Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Abstract

As a key deliverable of the BCTF Work Group this document shall provide a comprehensive overview of Trust Framework implementation whether as pilot projects or in operation.

Editors

Rainer Hörbe

Intellectual Property Notice

The BCTF Discussion Group operates under Creative Commons Share-Alike Attribution IPR Option and the publication of this document is governed by the policies outlined in this option.

...

Data Collection and

...

To begin with a loose structure is used. At a later point, when some data is available, an analysis will be performed to allow for proper categorization and complete questioning.

Trust Federation Project Overview

 

...

Distribution

Data is collected from the sources mentioned below and from polls in the IDM community. There might be a bias towards education and public sector federations, as those tend to publicize their achievements more openly. Also federations of the WebSSO-class might be preferred due to their better visibility to users. A study to make data more representative would be needed and volunteers are wanted. E.g. WS-Trust seems to be under-represented and segregation between enterprise and federation use is not easy to achieve from some variables.

Analysis

# of Federations: Breakdown by Industry

Image Added

Comment: The highest number of federations is in the public sector, followed by research and higher education. Industry (ICT, Finance, Transport) have a smaller share.

 

# of Federations: Breakdown by Technical Protocol

Image Added

# of Federations: Distribution by User Type

Image Added


Top 5 Federations in 4 Categories: IDP, RP, Transactions and Users

 

Project Name 

Description

Geog.

scope

Industry

IDPs

RPs

Transactions 

[m/year]

Users [m|

UK Access Management Federation

NREN

UK

R&E

900

236

 

3

InCommonNRENUSR&E274958 5

AAI@EduHr

NREN

HR

R&E

222

100

100

0,7

FEIDE/Uninett

NREN

NO

R&E

202

150

6

0,7

WAYF/Forskningsnettet

NREN

DK

R&E

130

110

5,5

 

 

 

 

 

 

 

 

 

IGTF

Grid computing

global

Science

86

2500

 

 

InCommonNRENUSR&E274958  

SWITCHaai

NREN

CH

R&E

47

581

 

 

UK Access Management Fed.

NREN

UK

R&E

900

236

 

 

Portalverbund

G2G

AT

Public

50

204

 

 

 
     

 

B

NETS

SAML

Payment

Austrian Bürgerkarte

nordic

ATO (Pub)prod20020,1LA/DS    x      

Fin

 

 

500

7

Certipath 

Supply Chain

global

Man

20

100

400

2

BankID

B2C, G2C

SE

Pub

 

 

 

400

 

3,5

C

AAI@EduHr

PKI

NREN

Portalverbund

HR

ATO (Pub)prod2001

R&E

222

100

100

0,

2

7

LA/Z

SWITCHaai

x

NREN

 

CH

 

R&E

 

47

x

581

 

15

x

0,3

 

 

 

x

 

 

 

 

xBPropUnternehmensserviceportalATO (Pub)prod2012

 

LA/Z   x

Mobile Phone Network

Mobile phones

global

ICT

 

 

 

      

1600

Google-Yahoo-Facebk

Social logins

global

ICT

3

 

 

B

1500

SAMLAustralian Access Federation AAFAUM/P (R&E)prod

Rakuten 

eCommerce

JP

Trade

1

 

 

LA

62

JAL

Travel

JP

Trans

1

 

 

  x

15

PIV

G2G

US

Pub

 

 

 

8

 

...

Legend

ISIC: UN industry classification

Status: pilot, prod(uction), research. This survey has a focus on trust frameworks in production

Service Type: PA: Authentication (physical acess), LA: Authentication (logical acess), AT: Attributes, DS: Digital signature, DA: Delegated Authorization, E: Encryption

Trust Federation Constellations:

  • C20 (SP-centric)
  • C23 (central SP=IDP)
  • C30 (Intra-organizational IDM)
  • C31 (Ruling Party IDM)
  • C32 (Identity Federation)
  • C33 (Cross-Boder Federation)
  • C50 (Enterprise Federation)
  • Cxx 4-Corner Model

End User Class: B= Business, C=Consumer/Citizen, D=Device

...

Trust Federation Project Overview

O (Pub3,5  B
Project Name DescriptionCountryISIC (Industry Classification) ComputedStatussince#Relying Party #Registered Users [m]Service Type (summary)C20 (SP-centric)C23 (central SP=IDP)C30 (Intra-organizational IDM)C31 (Ruling Party IDM)C32 (Identity Federation)C33 (Cross-Boder Federation)C50 (Enterprise Federation)C35 4-Corner ModelEnd User ClassTechnial Protocols
Air CanadaCompanies in the Air Canada GroupCAH (Trans)prod  LA/DS  LA  x          CSAMLBelnet R&E FederationBEM/P (R&E)prod2010 LA BSAML
Can. Banking Fed.B2B-federtion of leading banks (clearing)CAK (Fin)prod   x      x    BSAMLCAFeBR
Canadian Access Federation CAFNREN Federation   CanadaCAM/P (R&E)prod2010 14 1LA    x          BSAMLAir Canada
Cyber AuthN RenewalG2B, G2C (Federal)CAH O (TransPub)prod  LA  x    LA     x   BCSAMLCan. Banking Fed.CA
K (FinNaviNet SSO Servicenavinet.net - Aetna secure SPUKQ (Health)prod   LA    x    BSAML
BipacPolitical lobbyingUSM (Science)prod2005  LA    x   CSAML
Canadian Access Federation CAFCAM/P (R&EeduTech schoolNew York State - Identity Federation for state schoolsUSP (Edu)prod 0,8LA   LA x      x    BSAMLCyber AuthN RenewalCA
FICAMFederal government enabling private IdPs to provide citizens with identity for public online servicesUSO (Pub)prod  LA  LA  x          CSAMLSWITCHaaiCH
M/P (R&EFIXsFederation to provide physical access control to military installationsUSO (Pub)prod20050,3LA2004   PA x        C PKI BSAMLCARSICNM/P (R&E)pilot20060,7LA 
 FRACCredentials to allow emergency response officials to quickly and easily access government buildings and reservations. Uses the PIV-I standard for Interoperability with PIV smart cards.USO (Pub)pilot  x  PA/LA     x   BSAMLPKI
eduID.czCZM/P (R&E)prod  LAGFIPMJustice: Global Federated Identity and Privilege Management Inter-Federation with US FBI (2010)USO (Pub)     LAx         C ?BSAMLDeutsche TelekomDE
I (ICTGM OnStarIn-car owner online servicesUSG (Trans)prod 13   PA/LA    x     C    CSAML
DFN-AAIDEInCommonR&E federationUSM/P (R&E)prod2007 9585LAx    LA    BSAML
NASA Access LaunchpadNASA Secure Token Service Credential VerifierUSI (ICT)prod x6  LA    x    BSAMLNemLog-In
DKO (PubNIH iTrustResearch collaboration between National Institute of Health and Universities (InCommon) USM (Science)prod   LAx        BSAML
PIVPersonal Identity Verification for US government employees and contractorsUSO (Pub)prod2004 8PA/LA/DS     x   CBSAMLPKI
WAYF/ForskningsnettetDKM/P (R&E)prod    Rapattoni MLSMultiple Listing Service (Real Estate) USL (Real Est)prod   x  LA        BSAMLNETSDK/FI/IS/NO/SE
K (Fin)prod 7LA/DSxAGOSPAU Government Online Service Point (Portal)AUO (Pub)prod              CSAML
SIRESAustralian Access Federation AAFNREN Federation   AustraliaAUM/P (R&E)prod 2008881,3 LA    x   BSAML
IMAGERIdentity Management for Australian Government EmployeesAUO (Pub)prod            BSAMLDNI electrónicoES 
VANguardB2GAUO (Pub)prod20062,7PA/LA/DSprod    x         B 
CCARSI NREN Federation   ChinaCatcertESO (Pub)prod20034CNM/P (R&E)pilot2006301LA    x   BSAML
INFEDNREN Federation IndiaINM/P (R&E)pilot   LA    x    B   CSAML
epSOSEUQ (Health)pilot2012 LA/Z     x         BWS-Trust
GÉANT/SA3EUM (Science)SAML
au easy payment (au Kantan Kessai)The KDDI's authentication and payment provider allows customers to combine their content or service charges and au communication charges, and make payments online using an Android equipped smart phone or a computer with an internet connection. Leverages OpenID 2.0 between KDDI (as payment service provider) and its partner sites e.g. content providers, ecommerce sites.JPI (ICT)prod2010   LA     x    COpenID
GakuNinNREN Federation   JapanJPM/P (R&E)prod2010261LAx       BSAML
PEPPOLEUO (Pub)pilot JALTravel FederatinJPH (Trans)prod2007  15 LA    x       C OpenID BSAMLSEPAEU
K (Finmiixi Graph APIsocial loginsJPI (ICT)prod 2010 LA     x      C OpenID  BPropSTORKEUO (Pub)pilot
2011NTT Docomo LogineCommerce FederationJPI (ICT)prod2010       x          CSAMLTrust Service Status ListEUO (PubCOpenID
NTT ID Login ServiceThe NTT Communications' identity provider gateway allows users to log in to public websites with their account issued by NTT subsidiaries including NTT Docomo, NTT Communications (OCN) and NTT Resonant (goo).JPI (ICT)prod2010       x         CPKIe-SWB "e-Signature without borders"EU, RU prod  DS    OpenID
Rakuten eCommerce FederationJPG (Trade)prod2009 62LA x       C OpenID CPKI
Haka/FunetFIM/P (R&ESoftBank PaymentAnother mobile carrier billing service by SoftBankJPI (ICT)prod 20110,3     x       C OpenID  BSAMLKATSOFI
O (PubYahoo! AutheCommerce FederationJPG (Trade)prod20082006  LA/Z    x    COpenID
MyIFAMNREN Federation   MalaysiaMYM/P (R&E)prod2012  LA    x B ? MobiilivarmenneBFISAML
O NZ igovt (PubNZ Govt)   LA    x  Centralised pseudonymous logon/authn (and distributed access) to govt services for citizensNZO (Pub)prod200718 for 35 services1LA     x   C?NetsoFIK (Fin)prod2007SAML
RealMeNZ SSO service with verified identitiesNZO (Pub)pilot             C    BSAMLTunnistus.fi & FIO (Pub)prod2004SAML
Tuakiri New Zealand Access FederationNREN Federation   New ZealandNZM/P (R&E)prod 5 LA    x   BSAML
OMAN_KIDNREN Federation   OmanOMM/P (R&E)pilot   LA    Cx ? TUPAS FIO (Pub)prod      x  BSAML
ULAKAAINREN Federation   TurkeyTRM/P (R&E)pilot2011  LA     x    BCSAML
?VetumaFIVBMKVictorian Business Master KeyAUO (Pub)prod2006  LA    x   CSAML
UAE FederationNREN Federation UASEUAEM/P (R&E)planned   LA    x  ? VIRTUBFIO (Pub)prod2009 LA    x  SAML
Aconet Id FederationNREN Federation  AustriaATM/P (R&E)prod200827 LA     x   B?FC2FRSAML
Austrian BürgerkarteAustrian Citizen CardATO (Pub)pilotprod2002  LA/DS    x    C PKI     C?Fédération Éducation-RechercheFRM/P (R&E)prod20061,3LA
PortalverbundG2G, some B2G for federal, state, local and independed public bodiesATO (Pub)prod2001204 LA/Zx   x x BProp
UnternehmensserviceportalGovernment to business portalATO (Pub)prod201216 LA/Z    x    BSAML
Mon Service-publicFRBelgium eIDBelgium eID Card (BELPIC)BEO (Pub)prod20083,1LA       LA/DS     x   CSAMLOrange-FTFR
I (ICTFedictBelgium Gov'T IAM Service (Federal, Regiaons, local)BEO (Pub)prod2010 LA   LA x    x      CmultiplePSA Partner PortalFRC (Man)prod2008     x  SAML
Belnet R&E FederationNREN Federation   BelgiumBEM/P (R&E)prod20105 LA     x    BBSAML 3D-Secureglobal
K (FinCAFeNREN Federation   BrasilBRM/P (R&E)prod 201013 LA    x    B SAML 
SWITCHaai NREN Federation  Switzerlandx  CotherCA Browser ForumglobalI (ICTCHM/P (R&E)prod20052007581 LA    x   BSAML
eduID.czNREN Federation   CzeckCZM/P (R&E)prod 42 LA    x all  PKIBCertipath SAML
globalDeutsche TelekomC (Man)prod20052PA/LA/DS/E Netzausweis (Net ID-Card) IDP-ServiceDEI (ICT)prod   x13          CBSAMLPKIFacebookglobal
I (ICTDFN-AAINREN Federation   GermanyDEM/P (R&E)prod 2007106 LA x    x    B SAML    COAUTHGoogle AppsglobalI (ICT)
prodNemLog-In"Easy Log-in" for Danish citizens DKO (Pub)prod   LA  LA      CSAML
WAYF/ForskningsnettetNREN Federation DenmarkDKM/P (R&E)prod 110      x   BmultipleGoogle-Yahoo-FacebookglobalI (ICT)prod20111500LAxSAML
NETSScandinavian countries: Payment and related services, employing identity federationDK/FI/IS/NO/SEK (Fin)prod   7 LA/DS x   x    xCCSAML
OpenIDICAOglobalCatcertSpanish regional implementations (Catalonia)ESO (Pub)prod2003  4PALA    x    C SAML     CotherIGTFglobal
M (ScienceDNI electrónicoSpanish national eID-CardESO (Pub)prod20052006 LA    x3PA/LA/DS     x    C 
DSIRPKIMobile Phone NetworkglobalI (ICTNREN Federation   SpainESM/P (R&E)prod1990200820016001LA         x    B SAMLCotherOIXglobalI (ICT)    
 epSOSB2B for Health Care Professionals - cross borderEUQ (Health)pilot2012   LA/Zx      x   B  multipleOpenIDglobalI (ICT)prod2005 LAxWS-Trust
GÉANT/SA3R&E networkEUM/P (R&E)     LA     x    B SAMLCOpenIDSAFE-BiopharmaglobalQ (Health)prod
 PEPPOLProvide cross-border electronic public procurement (B2G)EUO (Pub)pilot         x   B SAML   BPKITrust Network(Identrust) 
globalSEPASingle Euro Payments Area (SEPA) governed by the European Payment CouncilEUK (Fin)prod1999    LA      x       B?PropTwitterglobalI (ICT)prod  LA x
STORKFederate national eIDs within Europe (STORK1: G2C, STORK 2: B2C)EUO (Pub)pilot2011         x   C  COAUTHWLHC Id FederationglobalM (Science)planned 0,1LA/Z    xSAML
Trust Service Status ListList of accredited CAs that provide qualified or advanced signatures, operated by the European commission.EUO (Pub)prod2010        x  BCSAMLGRNETGRM/P (R&E)prod20070,4LA PKI
e-SWB "e-Signature without borders"electronic SignatureEU, RU prod   xDS      x   C PKI
BSAMLAAI@EduHrHRHaka/FunetNREN Federation FinlandFIM/P (R&E)prod 0,7LA   prod x124       x   BSAMLeduID.hu (HREF Federation)HU
M/P (R&EKATSOAuthN & AuthZ for eGov servicesFIO (Pub)prod20102006  LA/Z    x    B SAML     BSAMLEdugateIEM/P (R&E)prod 0,1
LAMobiilivarmenneOperator run Mobile PKI AuthNFIO (Pub)prod2010  LA    x   CETSI MSS
NetpostiPostal ServiceFIO (Pub)prod x           B SAML
RHnetISM/P (R&ENetsoFederation of motor insurance companiesFIK (Fin)prod 2007      x      B SAML   BSAMLICARIT
Tunnistus.fiIdP Proxy service for Banks and eID cards  (C2G; federated with Vetuma)FIO (Pub)prod20092004 LA  LA     x    C SAML    SAMLIDEMITM/P (R&E)prod 3LA
TUPASFederation of Banks in the role of IdPs for citizen facing Government and Commercal SPs (C2G)FIO (Pub)prod    x     x     BSAMLItaly national eIDITCTUPAS (proprietory)
VetumaIdP Proxy service for Banks, eID cards and Mobile PKIFIO (Pub)plannedprod 2006      x       SAML   CSAMLMinistry of Transportation Motorists’ PortalIT
VIRTUAuthenticate public sector employees for services within the public sector (G2G, some B2G)FIO (Pub)prod      x2009   LA     x   BSAMLSistema Pubblico di Connettività
ITFC2eGov, commerce federation pilotFRO (Pub)prodpilot 2005  LA    x   C?
Fédération Éducation-RechercheNREN Federation   FranceFRM/P (R&E)prod20061231LA    x   BSAMLau easy payment (au Kantan Kessai)JPI (ICT
Mon Service-publicGovernment service portal for citizens (health, tax, ..)FRO (Pub)prod20102008     3LA            COpenIDSAMLGakuNinJPM/P (R&E)prod20100,5LAx  
 Orange-FTOrange is IdP with the use base of its telco services to a number of service providersFRI (ICT)prod2010   LA     x   BCmultiple SAMLJALJPH (Trans, API, OpenID
PSA Partner PortalPeugeot/Citroen Suppler NetworkFRC (Man)prod200715LA2008 x      x xx   xBC OpenIDmiixi Graph APIJP
I (ICTGRNETNREN Federation   GreeceGRM/P (R&E)prod2007201025 LA    x   BSAML
AAI@EduHrNREN Federation   CroatiaHRM/P (R&E)prod 1001LA     x   CBOpenIDNTT Docomo LoginJPI (ICT)prod2010        SAML
eduID.hu (HREF Federation)NREN Federation   HungaryHUM/P (R&E)prod201050 LA     x    BCSAMLOpenIDNTT ID Login ServiceJP
I (ICTEdugateNREN Federation   IrelandIEM/P (R&E)prod2010  20  LA     x    B SAML 
RHnet NREN Federation  Island COpenIDRakuten JPG (TradeISM/P (R&E)prod200962LA x       x    BxSAMLCOpenIDSoftBank PaymentJP
I (ICTICARInteroperability and Application Cooperation between the regionsITO (Pub)prod20112009   LA          SAML
 IDEM NREN Federation   Italy  COpenIDYahoo! AuthJPG (TradeITM/P (R&E)prod2008 LA69      3LA     x    BCSAMLOpenIDLAIFELVM/P (R&E)prod20100,1LA
Italy national eIDeID authentication processITO (Pub)planned    x     x    C BSAMLMyIFAMMYM/P (R&E)prod2012 LASAML
Ministry of Transportation Motorists’ PortalMinistry for road and post office bank federate in the area of fine payment (Traffic Ticket Collection)ITO (Pub)prod     x      x    BSAMLEHerkenningNL
Sistema Pubblico di ConnettivitàPublic Connectivity System (SPC): Italian Government FederationITO (Pub)prod20102005 LA   LA    x       BSAML
SURFnetNLLAIFENREN Federation   LatviaLVM/P (R&E)prod 0,7LA    x  E)prod20102 LA     x   BSAML
DigiDDutch eID schmea for citizensNLO (Pub)prod2006 9LA        CSAML
EHerkenningeReconitionNLO (Pub)prod201015 LA      C xBSAML
FEIDE/UninettNOSURFnetNREN Federation   NetherlandsNLM/P (R&E)prod20030,7LA  &E)prod  83x1 LA     x    BSAMLNorwegian Railroad
AltinnGovernment portal to establish new businessesNOH O (TransPub)prod 2008 33  1              BSAMLNZ Gov AuthNNZO (Pub)prod 0,5LA    x
FEIDE/UninettNREN Federation  NorwayNOM/P (R&E)prod20031501LA    x    B SAML
CSAMLRealMeNZO (Pub)pilotNorwegian ?Railroad B2B networkNOH (Trans)prod             B SAML 
RCTSaai NREN Federation   Portugal  CSAMLTuakiri New Zealand Access FederationNZPTM/P (R&E)prod 0,01LA  E)prod  8x  LA     x   BSAMLFCCNPT
M (ScienceBankIDSwedish banks, every bank issues IdsSEO (Pub)prod  4     x    C SAML     BSAML
RCTSaaiPTSWAMID/SUNETNREN Federation SwedenSEM/P (R&E)prod 2007 140LA    x       x   BSAMLBankID
SkolfederationSecondary/primary education (prod 2013)SE M/P (R&E)prod pilot2012     x       SAML  CSAMLSWAMID/SUNETSEM/P (R&E)prod2007 
eID2National eID Federation (Svensk e-legitimation)SEO (Pub)pilot2010    x          SAML
ArnesAAI Slovenska izobra