Page Comparison

Concepts of Identity within the Internet of Things

Version: 0.03

Archives of this paper: http://kantara....
Change history: draft 0.1Ingo Friese;….;… Ingo.Friese@telekom.de
Abstract
The purpose of this paper is to describe identity concepts in the Internet of Things. Identity mechanisms in the Internet of Things are different from those in the classic web.
Furthermore this paper proposes a terminology for Identity management in the Internet of Things. This should help to facilitate discussions and work in this area without the need to define basic terms again.
Introduction
….
Classic identity management
….
Ownership of objects
Unlike in the classic web object identities have in most cases an owner, user, administrator or other related persons or objects.



Lifecycle of objects
The lifecycle of objects might be different from identity of individuals. And object can be brought to existence. It can be assigned to an owner. An object might also change its owner. And object can technically disappear. The life cycle might be significant shorter or longer than in classic Identify management.This can lead to dynamic changes in routing, identity management etc….TBD
Object identifier and namespace
An object identifier addresses an object within a defined name space. Example: A phone number "0183485886" points to a certain phone. An IP address 123.23.45.67 points to a certain Internet protocol interface assigned to a certain device. The phone number is only valid inside the ITU E.164 telephony system. And the IP-address is only valid in (public) internet name space.
If an object A has a phone number as an identifier and an object B an IP-Address it needs a mapping mechanism (service) to map both addresses in order to enable communication between A and B.
The mapping service could be private and specific a certain use-cases or it could be a general and public one, like the DNS.
TBD…
Governance of object data
Objects in the "Internet of Things" produce data. These data might lead to personally identifiable information (PII). A car for example is able to track GPS positions and to provide a complete movement profile of a certain person.
Transparency
Although these data are mainly used for maintenance or additional services in automotive user information and consent should be mandatory.
Data minimization / data collection (in advance
Complex machines e.g. combine harvesters have hundreds of sensors that are able to produce tons of data. Data should not be collected if they are not used for a specific use-case.
TBD….

...