation.<br />
<ul><li>When we give consent do we understand what we are consenting to?</li><li>What means to we have for enforcing consent?</li><li>What means to we have for withdrawing it?</li><li>How can we make our conditions of disclosure stick to to those attributes, particularly beyond first disclosure.</li></ul><a href="http://www.atavistic.org/">Evan Ratliff</a> &#8230; <a href="http://www.wired.com/vanish/">decided to see how long he could drop of the grid for</a> &#8230; 27 days.&nbsp; He was hunted by online groups then subsequently protected by online groups.&nbsp; Interesting experiment from Wired.<br />
<br />
</p>
 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/11/996/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>JISC Federating the Next Generation: Day 2 Session 1</title>
		<link>http://alisonpope.me.uk/archives/2009/11/994/</link>
		<comments>http://alisonpope.me.uk/archives/2009/11/994/#comments</comments>
		<pubDate>Tue, 24 Nov 2009 10:48:48 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Professional]]></category>
		<category><![CDATA[fam09 fam iam rhul he]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/archives/2009/11/994/</guid>
		<description><![CDATA[	Federation enhancements and policy development first thing this morning for the survivors of games night last night.&#160; 

Federation Membership
Federation has been in operation 3 years, is funded by JISC and Becta, has 765 members, 971 entities (596 IDPs, 378 SPs and 3 both) and serves schools, FE, HE and research.&#160; 100% of HE are members, [...]]]></description>
			<content:encoded><![CDATA[	<p>Federation enhancements and policy development first thing this morning for the survivors of games night last night.&nbsp; <br />
<br />
Federation Membership<br />
Federation has been in operation 3 years, is funded by <span class="caps">JISC</span> and Becta, has 765 members, 971 entities (596 IDPs, 378 SPs and 3 both) and serves schools, FE, HE and research.&nbsp; 100% of HE are members, 74% in FE, 57% of English schools, 0% of schools in Wales but 100% of schools in NI and Scotland. 20% of total federation members have signed up to the rules but haven&#8217;t registered an entity so are classed as inactive.<br />
<br />
Service Enhancements<br />
<a href="http://www.ukfederation.org.uk/content/Documents/DevelopmentRoadMap">Roadmap</a> is reviewed twice per yeara to give the community a heads up on what&#8217;s going on.<br />
<br />
1. <span class="caps">WAYF </span>Review<br />
<ul><li>Independent review of the <span class="caps">WAYF</span> login process</li><li>Conducting usability tests to assess usability in the context of the user journey</li><li>Aim is to improve usability and accessibility for all users.</li><li>Prioritised recommendations for next steps by July 2010</li><li>Passed onto Rhys Smith to link into the <span class="caps">JISC </span>Publisher INterface Study and to Shib developers working on SP discovery.</li></ul>2. Portal Best Practice<br />
<ul><li><span class="caps">WAYF</span> is a backstop but encouraging IDPs to deploy a portal so that users have a consistent method to login and access resources.</li><li>Expert team will consider technologies and definitions of portal to provide a best practice guide for the deployment of discovery services.</li><li>Possibly also publish brandable codebase.<br />
</li><li>Recommendations published by April 2010</li></ul>(Do users even like the portal discovery route?? Am not convinced telling users to always start from a certain point is how they actually work).<br />
<br />
3. Metadata Scaling<br />
<ul><li>Centralised metadata does not scale.&nbsp; The size of the <span class="caps">UK </span>Federation makes this a growing issue.</li></ul>4. Statistics Gathering<br />
<ul><li>Federation needs to justify its existence!&nbsp; So&#8230;</li><li>Allow IdPs to visualise how the service is used.</li><li>Anonymous central database of usage statistics.</li></ul>5. Satisfaction Survey<br />
<ul><li>Canvass opinion</li><li>Create a benchmark of customer satisfaction</li><li>Has the federation met its objectives?</li><li>Highlight areas for improvements.</li></ul>Inter-Federation<br />
<br />
Draft clauses have been agreed for this.&nbsp; Looking for use cases to roadtest these policies.&nbsp; Paper going to <span class="caps">UK </span>Policy Board.<br />
<br />
Eligibility<br />
<br />
Interest from <span class="caps">NHS</span>, Government, Libraries, Museums etc in joining the Federation.&nbsp; Trial memberships are approved by <span class="caps">JISC</span> and Becta on a case by case basis on the understanding that future charges will apply.&nbsp; Need to agree and establish policy and come up with a fair pricing model for these other sectors.<br />
<br />
Owen is questioning the portal over <span class="caps">WAYF</span> approach.&nbsp; The answer is there is no answer to the discovery problem.&nbsp; Ok that rather pessimistic sweeping statement has been qualified to say there is no <strong>single</strong> answer to the discovery problem and this is being tackled on four fronts and that ideally discovery will be solved closer to the SP end than the <span class="caps">IDP</span> end.&nbsp; Mark also points out that the portal study came from schools and for younger learners the portal approach is a good way to direct them to resources.&nbsp; Scope of federation users is incredibly broad from school children to professional researchers.<br />
<br />
Changing my mind now and going to the Access and Identity Management Programme session.&nbsp; Thought this would be entirely the same as the Birmingham briefing day but Chris gave me heads up last night that there is a bit of new information on what they got for the 08/09 call and some information on a second call coming out in January 2010 which might be of interest.&nbsp; I gave Chris some feedback last night mainly about the timing of the last call.&nbsp; The second call might be better timing for us than the previous call.<br />
<br />
The first part of this session covers the ground from the briefing event so isn&#8217;t much new.&nbsp; Interesting discussion on user-centric identity as a key theme of the previous call.&nbsp; Lack of evidence that users are bringing their own identity like OPenID and demanding to use it.&nbsp; Nate pointed out that in his keynote later he will point to evidence of use of Facebook and Twitter IDs but he questioned whether this was user-centric as per the original vision.&nbsp; It is an identity source that exists beyond the user&#8217;s relationship with the institution but is it genuinely user-centric?&nbsp; Nate asked if there was anything happening on consent &#8211; Chris said there were no bids for that.<br />
<br />
So the themes of the original call were:<br />
<ul><li>user centricity</li><li>granularity &#8211; fine grained access control</li><li>delegation of authority</li><li>n-tier &#8211; transferring attributes across systems</li><li>accounting/auditing</li></ul>The cross-themes were:<br />
<ul><li>Technology and Tools</li><li>Interoperability <br />
</li><li>Use Cases</li><li>Policy</li><li>Licencing</li></ul>They got 20 bids for the Innovation strand and 1 bid in the Level of Assurance (LoA) strand.&nbsp; Looks like quite a lot on user centric tools and use cases.&nbsp; Most bids for tech and tools and then use cases.&nbsp; Policy surprisingly low given how many people said it was their big issue at the Briefing Day in Birmingham &#8211; and came out as a theme yesterday in the Identity Management Toolkit session.&nbsp; Nicole has suggested that maybe the big call doesn&#8217;t help and it needs to be more focused.&nbsp; Maybe but the big call allows flexibility and creativity &#8211; maybe we aren&#8217;t creative.&nbsp; I have to say we had ideas in this space and chatted to some at the briefing day about a collaborative bid but the timing of the call and the overhead a <span class="caps">JISC</span> project adds to work in progress were the main off putting factors.<br />
<br />
Is LoA an area that <span class="caps">JISC</span> should be funding?&nbsp; Response to this was very low.&nbsp; HE has relatively few use cases that require a very high level of assurance.&nbsp; Grants, student loan information are examples from the US given by Nate.&nbsp; Nate points out that Facebook&#8217;s peer approval gives quite a high level of assurance for Facebook identities but validation by peers isn&#8217;t a traditional metric of LoA.&nbsp; Nate suggests that he&#8217;d like to see some work on how to define LoA differently &#8211; the more chaos the less useful this gets. It sounds like this is a massively intractable problem<br />
<br />
</p>
 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/11/994/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Federating The Next Generation: Lightning Sessions/Open Discussion</title>
		<link>http://alisonpope.me.uk/archives/2009/11/992/</link>
		<comments>http://alisonpope.me.uk/archives/2009/11/992/#comments</comments>
		<pubDate>Mon, 23 Nov 2009 18:32:48 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Journal]]></category>
		<category><![CDATA[fam09 fam iam rhul he]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/archives/2009/11/992/</guid>
		<description><![CDATA[	There&#8217;s beer (although had a female moment getting my beer open with the bottle opener) and very nice leather chairs in this rrom so worth staying on for some extra info and discussion in this session.

Eduserv get their moment to talk about the OpenAthens LA 2.0 launch.

Now Owen (Stephens &#8211; some of you might not [...]]]></description>
			<content:encoded><![CDATA[	<p>There&#8217;s beer (although had a female moment getting my beer open with the bottle opener) and very nice leather chairs in this rrom so worth staying on for some extra info and discussion in this session.<br />
<br />
Eduserv get their moment to talk about the OpenAthens <span class="caps">LA 2</span>.0 launch.<br />
<br />
Now Owen (Stephens &#8211; some of you might not know him!) is talking about <span class="caps">WAYF</span>? and other stupid questions. Just getting the whistle stop version of the <a href="http://www.open.ac.uk/telstar/">Telstar</a> presentation we saw last week at <span class="caps">RHUL</span>.<br />
This is really about multiple affiliations: where are you from?&nbsp; Also where do you live?&nbsp; Where do you work?&nbsp;&nbsp; Even who do you know?&nbsp; Horrified gasps in the room at anecdotes about this sort of &#8216;peer to peer&#8217; networking.<br />
Yes see &#8220;What are your affiliations&#8221;?<br />
This isn&#8217;t about owning data but knowing how to use it.&nbsp; We know most about our affiliations even though we may not know what those affiliations give us access to.&nbsp; The key for users is not where am I from but where do I need to be from today to get access to this resource that I want to use.&nbsp; The user needs to help answer the question of multiple affiliations, at the point of using a resource the user just wants access.&nbsp; Users don&#8217;t always know the best route to get access to resources that one of their affiliations might allow them to have access to.<br />
Who should answer that question??&nbsp; The person has to be involved??&nbsp; But which organisation or service should &#8216;curate&#8217; user affiliation lists.&nbsp; Authorisation needs to be more sophisticated.&nbsp; Once I&#8217;ve established I&#8217;m me &#8211; how does the service provider answer the question can any provide the user with this resource by one of the affiliations we know about that user.&nbsp; We have to tell someone &#8211; then who do we allow that someone to share with. <br />
Is there an incentive for SPs at the moment on an institutional subscription model??<br />
Thought provoking and debate provoking as per usual&#8230;<br />
<br />
John Paschoud now talking about coincidentally multiple affiliations. One of the big usability issues in the <span class="caps">FAM</span> model. Do you want your life to be more segmented or more joined up? Brings the question back to is this a problem?&nbsp; Are users sophisticated enough and do they not mind using the credentials for the best affilation at point of use.&nbsp; Probably not most of them &#8230; so looking at potential solutions that balance the seamless access/privact conundrum.&nbsp; Shintau described as the most workable. This is about designating a primary <span class="caps">IDP</span>.&nbsp; This <span class="caps">IDP</span> can know about other IDPs or not even about each other if using a linking service, and can release an additional attribute about another <span class="caps">IDP</span> who can pass a token to get access to only the necessary attributes.&nbsp; I think it&#8217;s something along those lines&#8230; Google it! It sounds interesting anyway.<br />
<br />
Now we are on Consent Management&#8230; Cambridge &#8230; a loose federation itself. May have data, not necessarily consent to release it. Terms and conditions prompt.&nbsp; Get an information rleease prompt when using each SP for the first time.&nbsp; Usually 3 attributes to external SPs.&nbsp; Starting to use Shib for internal resources so prepared to release many more attributes which makes the release screen horrific.&nbsp; I&#8217;m going to the full consent management parallel session tomorrow and it sounds like it will be important governance part of the <span class="caps">FAM</span> project.<br />
<br />
Wishlist:<br />
<ul><li>Configurable T&#038;C splash screen</li><li>Let users choose the privacy they want</li><li>Don&#8217;t ask in advance, remember choices</li><li>Let users change their mind</li><li>Configurable defaults</li><li>Tell the user what will be released not what could be released</li><li>Distinguish what we must be released from what could be released</li><li>Identitfy everything from the user&#8217;s <span class="caps">POV</span></li><li>Some attributes are more equal than others</li><li>Seamless IdP plugin or part of IdP</li><li>Easily skinnable<br />
</li></ul>Waiting for Eduserv to pipe up that OpenAthens <span class="caps">LA 2</span>.0 does all this <img src='http://alisonpope.me.uk/wordpress/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> <br />
Instead Andy Powell asks some further questions:<br />
<br />
It would be nice if T&#038;C terms were more user friendly.<br />
Would be nice if SPs provided information on how they use attributes<br />
<br />
[Looks like a conference full of IT/Library geeks has finally crashed the free wireless &#8211; everyone whips out their iPhones instead]<br />
<br />
Perception of SPs is they can&#8217;t get anything out of Federation IDPs anyway because of data protection.&nbsp; Are IDPs willing to engage with SPs and get these issues hammered out.<br />
<br />
Now some information on federated access in Japan.&nbsp; <span class="caps">UPKI</span>-Federation is&nbsp; service of National Institute of Informatics in Jpan.&nbsp; Has 4 IDPs and 10 SPs.<br />
<br />
<br />
</p>
 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/11/992/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Federating the Next Generation: Session 2 Aggregating Metadata and The Identity Management Toolkit</title>
		<link>http://alisonpope.me.uk/archives/2009/11/990/</link>
		<comments>http://alisonpope.me.uk/archives/2009/11/990/#comments</comments>
		<pubDate>Mon, 23 Nov 2009 16:46:55 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Professional]]></category>
		<category><![CDATA[fam09 fam iam rhul he]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/archives/2009/11/990/</guid>
		<description><![CDATA[	Into parallel sessions now.&#160; Firstly I&#8217;m with the self-described &#8216;Uncle Fester&#8217; of the UK Federation (actually Ian Young) and looking at metadata aggregation.&#160; Specifically in a multi-federation, or post-federation world and technical approaches featuring various dramatis personae and NOT THAT SAML diagram.

&#8220;It is about two entities and a conversation&#8221;

Or more to the point two trusting [...]]]></description>
			<content:encoded><![CDATA[	<p>Into parallel sessions now.&nbsp; Firstly I&#8217;m with the self-described &#8216;Uncle Fester&#8217; of the <span class="caps">UK </span>Federation (actually Ian Young) and looking at metadata aggregation.&nbsp; Specifically in a multi-federation, or post-federation world and technical approaches featuring various dramatis personae and <span class="caps">NOT THAT SAML</span> diagram.<br />
<br />
&#8220;It is about two entities and a conversation&#8221;<br />
<br />
Or more to the point two trusting entities &#8230; so we&#8217;re going to talk about Trust.&nbsp; Specifically Alice, Bob and trust &#8230; so couple counselling then.<br />
<br />
Trust could mean: &#8220;this is Bob&#8221; (technical &#8211; mediated by metadata)<br />
Trust could mean: &#8220;I like Bob&#8221; (behavioural &#8211; mediated by policy)<br />
<br />
&#8220;You can only apply policy based on behavioural trust once you have established technical trust&#8221;.<br />
<br />
Metadata: Publish, Exchange and Consume so there is a protocol for knowing how to send requests and responses. We&#8217;ve wrapped this up into a federation but this is only one possible implementation: &#8220;The software doesn&#8217;t know about federations&#8221; &#8211; Scott Cantor.<br />
<br />
Rethinking federations&#8230; they are primarily social structures with technical artefacts, not technical structures.&nbsp; They do not have entities, they are made up of their member organisations and enable communications between entities within their member organisations.<br />
<br />
Now our idea of a federation allows the metadata to come from elsewhere &#8211; a subset of metadata via another federation for example.&nbsp; If this exchange is direct it works but isn&#8217;t n-scaleable to keep adding bilateral relationships.&nbsp; So instead within our federation we add a Registrar function and a Publisher function.&nbsp; Alice registers her metadata via the Registrar function, is aggregated and then Published by the federation.&nbsp; The Registrar function may export the data it receives; the Publisher function may receive metadata registered elsewhere and include it in the metadata it aggregates and publishes.&nbsp; Again this doesn&#8217;t really help us scale unless you add in something like a regional aggregator that is not a federation in itself but acts as a kind of hub passing data between federations.<br />
<br />
This is important not just internationally but for collaborations like SWan or even subject based aggregators.<br />
<br />
Aggregation Engines:<br />
<br />
&#8220;A configurable building block for metadata networks or metadata layer&#8221;<br />
<ul><li>Subscribe<br />
</li><li>Publish</li><li>Aggregate</li><li style="font-weight: bold;">Transform</li><li>Consume</li></ul>Sounds exactly like what we needed for SWan.&nbsp; Transformation makes this quite powerful.<br />
<br />
A metadata layer similar to the <span class="caps">DNS</span> naming layer.<br />
<br />
Scaling<br />
<br />
The <span class="caps">UK </span>Federation is likely to hit 1000 entities by the end of the year.&nbsp; Metadata file has risen to about 8Mb at the moment.&nbsp; As things get bigger &#8230; won&#8217;t everything become &#8220;too big&#8221;.<br />
<br />
You don&#8217;t need every entity at runtime to know everything about every other possible entity it might want to interact with.&nbsp; Again comparing to <span class="caps">DNS</span> and the function of the hosts file &#8211; no longer contains host metadata &#8211; pushed out to decentralised <span class="caps">DNS</span> system.&nbsp; Long term way to go for the metadata layer too.<br />
<br />
Haven&#8217;t talked about:<br />
<ul><li>Behavioural trust in large systems</li><li>Trust relationships between aggregators</li><li>The discovery problem<br />
</li></ul>Interesting stuff&#8230; but will it work??&nbsp; Or will it just make those problems above that Ian hasn&#8217;t discussed even more problematic to the point that the technical architecture is great but the system is unworkable and the experience unusable.<br />
<br />
Now John Paschoud on the Identity Management Toolkit project&#8230;<br />
<br />
&#8220;You can&#8217;t really do federated access properly unless you do identity management first&#8221;.&nbsp; You have to assert user accountability as part of the federation&#8217;s rules.<br />
<br />
The Identity Management Toolkit is for people like us &#8211; and the people we have to sell it too &#8230; and may go to jail or face embarassing questions if we get it wrong.<br />
<br />
Is IdM (still) a Key Issue??<br />
Not sure what the answer is going to be &#8230; but still both.&nbsp; One of the things is: it&#8217;s unglamorous, it&#8217;s both &#8216;done&#8217; and emerging because stable use cases may be well known and solved&#8230; but then new unstable use cases emerge and these too then need solving (of course this comes back to the need to first solve your Identity Management Architecture &#8211; the business, data, technical and governance architecture that surrounds your IdM).<br />
<br />
The agreement in the room was that yes it&#8217;s bothsolved and unsolved &#8230; or always half solved.<br />
<br />
Identity Management Toolkit helps you focus on the buesiness case &#8211; the drivers for IdM.&nbsp; These have to focus on costs, savings, efficiencies, student experience etc.&nbsp; I&#8217;m not convinced that national and international drivers are really a key driver for the business stakeholders.<br />
<br />
It is hard to make the business case &#8211; the language of identity can get too abstract and philosophical (nooo surely not??).&nbsp; The solutions are mostly middleware and therefore so are the costs.&nbsp; So no-one notices when it&#8217;s working.&nbsp; (And you can&#8217;t really get business users to really love it like you can with web sites and <span class="caps">CRM</span> systems).<br />
<br />
The policy vacuum &#8211; policy about IdM is incomplete (or worse).&nbsp; Yes<img src="!" alt="" border="0" />&nbsp; Although people think it isn&#8217;t.&nbsp; People think the policy is known.&nbsp; Through process or practice or ad hoc things that people just know, but can you find a written policy hmmmm?&nbsp; Well can you?<br />
<br />
Toolkit project came out of the Identity Project.&nbsp; Started in January 2009.&nbsp; Will launch in March 2010 at <span class="caps">JISC</span> and <span class="caps">UCISA</span> annual conferences.&nbsp; it is being produced by Bristol, Cardiff, Kidderminster and <span class="caps">LSE</span>.&nbsp; Oversight from <span class="caps">UCISA</span>, RUGIT, <span class="caps">ISAF</span>, JISC, RSCs and an independent evaluator.<br />
<br />
The tools in the Toolkit are:<br />
<ul><li>Definitions of IdM terminology and concepts (good.&nbsp; Does it cover different approaches to access e.g. discretionary, role based, claims based?)</li><li>Service Usage Models and how they relate to the rest of the other e-Framework model (interesting and may be useful in providing examples of scenarios and business drivers &#8211; but not many of us in the room familiar with the e-Framework model).</li><li>Governance and Policy guidance (good.&nbsp; This is a key area.&nbsp; Does it cover just writing formal policies or organising and tracing business rules and governance structures).<br />
</li><li>Guidance and Templates for an IdM Audit of current practice (useful)</li><li>IdM Requirement Specification Guide (ok)<br />
</li><li>Gap Analysis guide (ok)<br />
</li><li>Preparing an IdM Business Case (good)<br />
</li><li>IdM Roadmap for universities and colleges (ok)<br />
</li><li>IdM Procurement guide to systems solutions (ok)</li></ul>Anything on data inventory??&nbsp; Any workflow or business process models?? No &#8211; but they could go in.<br />
<br />
Also from the bottom of the drawer:<br />
<ul><li>example policies</li><li>network/wi-fi access for &#8216;walk-in&#8217; users (third stream visitors etc).<br />
</li><li>IdM related job descriptions</li><li>How to run the &#8216;Passwords for Chocolate&#8217; test.&nbsp; this was the test they did to see if you could get people to tell you their passwords in exchange for chocolate.</li></ul>There was a first stab of the toolkit, then road tested on IdM improvement projects at Kidderminster and Bristol.&nbsp; It will be produced in traditional &#8216;glossy&#8217; documents and interactive online version.<br />
<br />
We&#8217;re having a vote on what are the most and least important aspects of the Toolkit.<br />
<br />
Governance and Policy guide voted the most important (which fits with the outcomes of the <span class="caps">AIM</span> funding call that this is the <span class="caps">BIG BIG</span> issue institutions are dealing with.&nbsp; It is <span class="caps">NOT</span> an IT problem but is a problem of the departments responsible for the source data and for the policy).&nbsp; I voted for concepts and terminology however because I don&#8217;t think you can start talking well about governance and policy and make it a business not an IT thing until you can agree on the semantics and have a common business vocabulary to work with and business users understand these concepts and how they relate to business events and processes. If these terms and concepts were defined more unambiguously across institutions too then this might help identity and access management become more joined up. The least important was voted as the Service Usage Models for the e-Framework.&nbsp; Not a very <span class="caps">JISC</span> friendly asnwer.&nbsp; I can see why though.&nbsp; As a business analyst I think this will be useful and will really come into their own as IdM and e-Framework approaches become more mature and embedded but given the practical problems facing institutions you can understand why these seem too abstrat compared to the more pragmatic artefacts (and only 2 of us were familiar with the e-Framework).<br />
<br />
Still a good session.&nbsp; No some open discussions, lightning talks about projects and hopefully the promised beer as I&#8217;m very thirsty!<br />
<br />
<br />
<br />
</p>
 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/11/990/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Federating the Next Generation: Session 1</title>
		<link>http://alisonpope.me.uk/archives/2009/11/988/</link>
		<comments>http://alisonpope.me.uk/archives/2009/11/988/#comments</comments>
		<pubDate>Mon, 23 Nov 2009 14:40:58 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Professional]]></category>
		<category><![CDATA[fam09 rhul iam fam he]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/archives/2009/11/988/</guid>
		<description><![CDATA[	In Cardiff at the Park Plaza today and tomorrow for the JISC Federating the Next Generation event discussing the future of federating identity in the UK education sector which is going to be a big challenge as we look at improving the usability and security of access to local, cloud and externally licensed services whilst [...]]]></description>
			<content:encoded><![CDATA[	<p>In Cardiff at the Park Plaza today and tomorrow for the <span class="caps">JISC </span>Federating the Next Generation event discussing the future of federating identity in the UK education sector which is going to be a big challenge as we look at improving the usability and security of access to local, cloud and externally licensed services whilst servicing an increasingly kinetic and fluid user population (often with existing identities and multiple affiliations), and searching for efficiencies and new income streams through innovative collaborative partnerships, such as the South West London Academic Network (SWan) we participate in, increasingly with non-education institutions as part of our outreach agendas sharing knowledge with enterprises and community organisations.<br />
<br />
Peter Tinson and Sara Marsh are starting us off with a landscape keynote from the <span class="caps">UCISA</span> and <span class="caps">SCONUL</span> perspective.&nbsp; Identity and Access Management is a current concern for Library directors, reflecting the pressing demands of library access as the dominant use case for federation, and is an emerging, rather than a top concern for IT directors probably linked to the number institutions moving or considering moves into the cloud for some services.&nbsp; David Harrison is looking at other use cases beyond Athens replacement.&nbsp; Peter describes some examples of using Shibboleth to provide access to internal resources e.g. shibbolised instance of Moodle that can then provide seamless access to external resources contained within the course content.<br />
<br />
What&#8217;s needed:<br />
<ul><li>Strategic message at the highest levels in the institutions.&nbsp; Federation is too often seen as just an Athens replacement and therefore a library thing but you need to consider the other drivers and use cases.&nbsp; Multiple federations: global collaboration with other federations for example.<br />
</li><li>Benefit/impact analysis</li><li>A longer road map</li></ul>Questions/Points from the Floor&#8230;<br />
<br />
Eduserv pointing out federations means <span class="caps">SAML2</span>.0 compliance not necessarily Shibboleth.&nbsp; Acknowledged that there are multiple routes to implementation.&nbsp; We are currently using OpenAthens and may be interested in looking at Shibboleth, OpenAthens LA and <span class="caps">ADFS 2</span>.0 if want to bring in house.<br />
(http://assurancesinidentity.blogspot.com/2009/10/adfs-20-passes-saml-20-interoperability.html, <br />
http://msdn.microsoft.com/en-us/magazine/ee335705.aspx)<br />
<br />
Discussion now about granularity of access and whether this is a &#8216;good&#8217; thing.&nbsp; Mainly focused on the library resource use case &#8230; obviously for other use cases it is a &#8216;necessary&#8217; thing e.g. single sign on to internal services/applications.&nbsp; One of the use cases we might have that may need federated identities is collaborative access to primary research data sets.&nbsp; Granularity needed there.<br />
<br />
Now Josh Howlett &#8230; he&#8217;s a Middleware Architect for Janet UK.&nbsp; Now mainly working for Dante &#8211; network of 37 national HE networks in Europe.&nbsp; He&#8217;s starting off talking about international federations.&nbsp; US inCommon were first, then the Swiss and then UK.&nbsp; Now there&#8217;s loads basically.<br />
<br />
These federations are differentiated by:<br />
<ul><li>Technical architecture: centralised vs distributed.</li><li>Policy: federated identity and data protection</li></ul>The issues you get within federations (user experience, discovery, agreeing what can be said, agreeing on what things mean, agreeing how to say them) become even more problematic <strong>across</strong> federations.<br />
<br />
The goals of <a href="http://edugain.org/">eduGain</a> are<br />
<ul><li>to enable interoperability between international federations</li><li>Web <span class="caps">SSO</span> use cases</li><li>non-Web <span class="caps">SSO</span> use cases</li></ul>Looking at things like <a href="http://www.geant.net/">Geant</a>&nbsp; and cross-national research networks and extending <a href="http://www.eduroam.org/">eduRoam</a>.<br />
<br />
Goal is European scale reach with modest expenditure and effort.&nbsp; Not much then!<br />
<br />
So first we have to improve our IdM solution to provide local identities and local services more robustly, then we have to federate better locally, then better nationally, then we need to federate globally and then given the many Star Trek references so far &#8211; intergalatically, probably with the Klingons.&nbsp; Think that will probably take us up to <span class="caps">IAM</span> phase 103.<br />
<br />
Now Mark Cross is talking about Commercial Developments.&nbsp; Starting with university culture of cross-institution research collaboration &#8211; something the commercial sector can learn from.<br />
<br />
Seems a number of delegates have not used OpenID so there&#8217;s going to be a quick demo&#8230; OpenID v1 was for <span class="caps">SSO</span> and delegation; v2 added attribute exchange; v3 added something else but I was distracted by remembering that I&#8217;ve forgotten to deal with my OpenID migration.&nbsp; Which kind of raises a point about how stable personal identity providers can be.&nbsp; People may not entirely trust Google or Microsoft but I do actually trust my Google ID and Passport to stick around so is it worth trading aggregation of my personal data for this kind of robust provision and no financial cost??<br />
<br />
Video now about ordering Pizza in the future&#8230;<br />
<br />
<div class="youtube-video"><object height="355" width="425"><param name="movie" value="http://www.youtube.com/v/A7uasOK5FzQ&#038;feature=youtube_gdata"> </param><param name="wmode" value="transparent"> </param><embed src="http://www.youtube.com/v/A7uasOK5FzQ&#038;feature=youtube_gdata" type="application/x-shockwave-flash" wmode="transparent" height="355" width="425"> </embed>  </object></div><br />
which is the Big Brother/Privacy concerns aspect about sharing identity metdata.&nbsp; There is this constant tension between the idea of Freeing Your <span class="caps">ID </span>- to make it possible to easily resuse credentials and request and assert claims more easily within trusted arrangements and Protecting Your ID to prevent abuse and misuse of this data.&nbsp; Suggestion of <span class="caps">ABTA</span> type bonding for identity providers so they don&#8217;t go bust taking your identity down with it.<br />
<br />
There&#8217;s lots of soundbites and interesting snippets in this presentation but I&#8217;m not absolutely entirely sure what the key message is&#8230; apart from everything we learn today will probably be out of date within a year to 18 months &#8230; if not by tomorrow.<br />
<br />
</p>
 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/11/988/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>District 9</title>
		<link>http://alisonpope.me.uk/archives/2009/10/985/</link>
		<comments>http://alisonpope.me.uk/archives/2009/10/985/#comments</comments>
		<pubDate>Fri, 16 Oct 2009 08:54:25 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Journal]]></category>
		<category><![CDATA[amazon:asin= B002KCNT3G]]></category>
		<category><![CDATA[film]]></category>
		<category><![CDATA[imdb:title=tt1136608]]></category>
		<category><![CDATA[Review]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/?p=985</guid>
		<description><![CDATA[

	I have read many glowing reviews of District 9 but I have to say I just hated it.   First time I felt like I&#8217;d wasted my time in the cinema since 28 Weeks Later.  Maybe it&#8217;s not my genre (but I love Terminator, Alien, Blade Runner, Minority Report), but I found this [...]]]></description>
			<content:encoded><![CDATA[	<p><p><strong class="rating">Rating:</strong>&nbsp;&#9733;&#9734;&#9734;&#9734;&#9734;&nbsp;</p></p>

	<p>I have read many glowing reviews of District 9 but I have to say I just hated it.   First time I felt like I&#8217;d wasted my time in the cinema since 28 Weeks Later.  Maybe it&#8217;s not my genre (but I love Terminator, Alien, Blade Runner, Minority Report), but I found this mind numbing rather than though provoking.</p>

	<p>The concept starts out interesting &#8211; a faux-realist documentary showing archive footage and talking heads commenting on a retrospective incident involving the alien colony that lives in District 9, a ghetto just outside Johannesburg, after their ship becomes stranded over earth.  This is good &#8211; situating an alien/human engagement some time after first contact takes out the element of shock and awe and opens up the promising exploration of social issues such as immigration, racism, apartheid, genetic research and concerns like the horribly contemporary blurring of government, ngo and private roles particularly in the military complex.  The small leap from UN to <span class="caps">MNU</span> is disturbing.</p>

	<p>However I found that the film rapidly loses it&#8217;s way.  The satire and social commentary wasn&#8217;t subtle enough but increasingly laid on in simplistic and stereotypical lumps that made be both cringe and snigger and the thrills become increasingly crash bang wallop shoot &#8216;em up rather than suspenseful.</p>

	<p>Ultimately I thought this film couldn&#8217;t really decide what it wanted to be, throwing in tropes referenced from earlier films across many genres, much as the aliens scavenge amongst the human waste dumped in their ghetto.  I didn&#8217;t care about any of the protagonists and by the end I was simply bored.  The film progresses through acts like levels in a computer game and it probably would make an interesting concept game, but I didn&#8217;t find it a great evening at the cinema.</p>
 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/10/985/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Personas</title>
		<link>http://alisonpope.me.uk/archives/2009/08/974/</link>
		<comments>http://alisonpope.me.uk/archives/2009/08/974/#comments</comments>
		<pubDate>Fri, 28 Aug 2009 12:54:37 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Professional]]></category>
		<category><![CDATA[Study]]></category>
		<category><![CDATA[iam]]></category>
		<category><![CDATA[identity]]></category>
		<category><![CDATA[MIT]]></category>
		<category><![CDATA[personas]]></category>
		<category><![CDATA[ssec]]></category>
		<category><![CDATA[Surveillance Society Expose Culture]]></category>
		<category><![CDATA[tda]]></category>
		<category><![CDATA[The Digital Age]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/?p=974</guid>
		<description><![CDATA[	My current research interests (if I ever get any time for research) are to do with the dichotomy in surveillance society (the fear of identity being public) and expose culture (the fear of identity not being public).  At the same time my professional interests will soon turn back to managing identities within my institution [...]]]></description>
			<content:encoded><![CDATA[	<p>My current research interests (if I ever get any time for research) are to do with the dichotomy in surveillance society (the fear of identity being public) and expose culture (the fear of identity not being public).  At the same time my professional interests will soon turn back to managing identities within my institution and across federations of institutions where access to resources is shared or sold (if I ever finish our new institutional repository).</p>

	<p>So I was interested in coming across <a href="http://personas.media.mit.edu/">Personas </a>from the <a href="http://smg.media.mit.edu/">Sociable Media Group</a> at the <a href="http://www.media.mit.edu/"><span class="caps">MIT </span>Media Lab</a> via <a href="http://redgloo.sse.reading.ac.uk/ssswills/weblog/3384.html">Shirley Williams</a>.</p>

	<p>this tool is part of the <a href="http://web.mit.edu/museum/exhibitions/connections/#metropathologies">Metro(pathologies)</a> exhibit so it is an art project &#8220;about living in a world overflowing with information and non-stop communication&#8221;.  It allows visitors to become part of the exhibit by contributing their identities.  It&#8217;s a neat intersection of both my academic and professional interests.</p>

	<p>Which personas to we make and which personas are made?  Many of us will create carefully crafted personas that operate in different contexts: family, friends, professionally, publically.  Can there ever be a sense of an authentic sense amidst the kaleidoscope of carefully calibrated masks that we put up in front of ourselves as social contexts demand or encourage.  This behaviour is multiplied as we create profiles and personas for every web service and social application we use.  We may think we control these views of ourselves but we don&#8217;t because we will never really have any idea what other people see.</p>

	<p>Using data mining techniques this tool attempts to show us what the internet sees when it&#8217;s given our name.  It is notable that this is what the internet sees of our name not of us.  The name as identifier is pretty poor.  Algorithms without names authority cannot easily distinguish one individual from another with the same name; but the whole point of the Personas tool is to illustrate this and reflect on how &#8220;digital histories are as important if not more important than oral histories, and computational methods of condensing our digital traces are opaque and socially ignorant&#8221;.  Perhaps we might want them to be socially ignorant, because the other fear &#8211; of having a unique identifier always attached to our name element as an attribute in an xml rich semantic web would leave us with little place to hide and expose all data related to us whether controlled by us or not.  This is where are need to be may be undermined by a much greater fear of being made to be if our every interaction is sharply rather than fuzzily exposed.</p>

	<p>As it runs there is a lot of stuff that definitely isn&#8217;t me, although I know there are other Alison Popes working in the same sector so they &#8216;could&#8217; could have been me.  I know enough to know that they weren&#8217;t, but would you?</p>

	<p>This page though is definitely me!</p>

	<p><a href="http://alisonpope.me.uk/assets/public/2009/08/persona_alisonpope.png" rel="lightbox[974]"><img src="http://alisonpope.me.uk/assets/public/2009/08/persona_alisonpope-300x145.png" alt="persona_alisonpope" title="persona_alisonpope" width="300" height="145" class="aligncenter size-medium wp-image-982" /></a></p>


 ]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/08/974/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>It&#8217;s Days Like These That Make Me Happy*</title>
		<link>http://alisonpope.me.uk/archives/2009/08/968/</link>
		<comments>http://alisonpope.me.uk/archives/2009/08/968/#comments</comments>
		<pubDate>Wed, 12 Aug 2009 05:57:35 +0000</pubDate>
		<dc:creator>Alison Pope</dc:creator>
				<category><![CDATA[Journal]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[music]]></category>
		<category><![CDATA[spotify]]></category>
		<category><![CDATA[tda]]></category>

		<guid isPermaLink="false">http://alisonpope.me.uk/?p=968</guid>
		<description><![CDATA[Turns out I don&#8217;t need much in life and some days most of the things in life that make you happy come along and make what started out as an ordinary day into one that puts a big smile on your face.  Don&#8217;t need big parties or grand schemes or loads of money to [...]]]></description>
			<content:encoded><![CDATA[<p>Turns out I don&#8217;t need much in life and some days most of the things in life that make you happy come along and make what started out as an ordinary day into one that puts a big smile on your face.  Don&#8217;t need big parties or grand schemes or loads of money to make me happy &#8230; I&#8217;m a simple girl just need sunshine, freedom, laughter, music, wine, stars, candlelight, food on the barbie and friendship and most of that you don&#8217;t even have to buy.</p>
<p>My day got better as it went on as meetings I was supposed to have melted away leaving me with a working day to concentrate on my tasks in my own time frame without interruption.  Even better I didn&#8217;t break anything.  Headphones on I worked my way through a Moodle upgrade listening to the full Gladiator soundtrack on <a href="http://www.spotify.com/en/">Spotify</a> upgrading to Premium on the way.   Much as I absolutely agree with giving blood (when mine decides it wants to come out) I didn&#8217;t want the Give Blood advert spoiling my music stream any more.  So now I have a world of music at my finger tips simply and instantly (and their upgrade and payment process was simple and instant &#8211; oh joy).</p>
<p>Then surprisingly I find Microsoft are doing something interesting to make me late leaving work. Hello <a href="http://www.educationlabs.com">Education Labs</a> a kind of marginal space for interaction between Microsoft and the education sector.  Their first offering is <a href="http://www.educationlabs.com/projects/moodleproduct/Pages/default.aspx#">a plugin that integrates Microsoft Live services into Moodle: access to email</a>, messenger and single sign on using a Live ID.  Kind of interesting if you are a Moodle developer whose users complaining they don&#8217;t get Moodle messaging and whose email team is just about to outsource all student email to <a href="http://my.liveatedu.com/">Live@edu</a>.  It&#8217;s even licensed under the GPL and has already been downloaded 1011 times.  It&#8217;s gone on my product backlog.  Still old habits die hard &#8211; click on the RSS feed to subscribe to Education Labs updates and yes it will launch and subscribe you in Outlook without giving you the option to use any other reader without good old cut and paste. Boo.</p>
<p>Home time towards glorious blue skies and a warm summer evening and for the first time in a long time an evening with nothing planned, no responsibilities &#8211; more of that freedom.  Actually not true I did have some things to do last night so apologies to all who have asked me to do things I was supposed to do that I ignored &#8211; the evening just unfurled in a more chilled direction.</p>
<p>Now my Australian housemate has lived over here for 20 years &#8211; I&#8217;ve been her friend for 12 and it&#8217;s probably a good thing she is going home in 2 months because when I got back was she outside firing up the barbie taking advantage of this rare summer evening delight.  No.  She was sat inside cooking roast pork in the oven.  Talk about role reversal &#8211; thank goodness she&#8217;s still baiting me about the cricket otherwise I&#8217;d be really worried.</p>
<p>Chores done, wine poured I&#8217;m out there throwing some sweet red peppers and seas bass onto the barbie and eventually tempt her outside for 2 hours of wine, conversation and exploring music joy as dusk falls.  I love Spotify &#8211; legal access to all the music you could want evening&#8217;s like this demonstrate its genius.  We didn&#8217;t know what we wanted to listen to we just went from track to track exploring artists, themes, decades, memories &#8211; the whole lot a soundtrack to our lives and friendship.  We started with Erasure and The Innocents (1988) and ended with Elvis.  In between we challenged Spotify to play us Australian classics (it failed on the whole) and had a debate about which was the best version of Angel of the Morning (I went for <a href="http://open.spotify.com/track/0pEsbOUt0KfGByoFQRSzAz">The Pretenders</a> Jen for <a href="http://open.spotify.com/track/0j80n8R6k6yFqEKHHWOBs1">Jill Johnson</a> although I do like the Blackman and the Butterfly version which isn&#8217;t on Spotify and the German version is absolutely hilarious).</p>
<p>Recent research suggests <a href ="http://www.techdigest.tv/2009/08/turns_out_kids.html">the 14-24 year olds aren&#8217;t falling for Spotify</a> because they want to own not stream music.  This is kind of a false dichotomy, because unless you are the originator of music you never actually own it.  You purchase a license to listen to it for your own personal use.  Whether you choose to store a licensed copy of a manifestation of it on a local device or storage medium yourself, or let someone else do the storage and stream it will probably become increasingly redundant particularly as streaming services become <a href="http://www.mirror.co.uk/news/technology/2009/08/06/spotify-courting-several-operators-over-mobile-app-115875-21576386/">embedded in devices themselves</a>.  For the work of art in the age of digital reproduction licenses and links matter more than bits.</p>
<p>* <a href="http://open.spotify.com/track/6yesflRFqQaXffNWbjytHJ">Days Like These</a> &#8211; The Cat Empire</p>
]]></content:encoded>
			<wfw:commentRss>http://alisonpope.me.uk/archives/2009/08/968/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
