Persona Concept for Privacy and Authentication

Abstract

This paper describes ongoing research and development aimed at creating a trustworthy software-based model called the Persona Concept. The Persona Architecture uses web services to implement this model and is designed to provide the consumer direct control over their identity, credentials and private data. Credentials are expressed as third-party assertions encapsulated in certificates using Secure Assertion Markup Language (SAML) and are digitally signed. The architecture also supports distributed management of electronic credentials and aims at operating across various fixed and mobile platforms including cell phones and wireless Portable Digital Assistants(PDAs).