An identity system for the Web that lets people use a single username and password to log in and authenticate themselves to OpenID-compliant Web sites. OpenID is a free system that is distributed across the Internet and maintained by numerous organizations, including major sites such as AOL and Yahoo!.
OpenID is also supported in the emerging identity metasystem and can be one of many ID card choices displayed in the card selector's window (see identity metasystem).
Whom Do You Trust?
A major feature of OpenID is that users can decide which OpenID identity provider they trust the most to authenticate them. In fact, users can also become their own identity provider.
The Relying Party Queries the Identity Provider
A Web site that accepts OpenID is known as a "relying party," because it relies on an OpenID identity provider (IdP) for authentication. The OpenID username, called an "OpenID identifier," can be the URL of the provider with username appended, or it can be an XRI i-name if the relying party accepts it. I-names are human-friendly names, such as "=john.doe," that are linked to the OpenID provider, just like domain names are resolved by the DNS system into actual IP addresses on the Internet (see i-name).
When a user logs into an OpenID Web site, the script in the Web page redirects the browser to the identity provider. Using a password or other method, the identity provider attempts to authenticate the user and informs the Web site of its success or failure. For more information, visit www.openid.net. See single sign-on and identity metasystem.
An OpenID Authentication
This is a simplified example of the OpenID authentication sequence. What is not shown is that right after a user logs in, the relying party and identity provider typically share secret keys so that subsequent transactions are more secure.
Hacker-Proof OpenID
Instead of using a password that can be stolen, the myVidoop OpenID system (www.myvidoop.com) uses a different one each time. When creating a myVidoop account, users choose topics, and for authentication, myVidoop displays those topics in random order. In this example, if the topics were computers, money and cars, the password would be X-H-K for this session only. The next time, images and order will change.
OpenID is also supported in the emerging identity metasystem and can be one of many ID card choices displayed in the card selector's window (see identity metasystem).
Whom Do You Trust?
A major feature of OpenID is that users can decide which OpenID identity provider they trust the most to authenticate them. In fact, users can also become their own identity provider.
The Relying Party Queries the Identity Provider
A Web site that accepts OpenID is known as a "relying party," because it relies on an OpenID identity provider (IdP) for authentication. The OpenID username, called an "OpenID identifier," can be the URL of the provider with username appended, or it can be an XRI i-name if the relying party accepts it. I-names are human-friendly names, such as "=john.doe," that are linked to the OpenID provider, just like domain names are resolved by the DNS system into actual IP addresses on the Internet (see i-name).
When a user logs into an OpenID Web site, the script in the Web page redirects the browser to the identity provider. Using a password or other method, the identity provider attempts to authenticate the user and informs the Web site of its success or failure. For more information, visit www.openid.net. See single sign-on and identity metasystem.
An OpenID Authentication
This is a simplified example of the OpenID authentication sequence. What is not shown is that right after a user logs in, the relying party and identity provider typically share secret keys so that subsequent transactions are more secure.
Hacker-Proof OpenID
Instead of using a password that can be stolen, the myVidoop OpenID system (www.myvidoop.com) uses a different one each time. When creating a myVidoop account, users choose topics, and for authentication, myVidoop displays those topics in random order. In this example, if the topics were computers, money and cars, the password would be X-H-K for this session only. The next time, images and order will change.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2009 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- Find the answer to anything with StackExchange
- When you hear the word "forum", what comes to mind? Ugly websites, lengthy wait times, dead ends, and 1999. The guys behind Stack Overflow have redefined the web forum into something interactive, easy-to-use, and surprisingly reactive. On Stack, you simply ask a question...
- Blog posts 2009-09-27
- ZDNet breaks down the comment wall
- Yes!I love DISQUS. Would be a great addition. One step at a time, I suppose. :)Finally!Glad to see the wall coming down. I'll be happy to comment here more often instead of just skipping directly to Friendfeed.RE: ZDNet breaks down the comment wallI'd really love to see y'all implementing...
- Discussion threads 2009-09-23
- News to know: Apple; AT&T; Google Books; Palm Pixi; Verizon; Best Buy-Microsoft
- Here are today's notable headlines. You can get News To Know via email alert and RSS daily. For continuous updates see BNET's around-the-Web tech coverage. Sam Diaz: Live blog from Apple's "It's only Rock n Roll" event Apple afterthoughts: The real news is what...
- Blog posts 2009-09-10
- OpenID biggest government boost yet for open source
- We still need to come up with a fool proof way to keep hackers from resetting your Yahoo, Google, MSN, or AOL account and taking control of your identity. Of course it also has to be easy for the REAL owner to recover his password if he forgets it. Open...
- Discussion threads 2009-09-09
- OpenID biggest government boost yet for open source
- All this means opponents of the current Administration are bound to see OpenID as some sort of "mark of the beast." But if Bush did it Democrats would feel that way, so you can't win. by Dana Blankenhorn
- Blog posts 2009-09-09
- OpenID, meet the U.S. government
- In other words...IOW, these vendors are colluding with the government on a "bar code on your forehead" type identity plan. Won't be long now...this "identity" will be require to buy or sell...as prophesied long ago....Yep!Just like MS tried and failed!You ALREADY can't do anything without a Passport, Picture ID,...
- Discussion threads 2009-09-09
- OpenID, meet the U.S. government
- The U.S. government has now joined the OpenID effort. Ten technology players said Wednesday that they will support President Obama's initial pilot programs to make it easier to register and work with government Web sites. OpenID is an identity system for the Web that lets people use...
- Blog posts 2009-09-09
- Facebook plays OpenID relay (with Gmail)
- fill with video convertersDVD to AVI MAC 90.0 Convert all sorts of video formats from one to another for all portable players.
- Discussion threads 2009-08-24
- Open Trust Frameworks for Open Government: Enabling Citizen Involvement Through Open Identity Technologies
- Open government requires a way for citizens to easily and safely engage with government websites. Open identity technologies - specifically OpenID and Information Cards - fit this bill. They make it easier and safer for citizens to register, login, and when necessary share personally identifiable information across different websites and...
- White papers 2009-08-10
- News to know: Windows 7 RTM review; Microsoft-Yahoo; SAP; Sprint
- Here are today’s notable headlines. You can get News To Know via email alert and RSS daily. For continuous updates see BNET’s around-the-Web tech coverage. Ed Bott: Windows 7 first look: More than just "Vista, fixed" Gallery: Windows 7 RTM...
- Blog posts 2009-07-30
- Google OpenID's it up with Google Apps
- Google OpenID's it up with Google AppsI would rather use passport...And I will :) RE: Google OpenID's it up with Google Appshow salesforce supports OpenID ? please paste a link to some document having instructions. thanks!
- Discussion threads 2009-07-29
- Google OpenID's it up with Google Apps
- Google has announced that users can now sign into third party websites (that implement the Google's OpenID Federated Login API) with their Google Apps account. OpenID is a secure and private SSO technology that is slowly, but surely being adopted. Some of the websites that are...
- Blog posts 2009-07-29
- News to know: AMD; Windows 7; Chrome OS; 'Slow IT'
- Here are today's notable headlines. You can get News To Know via email alert and RSS daily. For continuous updates see BNET's around-the-Web tech coverage. Larry Dignan: AMD rounds out six-core Opteron lineup Joe McKendrick:Â In praise of 'slow IT' Mary Jo...
- Blog posts 2009-07-13
- Google Apps users to get OpenID authentication
- Google Apps users to get OpenID authenticationLeveraging Google-enabled OpenID accountsFor anyone wanting to accept registration and login from the 1+ million Google-enabled OpenID companies, check out http://rpxnow.com
- Discussion threads 2009-07-12
- Internet Scale Identity Systems: An Overview and Comparison
- An Internet-scale identity system is an architecture that defines standardized mechanisms enabling the identity attributes of its users to be shared between applications and Web sites. This enables a streamlined and optimized online experience for users, greater protection from identity theft and opportunities for customization and personalization that do not...
- White papers 2009-05-22
- Earth System Grid Authentication Infrastructure: Integrating Local Authentication, OpenID and PKI
- Climate scientists face a wide variety of practical problems, but there exists an overarching need to efficiently access and manipulate climate model data. Increasingly, for example, researchers must assemble and analyze large datasets that are archived in different formats on disparate platforms, and must extract portions of datasets to compute...
- White papers 2009-05-20
- News to know: IBM; SAP; Microsoft; Sarbanes-Oxley; EMC
- Here are today’s notable headlines. You can get News To Know via email alert and RSS daily. For continuous updates see BNET’s around-the-Web tech coverage. Larry Dignan: IBM rolls out the 'Smart Cube' with app market: Think enterprise iPod-iTunes combo Joe McKendrick: Goodbye, SOX? AP: Supreme Court to...
- Blog posts 2009-05-19
- Facebook plays OpenID relay (with Gmail)
- Facebook has started its implementation of OpenID with the first phase allowing new users to register with their Gmail accounts. Current users can connect Facebook with other OpenID accounts. The social networking site joined OpenID's board in February. In a blog post, Facebook said:...
- Blog posts 2009-05-18
- Are social networks the next-gen commerce, CRM hubs?
- The era of social commerce is on its way in the next two years and social networks are likely to become more powerful than corporate Web sites and customer relationship management software, according to a Forrester report. The report, penned by Forrester analyst Jeremiah Owyang, examines five...
- Blog posts 2009-04-27
- Defensio for WordPress 2.0.3 (Windows)
- Defensio is a spam filtering web service that you can use to protect your blog or web application from comment spam. Features: Spam quarantine sorted by spaminess. OpenID support when used in conjunction with the WP-OpenID plugin. Background color applied to spam comments to increase ease-of-identification. Spam comments collapsed (and...
- Software downloads 2009-04-23
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Keep Up With The Latest In Document Management with The DocuMentor.
-
Doc delivers the scoop on today's enterprise content management, printer maintenance, and all other issues related to document management. It's the DocuMentor Blog.
- Learn more >>
- Microsoft Dynamics CRM Online - Free Six-Month Trial for Eligible Organizations
-
Microsoft Dynamics CRM Online provides fast online access, simple contact management and better sales performance for a low monthly cost - the best value on the market today.
- Learn more about the free, six-month trial offer>>
- New Online Dashboard for IT Leaders
-
Read about top issues IT decision-makers face every day, plus get cost-effective solutions to real-life IT problems.
- Learn more >>
Enterprise Applications
- Check out some of the easiest and most powerful ways to boost productivity while saving money on your application infrastructure. See ZDNet's comprehensive Enterprise Application resource center, now!
- New Online Dashboard
-
- Read about top issues IT decision-makers face every day, plus get cost effective solutions to real life IT problems. Oracle Topline
-
