Part I introduces the basic concepts of user-centric identity management, explains the context in which Windows CardSpace operates, and reviews CardSpace aims to solve the problem. Coverage includes Limitations of current approaches to authentication and identity management Detailed information on advanced Web services Identity Metasystem, the laws of identity, and the ideal authentication system Windows CardSpace: What it is, how it works, and how developers and managers can use in their organizations CardSpace technology: user experience , Information Cards, personal desktop, and integration with NET 3.5 and Windows Vista CardSpace implementation:. from HTML integration through federation, Web services integration, and so on Adding personal card support to websites: detailed scenario, based on Select-explanation or a provider of identity: opportunities, business impacts, operational issues, and pitfalls to avoid Using CardSpace leverage trust relationships and overcome phishing ? Whether you re a developer, security specialist, or business decision makers, this book will answer your most important questions about identity management, allowing you to protect all things that matter: your people, your assets, your partners and your customers . Foreword xv Preface xvii Part I Setting the Context Chapter 1: Problem 3 The Advent Profitable Digital Crime 4 Passwords: Ascent and decline 29 The Babel of Cryptography 36 Babylon The Web User Interface 79 Summary 84 Chapter 2: Towards a Solution Guide 87 World Without a Center 89 Seven Laws of Identity 92 The Identity Metasystem 110 Trust 115 Web Services WS-* specifications: the reification of the Identity Metasystem 136 Presenting Windows CardSpace 161 Summary 164 Part II TECHNOLOGY TO Chapter 3: Windows CardSpace 169 CardSpace Walkthroughs 169 Is CardSpace Just for Website? 175 System Requirements 176 What CardSpace Provides 177 A Deeper Look at Information Cards 184 Features of the CardSpace UI 204 General Management Duties CardSpace 210 User Experience Changes. NET Framework 3.5 218 Summary 221 Chapter 4: Implementation CardSpace 223 Using CardSpace in the Browser 224 Federation of CardSpace 248 CardSpace and Windows Communication Foundation 252 CardSpace Without Web Services 262 Summary 268 Chapter 5: Guidance for Relying Parties 269 Deciding to Become Relying Party 270 Putting CardSpace Working 274 Privacy and Liability 299 Summary 302 Part III PRACTICAL CONSIDERATIONS Chapter 6: Consumer Identity 305 Being a common misconception about Identity Provider 306 Criteria for Selecting the Identity Provider 309 Relying on IP 315 Migration Issues 320 Summary 321 Chapter 7: Identity Providers 323 Revealing the Rationale for Becoming Identity Provider 324 What Providers Should Offer Identity? 334 Runs Mile in the User? 338 Shoes An Organization? S Identity 341 Summary 342 Index 343