Note: this blog is a mirror of my HP Labs Blog, on the same topic, accessible at: http://h30507.www3.hp.com/t5/Research-on-Security-and/bg-p/163

Monday, July 23, 2007

More on Device-based Identity Management in Enterprises …

I have just published a HP Labs Technical Report (jointly written with a colleague) on device-based identity management, in an enterprise context:
http://hplabs.hp.com/techreports/2007/HPL-2007-53.html
This report describes R&D work done at HP Labs (a few months ago) to model and associate “strong” identities to devices; handle their provisioning within an organisation; deal with access control systems keeping into account combinations of users’ identities and devices’ identities.
This work aims at helping enterprises to better handle their appliances and devices by leveraging their current identity management solutions (at a middleware level) and ensure a reasonable degree of security and trustworthiness. We are also exploring links to “lower-level” aspects of “devices’ identities” (e.g. network-based identity aspects) – also taking into account input received in a previous post.
Your comments and input are welcome.
And … do you see a similar interest in handling devices’ identities from an end-user’s perspective? What would be users’ motivations?

No comments: