Re: Re: A registration with a common userbase?
| From: | Markus Wolff | Date: | Sun, 30 Jun 2002 16:28:37 +0000 |
| Subject: | Re: Re: A registration with a common userbase? | ||
| References: | 1 2 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-7420@lists.php.net to get a copy of this message | ||
On Sun, 30 Jun 2002 17:58:34 +0200
Kristian Koehntopp <kris@koehntopp.de> wrote:
> For a clean implementation you would need to split authentication and
> authorisation anyway. Literature distinguishes Identification, Authentication
> and Authorisation as different phases of a login. In the identification phase
> a user identity (a unique name or token, usually called "principal") is
> determined. In the authentication phase this princial is being validated,
> usually by knowledge (knowing a password, for example), by possession (of a
> certain cookie, of a chipcard, or another item) or using individual
> characteristics (using biometrics).
[...]
> Also, a PDSP should be able to handle multiple identities (principals) and
> data sets for the same person, allowing for different pseudonyms. My former
> wife Marit Hansen, who works with the local privacy commisioner and is part
> of the P3P team, has a number of papers on identity management on her site.
> You might want to have a look at
> http://www.koehntopp.de/marit/pub/anon/Anon_Terminology.txt,
> http://www.koehntopp.de/marit/pub/anon/Anon_Terminology.pdf,
> for definitions
> of the terms and concepts related to that
> (http://www.koehntopp.de/marit/pub/idmanage/index.html is the parent page of
> that paper).
Well, this sounds very nice and I can fairly say that my class won´t be
able to cover all that ;-)
A project like this would surely require a group of very talented developers
or only one developer who can work on the project 24/7. I´d neither call
myself very talented nor do I have a lot of time (possible development
time on my current auth/ACL project has dropped down to about 1.5 hours
per week), so I´ll pass :-\
However, if a project like this could gather enough development manpower,
it would be a great benefit for PHP. I´d only have a problem with it if
only Passport was supported - the alternative system that Sun has in the
making should also be accessable.
In the meantime, I´ll continue working on my project - I hope I can get
the last few bugs out today or tomorrow so I can finally make an
intitial release.
Regards,
Markus
--
Markus Wolff <wolff@21st.de>