Note: this blog is a mirror of my HP Labs Blog, on the same topic, accessible at: http://h30507.www3.hp.com/t5/Research-on-Security-and/bg-p/163

Monday, July 23, 2007

The Open Group's “Guide to Architectures for Identity Management”

I’ve just learnt that The Open Group's “Guide to Architectures for Identity Management” is available for download (for free) from The Open Group's online bookstore:
http://www.opengroup.org/bookstore/catalog/g072.htm
“This Guide is aimed primarily at the enterprise architect undertaking the design of an information infrastructure to support internal and external user-based collaboration and commerce. It addresses the key issues that an enterprise architect needs to consider in the process of developing an enterprise identity management architecture, and discusses practical aspects which influence decision-making during that process. It focuses on the business perspective, but also includes consideration of individual, social, governmental, and economic perspectives” (source: Ian Dobson’s announcement e-mail).
I would have expected a deeper analysis of “privacy management” aspects and related implications (and requirements) on identity management architectures - to comply with incumbent privacy legislation (HIPPA, COPPA, EU Data protection, etc.), privacy guidelines (e.g. OECD, etc.) and end-users’ expectations …

No comments: