But they must also protect user data from
harm. Using hybrid authentication, support for Information
Cards can be introduced into a website today, providing users
access to stronger authentication and protection from phishing,
while providing a simpler, streamlined interface. Combined with
taking the additional steps of reviewing and revising what data is
stored, how it is collected, and under what conditions it is revealed,
Information Cards will increase the security and safety
for users.
Safety should be a
high priority
303
Part III
Practical Considerations
Chapter 6 Identity Consumers 305
Chapter 7 Identity Providers 323
This page intentionally left blank
6
Identity Consumers
Organizations interested in using Information Cards must ascertain
for themselves the role they intend to play in the Identity
Metasystem. Initially, there might be a desire to become an
identity provider (IP) because at ?¬?rst glance it seems as if having
your own branded card is necessary for working with
Information Cards. Although having a branded managed card is
a bene?¬?t, this bene?¬?t alone does not make up for all the cost
and responsibility that becoming a IP entails.
Regardless of the choice to become an IP, all sites participating
in the Metasystem will also ?¬?ll the role of relying party (RP).
Pages:
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438