Author: Andrew Hughes

I am exploring the world of mobile digital credentials and trusted identity information management. The internet is changing as authentic identity becomes engrained in risk management equations for online services. My background is in IT security, identity information management, Government IT and systems thinking. My goal for the moment is to find patterns and order in the chaos as new paradigms and architectures for privacy-protective solutions evolve. It's going to be a wild ride.

A Conceptual Model for the NSTIC ID Ecosystem

~ Andrew Hughes ~ 3 Comments

Having spent the last year living and breathing federated identity and credentials, trust frameworks and the like, and the greater part of a decade consulting in the security, privacy and identity management fields, I think I have come up with a few ideas. This slide deck is an attempt to start describing a Conceptual Model … Continue reading A Conceptual Model for the NSTIC ID Ecosystem

Fear, Uncertainty and Liability Or: How I Learned To Stop Worrying And Love the Trust Framework

~ Andrew Hughes ~ Leave a comment

I read an excellent White Paper on The Vocabulary of Identity Systems Liability, published by OIX, The Open Identity Exchange. The lead authors are Thomas Smedinghoff, Mark Deem and Sam Eckland. Liability is often named as the unknowable threat to the viability of federated identity arrangements. The  uncertainty around liability is partially caused by lack … Continue reading Fear, Uncertainty and Liability Or: How I Learned To Stop Worrying And Love the Trust Framework