Successful Kantara Workshop at RSA

Many thanks to all who attended the Kantara Initiative Workshop at RSA this year. The room was packed (with standing room only at one point), and I heard a number of fantastic comments from attendees about the presentations… many who wanted more detail on some presentations.

Along those lines, many thanks to the many energetic and informative presenters and panelists we had on stage. Of course, PayPal’s Andrew “Rock Star” Nash was a crowd favorite, as was Google’s Eric Sachs (too bad Chris Messina was wrestled to the ground by the RSA registration system… ask him that story, it’s hilarious). Add Patrick Harding (Ping Identity) into the mix talking about securely federating clouds, and you’ve got an appetizer to his company’s all-out party the following night.

Rounding out our party was Matthew Gardiner from CA (who earns the dubious distinction of being the first person to utter the term “cloud” during the conference), as well as Chris Sharp from MEDecision who offered up a peek into how the real world deals with cloud identity.

We were also able to dive deeper into cloud services with Oracle’s Uppili Srinivasan and his panelists Gail Coury (Oracle), John Donovan (NetApp), and  Archie Reed (HP). Adding to the panel party was Matthew Gardiner’s cross-cutting Identity Services Roadmap with Mark Coderre (Aetna), Debbie Bucci (NIH), and Todd Inskeep (Bank of America).

… and who could resist the Prezi(c) by Paul Madsen (NTT), representing his gold-hording country on stage (despite the fact he actually missed the final hockey game while in the air). Besides, who else would include in a presentation about the state of OpenID, SAML, InfoCard, and OAuth a slide depicting the dangers of incorrectly checking for dirty diapers?

Finally… much and many thanks to Dervla and Joni for rolling in early on Sunday to set up, and staying late on Monday to break down. Not to mention all the lead-up work they did (including hounding folks like me to get in our presentations). Thanks!

And in case you wanted to see the presentations:

It was at the last RSA where we announced the formation of the Kantara Initiative. One very strong (and busy) year down… and here’s to many more to come (hoping they get easier). Cheers!

  • Share/Bookmark

Identity Matters: eGovernment

Identity Matters PodcastColin Wallis from the New Zealand Government’s Department of Internal Affairs joins this episode of the Identity Matters Podcast. As the Kantara Initiative eGovernment Work Group Chair, he provides an overview of what the group is doing. He talks about how the adoption of the initial eGov Profile has spurred on development of version 2. He also discussed how the eGov work dovetails with the Kantara Interoperability Review Board (IRB), as well as work taking place outside Kantara.

Currently in Development: eGov Profile 2.0

Identity Matters: eGovernment

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Download MP3 | Episode Length: 0:15:10 | Filesize: 10 MB

NOTE: This podcast was produced in collaboration with the Kantara Initiative Identity Community Update Discussion Group.

  • Share/Bookmark

Identity Matters: User Managed Access

Identity Matters PodcastIn this episode of the Identity Matters Podcast, Eve Maler presents an overview of the User Managed Access (UMA) Work Group. Eve, the UMA WG chair, starts off with background of the group working within the Kantara Initiative and defines the problem space. She then provides an overview of the process the group is taking as well as where they are in their roadmap toward delivering a specification to the IETF.

From the UMA charter: The purpose of the UMA work at Kantara is to develop a set of draft specifications that enable an individual to control the authorization of data sharing and service access made between online services on the individual’s behalf, and to facilitate the development of interoperable implementations of these specifications by others.

Identity Matters: User Managed Access

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Download MP3 | Episode Length: 0:27:41 | Filesize: 18.5 MB

NOTE: This podcast was produced in collaboration with the Kantara Initiative Identity Community Update Discussion Group.

  • Share/Bookmark

Attribute-Based Messaging and SemWeb Overlap

Sitting in a talk by Peter Neumann about “Identity and Trust in Context” at IDTrust 2009 he mentioned the use of attribute encryption within Attribute-Based Messaging (ABM). As I was unfamiliar with ABM, I found the following description from the paper “Using Attribute-Based Access Control to Enable Attribute-Based Messaging” by Rakesh Bobba, Omid Fatemieh, Fariba Khan, Carl A. Gunter, and Himanshu Khurana.:

Attribute-Based Messaging (ABM) is the concept of allowing lists of messaging recipients to be formed dynamically by using an attribute-based recipient address. This approach brings the flexibility of attributes in enabling the sender to send targeted messages, which 1) enhances the relevance of messages to the recipient and 2) allows the sender to send confidential messages knowing that the messages would be delivered only to the intended recipients.

Basically, what this means is that a user wanting to send a message to unknown recipients would run a query against a system so it was only sent to people who match the selected attributes. For example, I could use an ABM solution to send a survey of IETF participation to colleagues who are members of at least three IETF discussion lists.

I immediately thought that this is the type of solution that fits squarely in the sweet spot of the Semantic Web. I could easily see that if the attributes are encoded using RDF, an ABM system would seem to be an excellent use case leveraging SPARQL. Looking around, though, I can’t find anyone working on this approach.

Does anyone have any examples of or suggestions for this idea in practice?

  • Share/Bookmark

History of Matchmine

An unfortunate side effect of pulling down the matchmine servers is that the page describing the history of the company I founded dropped off the map. Now that I’m out and about looking for my next opportunity, I find that I’m often retelling the origin story. I thought I might as well post the tale as it was undoubtedly an interesting path from genesis to its untimely end.

It all started back in 1995 when my brother, Mark, and I were playing around with this new thing called MP3 streaming. He had founded a biotech startup in Boston and his staff (a motley crew of bioinformaticists) kept eating up server space with their audio library. Further compounding the problem, they’d share their music files which would mean multiple copies all over the place. Let’s ignore the legality of this for now (since I’m an ardent supporter of IPR), and focus on the technical side of the story.

As Mark is a total hacker (in the “constant tinkering of a maven” sense of the term), he worked with some similar folks at MIT to create a shared music jukebox. In this way, everyone loaded their music into a central server and could listen to the full collection from their desks. The trick quickly became not “how” to listen to their music, but “what” music to listen to.

At night, then, Mark and I would bounce ideas around for how to build effective playlists. It’s no surprise that since Mark’s doctorate is in cell molecular biology (i.e. he’s a genetic engineer), we homed in on methods for encoding musical interests as a sort of “musical DNA”. The concept was to start with human D.J.s as the seeds, analyze their playlists and map their attributes. From there we’d be able to take a couple divergent playlists and replicate them (with pattern deviations) to create variants. Closing the loop would be the listeners who “voted” which playlists they liked so that the feedback would identify the successful mutations (allowing the others to fall out of the music gene pool).

Anyone who has the pleasure of meeting Mark will know the next part of the story. Once the idea was fleshed out, and the proof of concept built, the spark was gone from the project. He’s much more interested in what hasn’t been done, yet, and making it come alive. Next on the list? Building what I believe to be the first in-dash car MP3 player. The list of ingredients? An old laptop mounted in the trunk and a Nintendo controller wired into the dashboard. Oh, and enough duct tape and bailing wire to make Macgyver proud.

Fast forward 10 years and you’ll find me in Jonathan Kraft’s office telling this story. As the Chief Innovator for the Kraft Group Sports Properties at the time, I was responding to a request Jonathan had about expanding his digital media empire. He was exploring the possibility that we could take the production and distribution model I’d helped create for KGSP and roll it out as, essentially, an online media network akin to NBC, ABC, etc.

While seemingly a huge undertaking, Jonathan is not known for shying away from a big idea (with an associated enormous potential for revenue). Fortunately, Fred Kirsch (the KGSP Director of Interactive Media) and I had spent the past seven years building the foundation for the effort. By 2005 we were producing over 74 hours of digital media programming per week. Further, it was being distributed via multiple channels from various websites to the NFL Network, in Comcast On-Demand, through Gotuit’s network, and over-the-air on local stations.

With all that as background, my comment in that October 2005 meeting was that the effort to move beyond the essentially captive New England sports market would be significantly different than what we’d been doing. The model for the production and distribution pipeline would largely be the same, but the marketing and business models would need to be rebuilt from scratch. Further, the shift in scale may not map to our proven model.

My suggestion, then, was that the true opportunity wasn’t in producing new content (there’s enough of that already), but rather in connecting consumers with existing media matching their interests. When I brought up the story about my brother and I tinkering with the music DNA concept, I sketched out how a similar model could be applied to just about any consumable media. I’d adopted more of an n-space model and associated metaphor rooted in my training as an astrophysicist, but the re-factored concept was largely similar to it’s progenitor.

Apparently, Jonathan and Robert Kraft liked the idea since the next thing I know, they’ve asked me to assemble a team to start developing the technology. It was one of those incredible moments in which every emotional reaction coursed through my veins at once. I was simultaneously elated that they liked my idea, while being terrified I’d screw it up, to sad I’d be leaving some projects incomplete (e.g. a semantically remodeled e-commerce system), and simply excited with the pure newness of the project. It wasn’t just something new for me, it was an entirely new solution to an emerging problem of media overload.

In fact, the solution I mapped out broke even more ground. It wasn’t only media agnostic, but cross-system compatible… and the most unique idea at the time: it was a portable mechanism that was entirely under the control of the end user. Thus was born what was eventually marketed as the MatchKey and the associated support machinery we called the Matchmine Discovery Network.

It was one thing to come up with the idea, but it was entirely another to make it a reality. My first step was to hire a series of consultants who live deep inside the beltway working on data modeling for our friends the three-letter agencies. Through their work we were able to see a clear path to a solution, and I began hiring architects and engineers to build it. So far, we were all camped in offices built directly under the stands of Gillette Stadium, physically separated from the rest of the KGSP operation due to legal requirements for protecting IP.

With more meat on the bones of the initial idea, it was time to turn our eye on making it commercially viable. Enter the amazing team we hired to form matchmine, the company that turned the idea into a business. And to define and run that business we tapped Mike Troiano to be the CEO. Hunkered down in the stadium in September 2006 we started working out the business details. Through his leadership we mapped out a strategy, moved into compatible office space in Needham, and in 2007 we hit the ground running.

While I was the primary author of the idea, it was really through the amazing work by an incredibly talented team that brought the system to life. In fact, here’s a list of folks who I feel deserved much more than a pink slip when we were forced to shut down: Srini, Joachiam, Alvaro, Dave, Denise, Bob, Kathy, Eric, Erik, Susan, David, Dean, Chris, Craig, Tod, Yury, Michelle, Scott, Adam, Jessica, Rob, Tom, Philip, Nathan, Leigh, Irina, Amy, Rajan, and Shawn. My heartfelt thanks to all for their contributions; I wish I could offer you more than a simple acknowledgment.

It’s hard to call out specific individuals, as I truly believe it was a team effort, but I’m particularly proud to have had Dr. Jim Butler, Rajan Desai, and Brian Connor on board since the beginning. And even though I played at being the Chief Scientist while we were getting off the ground, it was Dr. Scott Oddo who took my initial algorithms and really made them sing as our VP of Science.

In the end, we achieved what we set out to accomplish. We had successfully encoded user preferences, created uniquely agnostic recommendation algorithms, and deployed the required machinery to empower the full ecosystem in a privacy-respecting, user-controlled manner. It worked, we were connecting consumers with media that matched their interests.

… until the house-of-cards economy collapsed. And unfortunately, we didn’t even have time to shop around for an investor to keep the system running before trying to sell the company or assets.

So, there you have the history of an idea. Now, onto the next one, may it turn out to have a longer life.

UPDATE: You might also be interested in the final note on the company posted by Mike on his blog.

  • Share/Bookmark

DataPortability: In-Motion Podcast – Episode 13

We talk to Paul Madsen, a member of the Technology Expert Group in Liberty Alliance in this episode of DataPortability: In-Motion Podcast. Through the conversation, he dives into SAML and how the Identity Web Services Framework (ID-WSF) and related specifications fit into a comprehensive identity solution stack. In response to the question about implementation difficulty, he points to the work underway by OpenLiberty.org developing a set of deployable ID-WSF libraries. Another project that helps bridge between specifications is Project Concordia.

Leading the episode, we quickly touch on the following bits of news:

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Episode 13: Listen Episode Length: 00:31:38

  • Share/Bookmark

DataPortability: In-Motion Podcast – Episode 12

Episode 12 of the DataPortability: In-Motion Podcast welcomes Steve back to the fold. In this episode we talk to Drummond Reed (a.k.a. =Drummond), a valued participant across the identity and data portability space. Drummond is most well known as one of the pioneers of the XRI (Extensible Resource Identifier) and XDI (XRI Data Interchange) open standards at OASIS where he co-chairs the XDI and XRI Technical Committees.

During the discussion, Drummond identified two key areas needing solutions within the scope of data portability: common definitions and portable authorization. XDI and link contracts solve these problems.

In the context of data portability, ever since I first heard the term when wearing my XDI TC hat, I said, “That’s like the mission statement for the XDI Technical Committee in two words. Why didn’t we just say it’s data portability.” If there’s one headline feature of XDI, it’s data portability. XDI is a protocol for sharing data, just like HTTP is a protocol for sharing content.

Of note, history was in the making during the discussion. While hunting for an appropriate analogy describing the underlying description model, Steve hit upon using the periodic table of elements. Look for Drummond using it in his next series of talks.

Leading the episode, we quickly touch on the following bits of news:

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Episode 12: Listen Episode Length: 00:52:59

  • Share/Bookmark

DataPortability: In-Motion Podcast – Episode 11

After a brief hiatus last week as Trent and Steve were otherwise indisposed, the DataPortability: In-Motion Podcast is back at half strength. Steve is still MIA, but joining Trent in the virtual studio is Bob Ngu, Founder of Jiggyme.com, a video aggregation startup that is beginning to focus specifically on technology videos.

Bob has been an active contributor to the DataPortability Project since March, and was highlighted in the project’s May report. The spotlight was shined on his DataPortability: In the Wild blog series. In this series, Bob outlines his discussions with various people involved with data portability. Among the areas he’s covered so far include:

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Episode 11: Listen Episode Length: 00:17:34

  • Share/Bookmark

DataPortability: In-Motion Podcast – Episode 10

In this very special episode of the DataPortability: In-Motion Podcast, Trent’s brother R. Mark Adams joins the data portability discussion. He is a genetic engineer who earned his Ph.D. in cell biology and was a pioneer in the field of bioinformatics. He is currently a Senior Associate at Booz Allen Hamilton and runs their bioinformatics group. Of specific interest related to data portability is his work for the open CaBIG (Cancer Biomedical Informatics Grid) project, a National Cancer Institute initiative to link cancer researchers and their data.

Up until now, we have focused primarily on the use cases around existing social networking websites. There is, however, a wealth of knowledge and experience to be tapped within other fields. Mark has worked for over 15 years designing and building large-scale informatics systems. Further, his extensive experience within the standards and open source communities place him in a unique position to provide valuable insight into issues being explored by the DataPortability Project.

During the conversation, Mark offered up some cautionary comments regarding the process of defining standards:

There’s a tendency on the part of industry, broadly, to try to skip to a technology stack as a means of adopting standards quickly.

One has to be careful in how one creates standards. This is why I say trying to divorce standards as cleanly as possible from their underlying technology implementations is important to do. The reason being it allows you to determine standards that can be widely adopted and used without the complexity or the risk of lock-in.

Rounding out the discussion was a call to action on both sides. Mark is reaching out to the DataPortability Project to become more involved in the bioinformatics field, and suggests we solicit participation from within their ranks.

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Episode 10: Listen Episode Length: 00:49:28

  • Share/Bookmark

DataPortability: In-Motion Podcast – Episode 9

We are joined by Robert Scoble in episode 9 of the DataPortability: In-Motion Podcast. Currently the Managing Director of FastCompany.tv, he is a well-known and respected technology pundit who got his start blogging at UserLand. He is well known as an early advocate of the DataPortability Project when he tried to download his social data from Facebook.

The show is kicked off with a discussion about his recent speculation that Microsoft could buy Facebook and keep it closed. Scoble talks about the services and tools like FriendFeed that offer alternate news streams to counter the Facebook hegemony. The discussion also flowed around automated behavior tracking, advertizing, and the interplay between control/privacy within various portable data models.

Of particular interest is Scoble’s view of the inevitability of an open flow of user data:

Openness does win in the end. It will just take a little bit of time to get there. We’ll see a lot of new stuff come along to make it easier for users to open these systems up.

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Episode 9: Listen Episode Length: 00:26:30

  • Share/Bookmark