IDtrust 2008
7th Symposium on Identity and Trust on the Internet
Program and Proceedings



There will be a shuttle leaving the Gaithersburg Holiday Inn at 8:00 a.m. Tuesday morning to travel to NIST. The shuttle will leave at 8:15 a.m. Wednesday and Thursday. The shuttle will return to the hotel at the end of the sessions on Tuesday and Wednesday. There will not be shuttle service the afternoon of Thursday.


802.11b Wireless access points will be available for SSH, IPSEC, HTTP, DNS, FTP, POP, IMAP, and SMTP connectivity. Only WPA1 access will be provided, and users must sign NIST's Visitor Network Access Agreement with regard to security patches, anti-virus software, etc. NIST's Visitor Network Access Agreements are available in the registration area.


Participants and observers are encouraged to use the tag "idtrust2008" when blogging about the symposium.

Tuesday, March 4, 2008 - Full Day

8:00 Bus Departs from Gaithersburg Holiday Inn for NIST

8:30 - 9:00

Registration and Continental Breakfast

9:00 - 9:10 Welcome and Opening Remarks

Program Chair: Kent Seamons, Brigham Young University (Slides: ppt )

9:10 - 10:00 Keynote Talk I

Identity Interoperability, Standards, and the State of Adoption
(Presentation slides: ppt )
Dan Blum, Sr. VP and Principal Analyst, Burton Group

10:00 - 10:30 Break

10:30 - 12:00 Session 1 - Technical papers - Identity Management

Session Chair: Carl Ellison, Microsoft

A Client-Side CardSpace-Liberty Integration Architecture
(Presentation slides: ppt )

Waleed Alrodhan, University of London

Chris Mitchell, University of London

Identity Protection Factor (IPF)
(Presentation slides: pdf odp )

Arshad Noor, StrongAuth

OpenID Identity Discovery with XRI and XRDS
(Presentation slides: ppt )

Drummond Reed, Cordance

Les Chasen, NeuStar

William Tan, Neustar

12:00 - 12:15 Break

12:15 - 1:00 Keynote Talk II

Identity and Policy for Security, Trust and Privacy
(Presentation slides: pdf )
Rakesh Radhakrishnan, Chief Identity Integration Architect, Sun Microsystems, Inc.

1:00 - 2:00 Lunch

2:00 - 3:30 Session 2 - Panel: Open Reputation Management Systems

Panel Moderator: Abbie Babir, Nortel (Slides: pdf ppt )

Drummond Reed, Cordance Corporation (Slides: ppt )

Tony Nadalin, IBM

Chris Hagenbuch, SafeTSpace (Slides: ppt )

Rakesh Radhakrishnan, Sun Microsystems (Slides: pdf )

3:30 - 4:00 Break

4:00 - 5:30 Session 3 - Technical papers - Access Control in Open Systems

Session Chair: Carl Ellison, Microsoft

A Content-Driven Access Control System
(Presentation slides: pdf ppt )

Jessica Staddon, PARC

Philippe Golle, PARC

Paul Rasmussen, PARC

Martin Gagne, U.C. Davis

Secure Roaming with Identity Metasystems
(Presentation slides: ppt pdf )

Long Nguyen Hoang, Helsinki University of Technology

Pekka Laitinen, Nokia Research Center

N. Asokan, Nokia Research Center

Secure Communication for Ad-Hoc, Federated Groups
(Presentation slides: pdf ppt )

Ludwig Seitz, Swedish Institute of Computer Science

Andreas Sjöholm, Axiomatics and Swedish Institute of Computer Science

Babak Sadighi, Axiomatics and Swedish Institute of Computer Science

5:30 Bus Departs for Gaithersburg Holiday Inn

6:00 Social Gathering and Dinner Buffet - Gaithersburg Holiday Inn

Wednesday, March 5, 2008 - Full Day

8:15 Bus Departs from Gaithersburg Holiday Inn for NIST

8:30 - 9:00

Registration and Continental Breakfast

9:00 - 9:15 Welcoming Remarks

OASIS and the IDtrust Member Section: John Sabo, CA, Inc. (Slides: ppt )

9:15-9:45 Session 4 - Technical papers - Public Key Infrastructure I

Session Chair: Bill Burr, NIST

User-Centric PKI
(Presentation slides: pdf ppt )

Radia Perlman, Sun Microsystems

Charlie Kaufman, Microsoft

9:45 - 10:00 Break

10:00 - 11:00 Session 5 - Panel - Federations Today and Tomorrow

Ken Klingenstein, Internet2 (Slides: ppt )

Patrick Harding, Ping Identity (Slides: pdf )

11:00 - 11:30 Break

11:30 - 1:00 Session 6: Panel: Liberty Alliance Identity Assurance Framework: Advancing Common Levels of Trust, Certification, Accreditation and Business Rules

Panel Moderator: Peter Alterman, National Institutes of Health (Slides: ppt )

Douglas Pelton, Wells Fargo (Slides: ppt )

Lena Kannappan, FuGen Solutions, Inc. (Slides: pdf )

Jan Riis, Lakeside A/S (Slides: ppt )

1:00 - 2:00 Lunch

2:00 - 3:30 Session 7: Technical Papers - Public Key Infrastructure II

Session Chair: Andrew Regenscheid, NIST

Public Key Superstructure "It's PKI Jim, But Not As We Know It!"
(Presentation slides: ppt )

Stephen Wilson, Lockstep Consulting

Audit and Backup Procedures for Hardware Security Modules
(Presentation slides: odp )

Túlio Cícero Salvaro de Souza, UFSC

Jean Everson Martina, University of Cambridge

Ricardo Felipe Custódio, UFSC

Securing the core with an Enterprise Key Management Infrastructure (EKMI)
(Presentation slides: pdf odp )

Arshad Noor, StrongAuth

3:30 - 4:00 Break

4:00 - 5:00 Session 8: Technical Papers - Practice & Experience: Health Care

Session Chair: Scott Rea, Dartmouth College

A Federation of Web Services for Danish Health Care
(Presentation slides: ppt )

Esben Dalsgaard, Digital Health Denmark (SDSD)

Kåre Kjelstrøm, Silverbullet A/S

Jan Riis, Lakeside A/S

Security and Privacy System Architecture for an e-Hospital Environment
(Presentation slides: pdf ppt )

Kathryn Garson, University of Ottawa

Carlisle Adams, University of Ottawa

5:00 - 5:30 Session 9: RUMP Session

Session Chair: Neal McBurnett, Internet2

Impromptu Rump Session. Sign-ups will be taken prior to the session by Neal McBurnett.

Privacy View of Systems Engineering
(Presentation slides: ppt )
David Weitzel, Mitre

Safeguarding Digital Identity
(Presentation slides: ppt )
Bruce Bakis, Mitre

Update on XML Signature, XML Security
(Presentation slides: ppt pdf )
Frederick Hirsch, Nokia

Wireless Access using an Identity Provider
(Presentation slides: ppt )
Kent Seamons, Brigham Young University

Vehicle Infrastructure Integration (VII): Trusting Your Car to Be Anonymous
James L. Fisher, Noblis

5:30 Bus Departs for Gaithersburg Holiday Inn

Dinner (on your own)

8:00 Birds-of-a-Feather Sessions

Gaithersburg Holiday Inn, Washingtonian Room

Thursday March 6, 2008 - Half Day

8:15 Bus Departs from Gaithersburg Holiday Inn for NIST

8:30 - 9:00

Registration and Continental Breakfast

9:00-11:00 Session 10 - Identity and Access Control in the Enterprise using OASIS Security Standards

Panel Moderator: Hal Lockhart, BEA Systems, Chair, Oasis Technical Committees (SAML, XACML) (Slides: ppt )

Anil Saldhana, Red Hat, Member, Oasis Technical Committees (SAML, XACML) (Slides: ppt )

Anthony Nadalin, IBM, Member, Oasis Technical Committees (SAML, XACML) (Slides: ppt )

Andreas Sjöholm, Axiomatics, Oasis Technical Committee (XACML) (Slides: ppt )

Sunil Madhu, Securent (Cisco), Oasis Technical Committee (XACML) (Slides: ppt )

11:00 - 11:30 Break

11:30 - 12:00 Session 11 - Invited Talk

OpenID: Current Status and Challenges
(Presentation slides: ppt pdf )
George Fletcher, Chief Architect, Identity Services, AOL

12:00-12:30 Wrap up

See Also

This workshop is part of the IDtrust Symposium Series
Gaithersburg, MD

National Institute of Standards and Technology


OASIS IDtrust Member Section

Federal PKI Policy Authority

Important Dates
Papers and proposals due:
Nov 24, 2007
Notification to authors:
Dec 20, 2007
Early Bird Registration:
Jan 26, 2008
Final papers due:
Feb 1, 2008
Hotel Reservations:
Feb 18, 2008
Final Registration:
Feb 27, 2008
Mar 4-6, 2008