Identity – joeandrieu.com
type: channel
description: My personal space
date: 2026-02-26T23:47:46Z
update period: hourly
update frequency: 1
update base: 2000-01-01T12:00+00:00
generator agent: https://wordpress.org/
items: Dehumanizing the Disconnected
items: Speaking of Identity
items: User Driven Services: 9. Self-managed Identity
items: The Identity Quartet
items: Bandit, Higgins, Open Source, Profit and Novell
items: Majority of Americans dislike unauthorized use of behavioral data
items: Law enforcement v Minimal disclosure
items: The hard stuff – VRM Use Cases

Dehumanizing the Disconnected
type: item
creator: Joe Andrieu
date: 2026-02-13T16:29:31Z
subject: privacy
subject: Technology
subject: Uncategorized
subject: digital fiduciary
subject: freedom
subject: humanity
subject: Identity
subject: realeyes
subject: uniqueness
subject: world
subject: worldcoin
subject: worldid
description: Last week, the Credentials Community Group of the World Wide Web Consortium hosted Scott Jones, sharing his company’s work on Client-side Biometric Authentication and Identity Verification. https://www.w3.org/events/meetings/6c106024-7f5f-4297-972b-18af6432aaef/20260203T120000/ He said a lot of smart things about his company, Realeyes https://realeyes.ai/, and … Continue reading →
encoded: Last week, the Credentials Community Group of the World Wide Web Consortium hosted Scott Jones, sharing his company’s work on Client-side Biometric Authentication and Identity Verification. https://www.w3.org/events/meetings/6c106024-7f5f-4297-972b-18af6432aaef/20260203T120000/ <img fetchpriority="high" decoding="async" width="382" height="132" src="https://blog.joeandrieu.com/wp-content/uploads/2026/02/verifeye.png" alt="VerifEye Powered by Realeyes" class="wp-image-1486" style="aspect-ratio:2.8941636083816737;width:301px;height:auto" srcset="https://blog.joeandrieu.com/wp-content/uploads/2026/02/verifeye.png 382w, https://blog.joeandrieu.com/wp-content/uploads/2026/02/verifeye-300x104.png 300w" sizes="(max-width: 382px) 100vw, 382px" /> He said a lot of smart things about his company, Realeyes https://realeyes.ai/, and their VerifEye offering. They are a leader in using AI and advanced biometrics for identity verification. I appreciated his discussion of how they are using real technology to improve the quality and privacy of identity assurance. In particular, I appreciate the progress towards client-side biometric authentication, which may prove a long term best-of-class approach to securing our digital identities without creating a panopticon. However, there is a fundamental flaw in their approach that deserves attention. Surprisingly, it is one that Dr Seuss’s Yertle the Turtle might have found familiar. At the end of the day, after all the privacy-engineering on the front end, Realeyes maintains their own uniqueness database. To their credit, they are refreshingly candid about charging for access. They hope to create a global database of who is human and then charge to query that database. It’s a straightforward business model that helps us better understand how such a system might be abused or otherwise cause harm. This vendor-controlled uniqueness database is the problem. Worldcoin and World <img decoding="async" width="150" height="150" src="https://blog.jo…

Speaking of Identity
type: item
creator: Joe Andrieu
date: 2017-06-12T20:33:02Z
subject: Identity
subject: Technology
subject: functional identity
description: Identity is one of the most important constructs of society. It’s also one of the hardest to discuss. It is how we keep track of people and things and, in turn, how they keep track of us. When we build identity systems without a core understanding of identity, we risk inadvertently compromising human dignity. Continue reading →
encoded: Identity is one of the most important constructs of society. It’s also one of the hardest to discuss. I’ve been in perhaps hundreds of conversations in over a dozen years about user-centric and digital identity. I’ve realized that many of our challenges in digital identity stem from two problems in these conversations. First, miscommunication; we often use the same words with different meanings. Second, we get distracted by compelling but unproductive discussions about different aspects of identity. In response, I’ve begun a conversation about how to talk about identity in a way that is both accessible and rigorous. I want to find a way to discuss identity that laypeople understand, without alienating technologists. Digital identity—like the rest of our Internet-enabled world—is scaling faster than society knows how to handle. If we don’t develop a simple way for experts to talk with regular people about both identity and its realization in digital identity, it will be nearly impossible to build an Internet identity layer that fully addresses the needs of a modern global society. One way or another, that identity layer is being built. I believe a better conversation will make a difference. Consider for a moment a slightly different way to think about identity: Functional Identity. If the approach feels off or triggers a reaction, please drop me a line at joe@legreq.com. If we are to discover how to talk about this simply and effectively, your response is a valuable part of the discourse. Reframing Identity Our framing of identity determines how we talk about it. The facets of identity are so rich that we each bring our own hot buttons and agendas to any discussion. Some engage from a philosophical perspective, others cultural. Some dive into political issues and others get meta-physical and spiritual. These different frames are valid aspects identity’s impact on our lives. Not just valid. Vital. They help answer the question of “Why?” Why it matters, why we should c…

User Driven Services: 9. Self-managed Identity
type: item
creator: Joe Andrieu
date: 2009-05-13T09:54:08Z
subject: Identity
subject: User Driven
subject: User Driven Services
subject: information cards
subject: OpenID
description: 9. Self-managed Identity User Driven Services let users manage their own online identity. Unless we control our identity online, we risk unnecessary exposure to identity theft and unwanted correlation of online activity. At the same time, online services increase the … Continue reading →
encoded: 9. Self-managed Identity User Driven Services let users manage their own online identity. <img loading="lazy" decoding="async" class="alignright size-full wp-image-587" title="Name tag" src="https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_4473313hello-my-name-iscropped.jpg" alt="Name tag" width="288" height="196" srcset="https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_4473313hello-my-name-iscropped.jpg 480w, https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_4473313hello-my-name-iscropped-300x203.jpg 300w" sizes="auto, (max-width: 288px) 100vw, 288px" />Unless we control our identity online, we risk unnecessary exposure to identity theft and unwanted correlation of online activity. At the same time, online services increase the risk of attacks when using the same identifier for multiple functions. User Driven Services allow users to be in maximum control of their identity by distinguishing between the four different types of identifiers used online: Authentication IDs Presentation IDs Reference IDs Internal IDs Users should be able choose their own third-party identity service and have complete control over the three external identifiers used by any User Driven Service: their authentication IDs, their reference IDs, and their presentation IDs. The internal ids relating these external identifiers should never be exposed. Identity Providers should operate in non-correlation modes—so that different services providers automatically receive different authentication tokens, and all presentation IDs should be hand selected by the user for each service whenever possible. The ideal service will enable intentional correlation only upon user directive, allowing individuals to claim blog posts, social profiles, and microblogging accounts as their own, after initially anonymous or psuedonymous use. Services are also more flexible when they allow users to use multiple distinct identifiers within a given class, e.g., having more t…

The Identity Quartet
type: item
creator: Joe Andrieu
date: 2009-03-12T16:49:44Z
subject: Identity
subject: User Driven
subject: User Driven Services
subject: identity quartet
subject: IIW
subject: IIW2008b
subject: information cards
subject: Internet Identity Workshop
subject: Kim Cameron
subject: non-correlation
subject: OpenID
subject: Randy Farmer
subject: Seven Laws of Identity
subject: User-centric Identity
subject: user-driven identity
description: A functional model for best practice Identity implementations. The Identity Quartet is a framework for online services that allows users to express their Identity on their own terms. When I use the term “Identity”, I refer to the set of … Continue reading →
encoded: A functional model for best practice Identity implementations. The Identity Quartet is a framework for online services that allows users to express their Identity on their own terms. When I use the term “Identity”, I refer to the set of identifiers used in reference to users in online services. At the December 2008 Internet Identity Workshop, Randy Farmer introduced what he called the “Tripartite Model of Identity.” He presented a pattern distilled from years of groundbreaking work building virtual communities. This article is a write up of a four component model based on Randy’s initial concept. I also build on the ideas discussed at the IIW session on Non-correlatable IDs with OpenID. The Quartet In online systems, we use Identity in four roles, using four potentially distinct identifiers. Each of those four will be present in any system that allows users to login, present themselves online, and receive incoming services. Often, systems use the same identifier to fulfill multiple roles. However, there are good reasons that these identifiers should be managed separately, especially across organizational boundaries. The four identifiers are: Authentication IDs Presentation IDs Reference IDs Internal IDs Authentication IDs To access privileged services, users must present an identifier to claim their right to that service. Common identifiers include session IDs, cryptographic tokens, and usernames. Usernames are probably the most common identifier for logging into services. Paired with a password for authentication, this is a cornerstone of how we use identity to gain access to privileged services. That access authorization typically persists without logging in again through the use of a session ID. In a user-centric context we can separate the authentication ID used at a Relying Party with that used at the Identity Provider, allowing for directed identity as described by Kim Cameron in his Seven Laws of Identity. In a capability-based authentication regime, the iden…

Bandit, Higgins, Open Source, Profit and Novell
type: item
creator: Joe Andrieu
date: 2008-05-11T19:51:21Z
subject: Identity
subject: Bandit
subject: Dale Olds
subject: Higgins
subject: Identity Meta-System
subject: Kim Cameron
subject: Microsoft
subject: Novell
subject: open source
subject: User-centric Identity
description: At EIC2008 last month, Dale Olds of Novell’s Bandit Project gave me a few minutes and some insight into how Novell (and others) are mixing open source with proprietary software to architect a whole new Identity paradigm online. I’ve been … Continue reading →
encoded: At EIC2008 last month, Dale Olds of Novell’s Bandit Project gave me a few minutes and some insight into how Novell (and others) are mixing open source with proprietary software to architect a whole new Identity paradigm online. I’ve been following the user-centric Identity movement ever since Doc Searls talked me into attending IIW2006b, an unconference. EIC is a classic Enterprise technology sales conference on identity management. The two events couldn’t be more different, even though both have excellent content and are focused on Identity. EIC was all about big business selling to each other, while IIW is all about engineers making user-centric Identity work. Identity? A lot of you are familiar with the term, but for those who might not know what I mean, I’m talking about how people authenticate themselves for access to online systems. Traditionally based on usernames and passwords, online Identity presents a host of problems, not the least of which is that an individual may have dozens or even hundreds of different usernames and passwords, one for each new web service or corporate LAN accessed. This proliferation is itself a security risk–as people reuse passwords despite the best efforts of zealous IT gurus everywhere. It is also an information management nightmare: how are we supposed to remember all of that? Which reinforces the problem of reused passwords and unfortunately typically insecure password reset. Today’s identity management software provides solutions to this problem, largely through federation and user-centric Identity. In short, federation is how corporate IT systems rely on other corporate systems–provided by other departments or even other companies–to authenticate your identity and share information about you. It can be used for authentication, or as in the case of FaceBook’s Beacon, it can be used to pass on highly sensitive personal data. (Blockbuster is now in a lawsuit over this, which I expect they’ll lose.) As Doc Searls likes to put it…

Majority of Americans dislike unauthorized use of behavioral data
type: item
creator: Joe Andrieu
date: 2008-04-10T17:55:42Z
subject: Identity
subject: ProjectVRM
subject: Vendor Relationship Management
subject: privacy
subject: VRM
description: From Yahoo News: Majority Uncomfortable with Websites Customizing Content Based Visitors Personal Profiles Level of Comfort Increases When Privacy Safeguards Introduced ROCHESTER, N.Y.–(BUSINESS WIRE)–A majority of U.S. adults are skeptical about the practice of websites using information about a … Continue reading →
encoded: From Yahoo News: Majority Uncomfortable with Websites Customizing Content Based Visitors Personal Profiles Level of Comfort Increases When Privacy Safeguards Introduced ROCHESTER, N.Y.–(BUSINESS WIRE)–A majority of U.S. adults are skeptical about the practice of websites using information about a person’s online activity to customize website content. However, after being introduced to four potential recommendations for improving websites privacy and security polices, U.S. adults become somewhat more comfortable with the websites use of personal information. Good stuff, although one should read closely to understand exactly what users dislike. Customization isn’t the problem… it’s the unauthorized invasion of privacy. The questions asked by Harris were rather leading. It would be interesting to see what people say to “if asked, would you allow a Search engine to provide enhanced results based on your behavior.” My understanding is most people do opt-in to the advanced features of Google desktop, which asks essentially the same question at install time. People don’t like surreptitious activities, but if you ask up front, it’s much easier for folks to say yes.

Law enforcement v Minimal disclosure
type: item
creator: Joe Andrieu
date: 2008-04-02T17:21:18Z
subject: Identity
subject: conspiracy
subject: FBI
subject: illegal
subject: illegal wiretapping
subject: Kim Cameron
subject: user centric
subject: user centrism
subject: wiretap
description: The Washington Post today exposed considerable excesses by “fusion” centers organized post 9/11. Intelligence centers run by states across the country have access to personal information about millions of Americans, including unlisted cellphone numbers, insurance claims, driver’s license photographs and … Continue reading →
encoded: The Washington Post today exposed considerable excesses by “fusion” centers organized post 9/11. Intelligence centers run by states across the country have access to personal information about millions of Americans, including unlisted cellphone numbers, insurance claims, driver’s license photographs and credit reports, according to a document obtained by The Washington Post. … Dozens of the organizations known as fusion centers were created after the Sept. 11, 2001, terrorist attacks to identify potential threats and improve the way information is shared. The centers use law enforcement analysts and sophisticated computer systems to compile, or fuse, disparate tips and clues and pass along the refined information to other agencies. They are expected to play important roles in national information-sharing networks that link local, state and federal authorities and enable them to automatically sift their storehouses of records for patterns and clues. … The list of information resources was part of a survey conducted last year, officials familiar with the effort said. It shows that, like most police agencies, the fusion centers have subscriptions to private information-broker services that keep records about Americans’ locations, financial holdings, associates, relatives, firearms licenses and the like. Centers serving New York and other states also tap into a Federal Trade Commission database with information about hundreds of thousands of identity-theft reports, the document and police interviews show. Pennsylvania buys credit reports and uses face-recognition software to examine driver’s license photos, while analysts in Rhode Island have access to car-rental databases. In Maryland, authorities rely on a little-known data broker called Entersect, which claims it maintains 12 billion records about 98 percent of Americans. In its online promotional material, Entersect calls itself “the silent partner to municipal, county, state, and federal justice agencies who access…

The hard stuff – VRM Use Cases
type: item
creator: Joe Andrieu
date: 2007-12-11T02:11:47Z
subject: ProjectVRM
subject: Vendor Relationship Management
subject: Identity
subject: IIW
subject: IIW2007b
subject: OpenID
subject: Use Case
subject: User-centric Identity
subject: VRM
description: Last week was the Internet Identity Workshop in Mountain View, California, which is, without reservation, the most productive technical gathering I know of. An “unconference,” (facilitated by the incomparable Kaliya Hamlin) it dumps the talking heads for interactive discussions so … Continue reading →
encoded: Last week was the Internet Identity Workshop in Mountain View, California, which is, without reservation, the most productive technical gathering I know of. An “unconference,” (facilitated by the incomparable Kaliya Hamlin) it dumps the talking heads for interactive discussions so that folks can get real work done. The culture and focus enable a truly impressive amount of collaboration and co-creation as people dig in and work on the hard stuff of Internet Identity. And there is a TON of hard stuff. Just ask Microsoft and Kim Cameron, whose CardSpace is making up for the failures of Passport. Or anyone who thought PKI (public key infrastructure) would solve the problems of Internet Identity. Or David Recordon and the folks of OpenID who brilliantly solved the challenge of a user-centric Single Sign On only to find that was just the first of many challenges of Identity and then answered in part with OpenID 2.0 and OAuth, and continue to answer collaboratively with the rest of the IIW community. One of the hardest problems discussed at IIW is how we apply the open approach of the Internet to traditional buyer/seller relationships. When customers can come from anywhere and leave at any time, the silo-based world of proprietary lock-in is rapidly becoming outdated. It is not just unsavory for customers, it is actually damaging to vendors who doggedly defend their CRM systems and industrial era mindset. Fixing this problem is what VRM is all about. In a planning workshop before IIW, a few of the early contributors to VRM met and started to map out the simplest use case we could think of: changing your primary postal address. We’ve all had to do it and it rarely goes smoothly. In the US, it often starts with a Change of Address card sent to the USPS, plus updates to magazine subscriptions, credit card companies, the IRS and the Department of Motor Vehicles, utility companies, ad nauseum… and eventually emails or letters to those friends we want to inform. It is structural…