Re: [Ideas] Diasambugating Identifier and Identity

Hi Robert

I have a few comments

See below <PPE>

On Thu, Apr 13, 2017 at 4:58 PM, Robert Moskowitz <rgm-ietf@htt-consult.com>
wrote:

> I am finally getting back to this subject.
>
>
> On 03/28/2017 12:07 PM, Robert Moskowitz wrote:
>
>> The Identifier/Identity definitions in draft-padma-ideas-problem-statement-01.txt
>> is a good start, it fails in the appreviations used. (There is NO
>> abbreviation for Identity!)
>>
>> ID should NOT be the appreviation of Identitfier.  People will default to
>> thinking 'Identity' when they see it.  Think about people outside our
>> discussion group.
>>
>> I propose 'IDf' for Identifier.  'ID' is too owned by Identity.
>>
>> I will be working on proposed wording to improve these definitions.
>>
>
> I have worked up definitions, sent it out to a few reviewers, got some
> comments and questions.  First my current draft, then a few questions:
>
> Replacement text for:    draft-padma-ideas-problem-statement
>
> Identity (Abbr: IDT or IDt):    A collection of information that is unique
> to an object and differentiates it from all other objects.
>

<PPE> Would prefer entity to object in keeping of the definition in the
draft.

>
> An identity consists of information that is stated about the object by
> itself or a governing authority. It consists of a set of attributes and/or
> actions the object can take.  An Identity may be assigned a lifetime (e.g.,
> a time period), which is determined by either the object or the governing
> authority responsible for defining the identity of the object, or a
> designated third party. An object can have multiple Identities and can
> create and discard Identities at will.  An Identity may be
> ‘indestructible’. That is, it is so unique and non replicatible that no
> other object could ever duplicate it, nor can the object discard it within
> its lifetime without being a ‘clone’ object.  Identity is used in
> authentication registration and policy ownership proofs.
>
> <PPE> Can we infer than an identity may apply to a group of entities? I
think this is an important aspect not sure the text above reflects that.

>
> Identifier (Abbr: IDF or IDf):    A label that is unique for an object a
> particular scope.
>
> The label follows strict construction rules for the objects and the
> context that the label is applied to.  For a particular context, an
> Identifier is used to reference an Identity for the object.  In most cases,
> an Identifier is bound to an Identity through some trusted mechanism.  An
> Identity can have different Identifiers, potentially following different
> construction rules, for different contexts and/or domains of applicability.
>
>
> ==========
>
> Now onto a few questions:
>
> Per: "An object can have multiple Identities" clause, I am challenged with
>
> "This is VERY dangerous. In most software systems, it is the
> responsibility of the management system to assign a single identity to an
> object when it is created. If an object has multiple identities, it could
> suffer from 'multiple personality syndrome'.
>
> <PPE> I tend to agree with you I would prefer one identity but multiple
identifiers.

> More importantly, if the object is allowed to create and discard
> identities at will, how do other objects know that the object is who it
> attests to be?"
>
> <PPE> this is where I think there should always be a Permanent identity
which sticks but it can take aliases but those are bound to the permanent
one.

> I think it is very important for some situations for support of multiple
> Identities.  No all.  There are domains as indicated above where it causes
> big problems.
>
> Per: "An Identity may be ‘indestructible’." clause, I am challenged with
>

<PPE>  Reading the definition above I felt we should be very careful how to
implement this and in what circumstance. My read is that this is a
permanent identity.

>
> "This doesn’t make any sense. Why would anyone care if the identity is
> indestructible or not?"
>
> I can think of examples of such Identities, or claim of such Identities,
> like DNA.
>
> And finally, Per: "Identity is used in authentication registration and
> policy ownership proofs." clause, I am challenged with
>
> "What does this mean?"
>
> <PPE> the objective here to have a mechanism where an entity has a means
to prove that it is what it is supposed to be and prevent hijacking of its
identity.

> I will have to work on this some more, or perhaps it does not belong in
> the definition section.
>
> Comments please
>
>
<PPE> There are important definitions and thanks for taking a stab at this

Padma

>
> _______________________________________________
> Ideas mailing list
> Ideas@ietf.org
> https://www.ietf.org/mailman/listinfo/ideas
>