1 / 14

Changes

The Business of Identity Management Barry R. Ribbeck Director Systems Architecture & Infrastructure Rice University Barry.R.Ribbeck@rice.edu.

varen
Download Presentation

Changes

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. The Business of Identity ManagementBarry R. RibbeckDirector Systems Architecture & InfrastructureRice UniversityBarry.R.Ribbeck@rice.edu .

  2. Identity management is often seen as a technological infrastructure that supports portals or reduces logins required for central systems. However, emerging trends point to opportunities to leverage it for bottom-line contributions to the institution. Sponsored by NMI-EDIT, this session will discuss why identity management should be part of your business strategy

  3. Changes • HE Institutions are not islands • Partnerships and collaborations • Business • Government • Communities • Interactions with externals are increasingly becoming electronic based

  4. Examples • Government - Online Grants • Banks - Online payroll transactions • Utilities & Vendors- Online payments • Students - Online registration • Financial - Online Federal Aid • Information - Online Libraries • Research - Grids, Fastlane, etc.. • Courseware - Online course management

  5. Business Challenges • Support • Scale - too many accounts • Security - • account requirements differences • Management • Trust - the keystone of inter institutional collaboration and a critical business practice • Costs

  6. ROI Potentials • Pharmaceutical Industry numbers • > $1 billion per year in identity credentialing models • 40% of annual R&D costs attributed to paper based business processes • NE Journal of Medicine • Paperwork = 31% of all health costs ($500 billion in 2004)

  7. External Drivers • Federal eGov Initiative • Fastlane • Digital Content Providers • Banking industry • SAFE - Pharmaceutical industry • Certipath -Aerospace

  8. Fundamentals & Federations • A federation is an association of organizations that come together to exchange information as appropriate about their users and resources in order to enable collaborations and transactions. • Policy based authentication and authorization • IAA are business processes not just technical processes • Provide for Scaleable Identity Management • Standards based community infrastructure • Well defined Trusts

  9. IdM Business Practice • We (HE) need to know who we are interacting with as do our partners. • Identity management is evolving from pure technical practices to a business process. • We will not be able to continue using the old methods and practices in the near future. • Government is aware that IdM is an important issue and is making changes in the way they interact electronically with HE. • Legal compliance • We need to understand the value of TRUST

  10. Transitions • How do I sell this to administration? • Not hard to find support in business circles, Pick any IT consulting firm, CIO magazine, Educause, IT auditor reports. • How / where do I begin? • Resources, roadmaps, self evaluations, IT audits See appendix • Business drivers that make IdM a real need for HE • The future of Access?

  11. Reading the Signs • Title 2 of H.R. 418 (Real ID Act) • HIPAA (PRIVACY) • eGOV (authentication initiative of the Fed) • GLB (protecting consumer personal financial information) • Texas Medical Privacy Act (SB11) (Hipaa on steroids) • Texas S.B. 122 (identity theft - information spill) • Texas BPM 66 (SSN use reform)

  12. What Should campuses do today? • Start building your IdM infrastructure • Approach from a business practice perspective. Look at security, confidentiality, trust and business continuity. • Join a federation, prepare for eGov CAF • Encourage business partners to embrace IdM • Define your policies around good business practices not just easiest technology to implement.

  13. Change is upon us but we don’t have to panic, we just need to prepare. • IdM is a core business practice, and we need to begin to address it in that manner • Trust is a precious and tenuous commodity. We should protect it the way we do other business resources.

  14. REFERENCES • http://www.incommonfederation.org • http://www.cio.gov/eauthentication//documents/CAF.pdf • http://shibboleth.internet2.edu/ • http://www.nmi-edit.org/index.cfm • http://www.educause.edu/IdentityManagementWorkingGroup/928

More Related