Re: Re: A registration with a common userbase?

From: Date: Sun, 30 Jun 2002 16:28:37 +0000
Subject: Re: Re: A registration with a common userbase?
References: 1 2  Groups: php.pear.dev 
Request: Send a blank email to pear-dev+get-7420@lists.php.net to get a copy of this message
On Sun, 30 Jun 2002 17:58:34 +0200 Kristian Koehntopp <kris@koehntopp.de> wrote: > For a clean implementation you would need to split authentication and > authorisation anyway. Literature distinguishes Identification, Authentication > and Authorisation as different phases of a login. In the identification phase > a user identity (a unique name or token, usually called "principal") is > determined. In the authentication phase this princial is being validated, > usually by knowledge (knowing a password, for example), by possession (of a > certain cookie, of a chipcard, or another item) or using individual > characteristics (using biometrics). [...] > Also, a PDSP should be able to handle multiple identities (principals) and > data sets for the same person, allowing for different pseudonyms. My former > wife Marit Hansen, who works with the local privacy commisioner and is part > of the P3P team, has a number of papers on identity management on her site. > You might want to have a look at > http://www.koehntopp.de/marit/pub/anon/Anon_Terminology.txt, > http://www.koehntopp.de/marit/pub/anon/Anon_Terminology.pdf, > for definitions > of the terms and concepts related to that > (http://www.koehntopp.de/marit/pub/idmanage/index.html is the parent page of > that paper). Well, this sounds very nice and I can fairly say that my class won´t be able to cover all that ;-) A project like this would surely require a group of very talented developers or only one developer who can work on the project 24/7. I´d neither call myself very talented nor do I have a lot of time (possible development time on my current auth/ACL project has dropped down to about 1.5 hours per week), so I´ll pass :-\ However, if a project like this could gather enough development manpower, it would be a great benefit for PHP. I´d only have a problem with it if only Passport was supported - the alternative system that Sun has in the making should also be accessable. In the meantime, I´ll continue working on my project - I hope I can get the last few bugs out today or tomorrow so I can finally make an intitial release. Regards, Markus -- Markus Wolff <wolff@21st.de>

« previous php.pear.dev (#7420) next »