Author: Andrew Hughes

I am exploring the world of mobile digital credentials and trusted identity information management. The internet is changing as authentic identity becomes engrained in risk management equations for online services. My background is in IT security, identity information management, Government IT and systems thinking. My goal for the moment is to find patterns and order in the chaos as new paradigms and architectures for privacy-protective solutions evolve. It's going to be a wild ride.

Account Recovery should be the main authentication flow!

~ Andrew Hughes ~ Leave a comment

I’ve been thinking about “what’s next” in the world of wide-scale consumer authentication systems. We hear a loud proclamations for death to passwords, when what we all really want is just death to intrusive, poorly designed, stop-gap logon systems. So how should “better” be defined in this space? Here’s one proposal that might change our … Continue reading Account Recovery should be the main authentication flow!

Why is online identity such a hot subject? Thoughts on current trends.

~ Andrew Hughes ~ Leave a comment

Interesting trends are emerging in the Online Identity circles I travel. One trend is the shift away from formalized, enterprise, centrally-regulated Federations towards ad-hoc, consumption-driven, transaction-oriented architectures and policies. On one hand, I see advancement in 'formal Federation', which I will loosely define as a pre-evaluated structuring of centrally defined requirements and criteria, realized as … Continue reading Why is online identity such a hot subject? Thoughts on current trends.