Open Identity Trust Framework


Open Identity Trust Framework (OITF) is a Trust Framework that was first introduced in the Open Identity Exchange's first White Paper, "An Open Market Solution for Online Identity Assurance," which detailed Open Identity Exchange's (OIX) solution to Internet-scale identity assurance. The problem that arises in open identity transactions is one of trust, such as whether a relying party can trust credentials from an identity service provider without knowing whether that provider’s security, privacy, and operational policies are strong enough to protect the Relying Party.

Therefore, it is necessary to establish a system that enables parties to trust each other's information when making transactions. In Digital Identity systems, a trust Framework is a pre-negotiated set of business, legal, and technical agreements that bind all stakeholders with mutual assurance that online transactions are reliable and repeatable.

Every Open Identity Trust Framework is defined by a set of policy makers that represent a trust community—a set of parties who need to maintain trust in online interactions. Technically these policymakers are the authors of the Trust Framework specification and the authority for its content. The trust community is also responsible for maintaining and overseeing the trust framework specifications.

Once a trust framework has been specified,the policymakers may contract with one or more Trust Framework Providers (TFPs) to administer it. The TFP first must publish the trust framework so it is publicly accessible. The TFP then must accept applications from businesses and other groups that wish to join the trust framework as identity service providers and verify that they comply with the framework's requirements. It also must publish updates to the trust framework as it is revised.

OIX is building a global listing service called OIXnet. The OIXnet registry is a database of (white-lists) databases, a machine-readable information repository of trust framework participants, processes and certifications.

More Information#

There might be more information for this subject on one of the following: