Liberty Alliance offers guide for identity roll-out

Primer outlines legal issues around the use of federated identity technology

The Liberty Alliance Project has published a document outlining the legal issues enterprises should consider when networking their Web applications and identity systems with those of other businesses.

The primer on creating circles of trust raises awareness around issues such as privacy, technical terminology, indemnification and dispute resolution, the organization said.

The Liberty Alliance, composed of vendors such as Oracle, Sun Microsystems, and IBM, has worked on defining technical protocols used for federated identity and Web applications. It's now studying policy issues around the use of federated identity technology.

While vendors are now producing standards-based products that enable the secure sharing of information, the legal consequences of what happens if things go wrong aren't so well defined. Before linking their systems, two businesses have to create a contract, a process Liberty calls establishing a "Circle of Trust."

Since managing federation agreeements between businesses is still a new area "it's helpful to have a checklist," said Graham Titterington, principal analyst at Ovum in London. "It's a step forward."

The document was written by Liberty's Public Policy Expert Group along with legal experts, the organization said.

Mobile Security Insider: iOS vs. Android vs. BlackBerry vs. Windows Phone
Recommended
Join the discussion
Be the first to comment on this article. Our Commenting Policies