{"id":1094,"date":"2010-03-02T13:02:39","date_gmt":"2010-03-02T21:02:39","guid":{"rendered":"\/?p=1094"},"modified":"2010-03-02T13:12:59","modified_gmt":"2010-03-02T21:12:59","slug":"u-prove-minimal-disclosure-availability","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=1094","title":{"rendered":"U-Prove Minimal Disclosure availability"},"content":{"rendered":"<p>This blog is about technology issues, problems, plans for the future, speculative possibilities, long\u00a0term ideas\u00a0&#8211; all things that should make any self-respecting product marketer with concrete goals and metrics run for the hills!\u00a0 But today, just for once, I&#39;m going to pick up an <a href=\"http:\/\/www.microsoft.com\/presspass\/press\/2010\/mar10\/03-02RSA2010PR.mspx\" class=\"broken_link\">actual Microsoft press release <\/a>and lay it on you.\u00a0 The reason?\u00a0 Microsoft has just done something very special, and the fact that the announcement was a key part of the <a href=\"http:\/\/www.rsaconference.com\/2010\/usa\/\" class=\"broken_link\">RSA Conference <\/a>Keynote is itself important:<\/p>\n<p style=\"padding-left: 30px;\">SAN FRANCISCO \u2014 March 2, 2010 \u2014 Today at RSA Conference 2010, Microsoft Corp. outlined how the company continues to make progress toward its End to End Trust vision. In his keynote address, Scott Charney, corporate vice president of Microsoft\u2019s Trustworthy Computing Group, explained how the company\u2019s vision for End to End Trust applies to cloud computing, detailed progress toward a claims-based identity metasystem, and called for public and private organizations alike to prevent and disrupt cybercrime.<\/p>\n<p style=\"padding-left: 30px;\">\u201cEnd to End Trust is our vision for realizing a safer, more trusted Internet,\u201d said Charney. \u201cTo enable trust inside, and outside, of cloud computing environments will require security and privacy fundamentals, technology innovations, and social, economic, political and IT alignment.\u201d<\/p>\n<p style=\"padding-left: 30px;\">Further, Charney explained that identity solutions that provide more secure and private access to both on-site and cloud applications are key to enabling a safer, more trusted enterprise and Internet. As part of that effort,<span style=\"color: #000000;\"> Microsoft today released a community technology preview of the U-Prove technology, which enables online providers to better protect privacy and enhance security through the minimal disclosure of information in online transactions. To encourage broad community evaluation and input, Microsoft announced it is providing core portions of the U-Prove intellectual property under the Open Specification Promise, as well as releasing open source software development kits in C# and Java editions. Charney encouraged the industry, developers and IT professionals to develop identity solutions that help protect individual privacy.<\/span><\/p>\n<p style=\"padding-left: 30px;\">The company also shared details about a new partnership with the Fraunhofer Institute for Open Communication Systems in Berlin on an interoperability prototype project integrating U-Prove and the Microsoft identity platform with the German government\u2019s future use of electronic identity cards.<\/p>\n<p style=\"padding-left: 30px;\">As further evidence of how the company is enabling a safer, more trusted enterprise, Microsoft also today released Forefront Identity Manager 2010, a part of its Business Ready Security strategy. Forefront Identity Manager enables policy-based identity management across diverse environments, empowers business customers with self-service capabilities, and provides IT professionals with rich administrative tools.<\/p>\n<p style=\"padding-left: 30px;\">In addition, Charney reviewed company efforts to creatively disrupt and prevent cybercrime. Citing Microsoft\u2019s recently announced Operation b49, a Microsoft-led initiative to neutralize the well-known Waledac botnet, Charney stated that while focusing on security and privacy fundamentals and threat mitigation remains necessary, the industry needs to be more aggressive in blunting the impact of cybercriminals. Operation b49 is an example of how the private sector can get more creative in its collective approach to fighting criminals online.<\/p>\n<p style=\"padding-left: 30px;\">\u201cWe are committed to collaborating with industry and governments worldwide to realize a safer, more trusted Internet through the creative disruption and prevention of cybercrime,\u201d Charney said.<\/p>\n<p>Readers may remember the <a href=\"\/?p=937\">promise I made<\/a> when Microsoft&#39;s purchase of U-Prove and <a href=\"http:\/\/www.credentica.com\/\">Credentica<\/a> was <a href=\"http:\/\/www.networkworld.com\/news\/2008\/030708-microsoft-credentica.html\" class=\"broken_link\">announced in March 2008<\/a>\u00a0and some worried Microsoft might turn minimal disclosure into something proprietary:<\/p>\n<p style=\"PADDING-LEFT: 30px\">[It isn&#39;t&#8230;] trivial to figure out the best legal mecahnisms for making the intellectual property and even the code available to the ecosystem.\u00a0 Lawyers are needed, and it takes a while.\u00a0 But I can guarantee everyone that I have zero intention of <strong>hoarding<\/strong> Minimal Disclosure Tokens or turning U-Prove into a proprietary Microsoft technology silo.<\/p>\n<p>So here are the specifics of today&#39;s annoucement:<\/p>\n<ul>\n<li>Microsoft is opening up the entire foundation of the U-Prove intellectual property by way of a cryptographic specification published under the <a href=\"http:\/\/www.microsoft.com\/Interop\/osp\/default.mspx\" class=\"broken_link\">Microsoft Open Specification Promise (OSP).\u00a0\u00a0<\/a><\/li>\n<li>Microsoft is donating two reference SDKs in source code (a C# and a Java version) under a liberal free software license (BSD); the objective here is to enable the broadest audience of commercial and open source software developers to implement the technology in any way they see fit.<\/li>\n<li>Microsoft is releasing a public Community Technology Preview (CTP) of the integration of the U-Prove technology (as per the crypto spec) with Microsoft\u2019s identity platform technologies (Active Directory Federation Services 2.0, Windows Identity Foundation, and Windows CardSpace v2).<\/li>\n<li>As part of the CTP, Microsoft is releasing a second specification (also under the OSP) that specifies the integration of the U-Prove technology into so-called \u201cidentity selectors\u201d using WS-Trust and information cards.<\/li>\n<\/ul>\n<p>I really want to thank Stefan Brands, Christian Paquin, and Greg Thompson for what they&#39;ve done for the Internet in bringing this work to its present state.\u00a0 Open source availability is tremendously important.\u00a0 So is the achievement of integrating\u00a0U-Prove with Microsoft&#39;s metasystem components so as to show that this is real, usable technology &#8211; not some far-off dream.<\/p>\n<p>At RSA, Scott Charney showed\u00a0a <a href=\"http:\/\/www.microsoft.com\/mscorp\/twc\/endtoendtrust\/vision\/uprove.aspx\" class=\"broken_link\">4-minute video<\/a> made with the <a href=\"www.fokus.fraunhofer.de\/en\/fokus\/index.html \" class=\"broken_link\">Fraunhofer FOKUS Institute <\/a>in Germany that demonstrates interoperability with the German eID card system (scheduled to begin rolling out in November 2010). The video demonstrates how the integration of the U-Prove technology can offer citizens (students, in this case) the ability to minimally disclose authoritative personal information.<\/p>\n<p>There is also\u00a0a <a href=\"http:\/\/channel9.msdn.com\/identity\/\">20-minute video <\/a>that explains the benefits of integrating the U-Prove technology into online identity management frameworks.<\/p>\n<p>The U-Prove code, whitepaper and specifications, along with the modules that extend ADFS V2, WIF and CardSpace to support the technology, are available <a href=\"https:\/\/connect.microsoft.com\/content\/content.aspx?contentid=12505&amp;siteid=642\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Today we made the U-Prove crypto specification freely available under the OSP, released open source U-Prove reference implementations in C# and Java, and delivered modules that U-Prove enable our federated identity products&#8230; <\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[37,8,18,47,40,11,74],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1094"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1094"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1094\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1094"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1094"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1094"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}