{"id":871,"date":"2007-10-09T22:44:56","date_gmt":"2007-10-10T06:44:56","guid":{"rendered":"\/?p=871"},"modified":"2007-10-09T22:51:28","modified_gmt":"2007-10-10T06:51:28","slug":"bob-blakley-on-the-identity-oracle","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=871","title":{"rendered":"Bob Blakley on the Identity Oracle"},"content":{"rendered":"

As you can read here<\/a>, Bob Blakley thrashes me for my characterization of an Identity Oracle as “his sexy name for the claims transformer generating \u00e2\u20ac\u0153minimal disclosure tokens\u00e2\u20ac\u009d.<\/em>   He thinks I'm being geeky, and I probably am, but hey, geeks are people too.<\/p>\n

He puts it this way:<\/p>\n

 This statement is utterly and completely wrong.  An Identity Oracle is NOT<\/em><\/strong><\/u> a \u00e2\u20ac\u0153claims transformer generating minimal disclosure tokens\u00e2\u20ac\u009d.  It\u00e2\u20ac\u2122s not even a claims transformer.  It\u00e2\u20ac\u2122s not even a server.  It\u00e2\u20ac\u2122s not even technology.<\/p><\/blockquote>\n

“It's not even technology.”  I guess it “just happens”.  Reminds me of how Bentley Motorcars describe <\/a>what others would call a factory:<\/p>\n

This isn\u00e2\u20ac\u2122t a factory visit. It\u00e2\u20ac\u2122s the Bentley Experience.<\/p><\/blockquote>\n

But let's not turn our backs on Bob's pain:<\/p>\n

I\u00e2\u20ac\u2122ve said twenty times from various stages and in writing on my personal blog and here that as long as we continue to try to solve privacy problems using technology, we are going to continue to fail, and the Internet will continue to lack an identity layer, and it will continue to be a privacy hazard.  Identity and privacy are not technology problems \u00e2\u20ac\u201c they\u00e2\u20ac\u2122re social, legal, and economic problems \u00e2\u20ac\u201c and no technology can solve these problems.<\/p><\/blockquote>\n

Of course I agree that technology can't solve problems, only its design and usage can.  Although identity and privacy are social, legal and economic problems, they are technical ones too.<\/p>\n

It's paradoxical that I have to be the person to suggest that The Burton Group take in a bit of lawyer Lawrence Lessig's thinking about these matters, nicely summarized here<\/a>:<\/p>\n

Lessig… addresses the two forms of code that dominate the Internet: legal code (law) and machine code (the technology supporting the Internet).  As Lessig points out, the influence of both must be understood, as both will determine the shape of the future.<\/p><\/blockquote>\n

That has become a bit of a mantra for me, and one of the reasons why, when I see interesting policy ideas, I try to understand how they relate to “code”.<\/p>\n

Anyway, let's get to all the good points Bob makes.  Here's the basic dialog a service has with the Identity Oracle:<\/p>\n

\u00e2\u20ac\u0153I am allowed to extend service to Bob only if he is above the legal age for this service in the jurisdiction in which he lives. [Policy – ed.]  Am I allowed to extend service to Bob? [Claim request – ed.]\u00e2\u20ac\u009d<\/p>\n

And the Identity Oracle\u00e2\u20ac\u2122s response looks like this:<\/p>\n

\u00e2\u20ac\u0153Yes.\u00e2\u20ac\u009d [Claim response – ed.]<\/p><\/blockquote>\n

And here's what makes this dialog [transformer – ed.] interesting:<\/p>\n

The Identity Oracle, in normal operation, acts as a trusted agent for the user and does not disclose any personal information whatsoever; it just answers questions based on GiCorp\u00e2\u20ac\u2122s stated policies (that is, it distributes only metadata about its users \u00e2\u20ac\u201c not the underlying data). <\/p>\n

The Identity Oracle charges<\/strong><\/em> GiCorp and other relying-party customers money for its services.  The asset<\/em><\/strong> on the basis of which the Identity Oracle is able to charge money is its database of personal information.  Because personal information is its only business asset, the Identity Oracle guards personal information very carefully.<\/p>\n

Because disclosing personal information to relying-party customers like GiCorp would be giving away its only asset for free, it strongly resists disclosing personal information to its relying-party customers.  In the rare cases in which relying parties need to receive actual personal data (not just metadata) to do their jobs, the Identity Oracle requires its relying-party customers to sign a legally binding contract stating what they are and are not allowed to do with the information.  This contract contains indemnity clauses \u00e2\u20ac\u201c if GiCorp signs the contract and then misuses or improperly discloses the personal information it receives from the Identity Oracle about Bob, the contract requires GiCorp to pay a large amount of cash money to the Identity Oracle, which then turns around and reimburses Bob for his loss.<\/p>\n

This system provides Bob with much stronger protection than he receives under national privacy laws, which generally do not provide monetary damages for breaches of privacy.  Contract law, however, can provide any penalty the parties (the Identity Oracle and its relying party customers like GiCorp) agree on.  In order to obtain good liability terms for Bob, the Identity Oracle needs to have a valuable asset, to which GiCorp strongly desires access.  This asset is the big database of personal data, belonging to the Identity Oracle, which enables GiCorp to do its business. And allows the Identity Oracle to charge for its services.<\/p><\/blockquote>\n

Demonstrating that it is in the interests of information providers to monetize information by NOT giving it away is important.  Showing how this improves privacy and security of transactions makes it a double whammy.  I'm a big supporter, and I don't mean to in any way minimize Bob's contribution or uber point.  However I consider it key that this service can be provided within the same architectural framework as other identity services – that it can run on the tracks we are currently laying down.  I would think Bob would see that as positive.<\/p>\n

But he continues:<\/p>\n

As long as we keep talking about \u00e2\u20ac\u0153claims transformers\u00e2\u20ac\u009d (which are computers) instead of \u00e2\u20ac\u0153identity providers\u00e2\u20ac\u009d and \u00e2\u20ac\u0153identity oracles\u00e2\u20ac\u009d (which are businesses) we are going to continue to build products nobody uses. <\/p><\/blockquote>\n

Actually, people use a lot of the identity products we work on.  More than 87% of large enterprises last time I looked – one reason why a wide, open discussion of identity technology is so important.  I expect that when we build claims transformers into products they will be used too.  Everything is in the application.<\/p>\n

But back to the main point.  Bob is right in terms of commercial consumer identity providers:<\/p>\n

It\u00e2\u20ac\u2122s not an accident that there are no commercial consumer identity providers today \u00e2\u20ac\u201c no one is paying any attention to how such an entity would make money,<\/em><\/strong> and until investors know how they\u00e2\u20ac\u2122re going to get paid, nobody is going to go into the Identity business.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

Is Bob's Identity Oracle really divorced from technology?<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[37,8,11],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/871"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=871"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/871\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}